last executing test programs: 16.933792663s ago: executing program 2 (id=269): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x74, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r3}, 0x18) prctl$PR_CAP_AMBIENT(0x2f, 0xbbcdb831fb6d839b, 0x17) ioctl$BTRFS_IOC_INO_PATHS(r3, 0xc0389423, &(0x7f0000000300)={0x80, 0x8, [0x444, 0x3, 0x3, 0x1ff], &(0x7f0000000280)=[0x0]}) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) r4 = landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) renameat2(r0, &(0x7f00000001c0)='./file0\x00', r0, &(0x7f0000000200)='./bus/file0\x00', 0x3) 16.633339156s ago: executing program 0 (id=272): syz_usb_connect(0x0, 0xfa, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x90, 0x25, 0xed, 0x40, 0x1bc7, 0x1073, 0x9997, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0xe8, 0x1, 0x7, 0x0, 0x50, 0x0, [{{0x9, 0x4, 0xd0, 0x0, 0x1, 0xff, 0xd9, 0xae, 0x0, [], [{{0x9, 0x5, 0x5, 0x4, 0x10, 0x7, 0x3, 0x71, [@generic={0xc6, 0xf, "a0b0d2d65989dd9ebeb9ad0cedf5e832b17102fab8bee3d54795acfe5a4d16ca450e22dd61ad3b89864c6edb9d1c13e65a3da6eb5aeac4959d347c77c62e4e48323592b29533e13af6557496f6d4fe5846643e5f8c4373d7b438f21c3085ffd27d5975695a2c280604e3173203ffe2226d1c3f1a88a720119613c8800ad32ddd1969284ad6b69481adac94220cf80028a541a4854dbd59e28ebc11f9e9c7886198e41a13bf18a0d1105913b53bda88498db5f52b9dac7b9735dbb938d9bcf7a698e27566"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x69, 0x400}]}}]}}]}}]}}, 0x0) 16.139245312s ago: executing program 2 (id=274): r0 = socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2a0080, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x4}}, 0x10, 0x0}, 0x30044011) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') read$FUSE(r5, &(0x7f0000001700)={0x2020}, 0xffffff1e) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000a40), 0xffffffffffffffff) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r7, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="0d2bbd7000fedbdf2508000100"/24], 0x18}, 0x1, 0x0, 0x0, 0x9040}, 0xc010) r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCADDRT(r8, 0x890b, &(0x7f0000000100)={0x0, @l2tp={0x2, 0x0, @multicast2, 0x3}, @sco={0x1f, @none}, @llc={0x1a, 0x205, 0x1, 0x2, 0x1, 0x9, @local}, 0x200, 0x0, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x8000}) dup3(r0, r8, 0x80000) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0xffffffffffffff39, &(0x7f0000000180)={&(0x7f0000001640)=@newtaction={0x94, 0x30, 0x1, 0x0, 0x0, {}, [{0x80, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0x30, 0x2, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x94}}, 0x0) socket$inet6(0xa, 0x2, 0x0) 14.341602678s ago: executing program 0 (id=278): syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0xa9d7, 0x800, 0x2000000, 0x3a6}, &(0x7f00000001c0)=0x0, &(0x7f0000000200)) syz_open_dev$radio(&(0x7f00000003c0), 0x2, 0x2) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0xc010) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000180)=0x6f) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) read$dsp(r3, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r2, 0x0, 0x0) syz_usb_connect(0x3, 0x2d, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r1) socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$radio(0x0, 0x2, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000002700)=""/102392, 0x18ff8) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) 12.852284662s ago: executing program 0 (id=283): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) symlink(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x89e0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(0x0, 0xea) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000240)={0x43, 0x3, 0x3, 0x3}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="7472796c6f630900000034351d5dee63b5c802fe2c21910c21be9d5c8f0000000000"], 0xf) creat(0x0, 0xecf86c37d53048cc) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x204001, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201100112201040ac0501854e9e0102030109021b0001000090000904a000010e010000092505030800000010"], 0x0) read$msr(r2, &(0x7f000001aa40)=""/102400, 0x19000) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) recvmmsg(r6, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000440)=""/196, 0xc4}], 0x1}, 0x828}], 0x1, 0x2000, 0x0) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) setsockopt(r0, 0x84, 0x81, &(0x7f00000000c0)="1a00000082000000", 0x8) 11.203946535s ago: executing program 2 (id=289): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) symlink(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x89e0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(0x0, 0xea) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000240)={0x43, 0x3, 0x3, 0x3}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="7472796c6f630900000034351d5dee63b5c802fe2c21910c21be9d5c8f0000000000"], 0xf) creat(0x0, 0xecf86c37d53048cc) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x204001, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201100112201040ac0501854e9e0102030109021b0001000090000904a000010e010000092505030800000010"], 0x0) read$msr(r2, &(0x7f000001aa40)=""/102400, 0x19000) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) recvmmsg(r6, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000440)=""/196, 0xc4}], 0x1}, 0x828}], 0x1, 0x2000, 0x0) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r7 = fsmount(r5, 0x0, 0x81) fchdir(r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) setsockopt(r0, 0x84, 0x81, &(0x7f00000000c0)="1a00000082000000", 0x8) 9.232291615s ago: executing program 3 (id=294): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xc4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000103, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000680)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10138, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f00000002c0)={0x8040000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="024b1b7f37da6a5a2e000000000000006cbf360e709ea33b302cf616d641ab5af6ef4acdb05be7b7357b34482bd9a5fb2ed48451c09085fa00bd6403a6e97afbc202eeb06a80c09ff74f94e05a671fb97870f1a2997bf16345"], 0x10}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) listen(r0, 0x8) listen(r0, 0x400) r6 = syz_usb_connect$sierra_net(0x5, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x0, 0x2, 0x0, 0x7, 0x2, 0x10}, {0x9, 0x5, 0x3, 0x2, 0x400, 0xfa, 0x6, 0xa7}, {0x9, 0x5, 0xf, 0x3, 0x7bf, 0x5, 0x3, 0x81}}}}}}]}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000800)='cgroup.controllers\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000004c0)={{}, &(0x7f0000000440), 0x0, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x200000000000025d, &(0x7f0000002340)=ANY=[@ANYRES32=r5], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0x8, &(0x7f0000000280)=ANY=[@ANYRES64=r5, @ANYRESHEX=r6], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sched_cls=0x2f}, 0x94) 8.848209967s ago: executing program 1 (id=296): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond0\x00'}) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$qrtrtun(r1, &(0x7f0000000300), 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xd, @loopback, 0x3}, {0xa, 0x4e23, 0x2, @empty, 0xa4a1}, 0xffffffffffffffff, 0x7}}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x428480, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x5c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r7, @ANYBLOB="08002600940900000800b7"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 8.381546748s ago: executing program 0 (id=297): socket(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000003b810000850000007d000000850000005000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000100)='sys_exit\x00', r1}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000340), 0x0, 0x2000) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f0000000380)={0x0, 0x8000, 0x9}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sched_setscheduler(0x0, 0x2, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = syz_io_uring_setup(0xa0, &(0x7f00000002c0)={0x0, 0x305cc6, 0x1, 0x0, 0x20a}, &(0x7f0000000240)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffa, 0x0, 0x4) mlock(&(0x7f0000794000/0x2000)=nil, 0x2000) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0xc000000, &(0x7f0000000000)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x12}) io_uring_enter(r6, 0x847ba, 0x0, 0xe, 0x0, 0x0) 7.286241896s ago: executing program 2 (id=298): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000800850000006d000000850000000800000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0x16, &(0x7f0000000940)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xe980}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x150}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) socket$packet(0x11, 0x2, 0x300) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000000c0), 0x12) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xfffe, 0xf}, {0x6}, {0x10}}}, 0x24}}, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r7, 0x107, 0x1, 0x0, 0x0) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000240)={0x0, 0x1, 0x6}, 0x10) getpeername(r7, &(0x7f00000004c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000003c0)=0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000001f00)="de4dc043102f0e202515a02eac23", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000001c0)='usrquota') 7.007253353s ago: executing program 1 (id=300): sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000014}, 0x800) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net\x00') fchdir(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mincore(&(0x7f0000000000/0xc00000)=nil, 0xc00000, &(0x7f0000000140)=""/142) setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) socket$nl_audit(0x10, 0x3, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) r2 = syz_io_uring_setup(0x460, &(0x7f0000000480)={0x0, 0x40000020, 0x10, 0x2, 0x1ef}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0xffffffffffffff8a) 6.2062995s ago: executing program 2 (id=301): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) socket$inet6(0xa, 0x3, 0x4) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0xfffc, @broadcast}, 0x2}}, 0x2e) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$evdev(0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_generic(0x10, 0x3, 0x10) getpgid(0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x23, r2, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x4040800) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r3}, 0x10) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r4, 0x4, 0x2000) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x18c6) 5.76322492s ago: executing program 3 (id=302): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond0\x00'}) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$qrtrtun(r1, &(0x7f0000000300), 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xd, @loopback, 0x3}, {0xa, 0x4e23, 0x2, @empty, 0xa4a1}, 0xffffffffffffffff, 0x7}}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x428480, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, 0x0, 0x24000000) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r9, @ANYBLOB="08002600940900000800b7"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r1, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000600)={0x7c, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x800, 0x7c}}}}, [@NL80211_ATTR_FRAME={0x48, 0x33, @mgmt_frame=@assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x369e}, @device_b, @device_b, @from_mac=@broadcast, {0x8, 0x632}, @value=@ver_80211n={0x0, 0x7ffe, 0x2, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}}, 0x2000, 0x1000, {0x0, 0x6, @default_ap_ssid}, @void, @val={0x2d, 0x1a, {0x1000, 0x3, 0x0, 0x0, {0xfff, 0x0, 0x0, 0x40, 0x0, 0x1, 0x0, 0x2}, 0x400, 0x9, 0x5}}}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x7c}, 0x1, 0x0, 0x0, 0x14880}, 0x2000) 5.762170998s ago: executing program 1 (id=303): inotify_add_watch(0xffffffffffffffff, 0x0, 0x10000000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7f, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = epoll_create1(0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x141400, 0x26) r3 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@can={{0x3, 0x1}, 0x6, 0x0, 0x0, 0x0, "41523f8f79f1c2a0"}, 0x10}, 0x1, 0x0, 0x0, 0x20004080}, 0x4044081) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000200)={0xa0000019}) process_mrelease(0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x80003, 0x0) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x400000000, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000100)='blkio.reset_stats\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000040)=0x2, 0x12) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f0000000080)=0x1, 0x4) r6 = shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) mlockall(0x7) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) shmat(r6, &(0x7f0000ff9000/0x1000)=nil, 0x4000) shmctl$IPC_RMID(r6, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22640, 0x0) fcntl$getflags(r7, 0x408) 5.695144205s ago: executing program 0 (id=305): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) setrlimit(0x6, &(0x7f0000000000)={0x1bb5, 0x7}) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000180)="42e46a8c8b78fb2f709de8878d1496bdb0219b47ef3adbf4b3542647a4a097416a8100f2c9b951ccc21bbe385984b9758e8fc7ed615b12958a8e0db090def6b6da4b847820fb0bd1eac17e03ff806ab8336e4a2b533c0f32bb803297", 0x5c}, {&(0x7f0000000500)="278034a6896d9862a0bcd597e6d6147ccd2f3fb4c5da6bef91b9ee1d2dc8b493af6addbcf5f71ef181af130e07b7dcbc3192054e71c3700df51196ecc41eca878d1dee", 0x43}, {&(0x7f0000000040)="1a193fd12d35933adaf7797ee00146ba1a246e04384e6e0e5c870996474d51511bf65251", 0x24}, {&(0x7f0000000580)="d83590c94361cfbccc7a9e63d9a1219ce961afcf381c2561472aa96eecfc0a4840ae651adcd8d48085207b5736ba9222453c93db9ae6074b40c75abbcfab2ea8924fb17017877af67020c3ae7cac34ca8ad7b44145f7abe332ff8d993270de84adb124a949428c8d689f3a0bd201baa920dfaa9ae21d622f61976c5ffddad5a0f70de32b556aaa1e7e469adde7230ebad139545a08fd872dd738e7681737294b46e8cad5ef5c76261c4dc2fbebee9989f79798bc583d1eb8488b59267bdbf17ec11b1d4f93d98bc3c19c20fa78bb581e4a9c9c81e0ab2fa2557c7174b6f20122cfc4b9c3b12de2617e676390fdd14d98c2961fda9b", 0xf5}, {&(0x7f00000007c0)="09657928f65132fa186e896337780675556918999af356f092553e198dec8142567589a4e23f7ee56838c848162609ce168b36122ae2527b698b43f182fbb9b0528806945e2d3c256a4d7b288a1f4b891dd7fdfa96582683e10b27f3962da89fbadd8a722d8b844bbb5eb7314aa24fb2dc85fddf8f8841bb24f4c6135d2e33df14bf05187f75c576733843e923d10691de0930b72e5ebad4", 0x98}, {&(0x7f0000000880)="260fc0f7369779760a7ad0aa9bce68f6047ca3447667b32c9abd3e7fcdebdd293557ef4f3fdf6e198517aa27f30db00d264c202b7f135a20e3b5898b815db7d2f79b1852acbfcc6d0bbcf6bf589eb554d0ef2bd682df65ae2df4e98adaf812eb39f858b750f9e1081f", 0x69}, {&(0x7f0000000900)="24ac3f634e1950757004f8f63217137efaafac1ef341f46dfd9346eac7aca8fb0dcd4e87d11edb5e44b3646a9a3bcf049cafefc5e537973b2de92fcb08405f758c566105c1d1834174cb76f60bccad9b4b81f1561170d7709ca413294eb66f4effb872d56b5566e97519594163144f286dac6b2def4d6f0497dc85f3e9db99d08269890ea3ec31afb80090163bd311970ab20614ded02a1c465938c4ff625c064c23390981ae89b667565a28f2b6af9a357382aa3bfc27", 0xb7}], 0x7, &(0x7f0000000b40)=ANY=[@ANYBLOB="c44000000000000000000000070000008917aee0000002ac1e010164010100e000000200000000017c785eb21bf867f2441c6c23ac1414aa00000001000000000000000764010101ffffffff8649ffffffff0611bc44fcbc8c3808befb5d1f720e0892020fb72fa5b440638305c746aa6acf06056168b3000ebfc9da8ef83823753ba071670010fea8b4b90a558e8a774dc505bdac863400000002050feba2fd23a3923490a674b44316010f919ea5e201400624756910360207073a1d56335b0004a0ae07037e050200000000000000110000000000000000000000010000000500000000000000"], 0xe0}}], 0x1, 0x0) getpid() bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000dd0000000a00000000000000", @ANYRES32, @ANYBLOB="0000020000000000000000007e7200000000007e", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect(0x0, 0x51, &(0x7f0000000000)=ANY=[@ANYBLOB="120101024cf1c50863070210845f0102030109023f0001000000000904000005ff87e7000905ee63dd0000000009050300000000000009050cf2010002060209050f000000400000090507"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f00000010c0)={0x18, {"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", 0x1000}}, 0x1006) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x2, 0xe4, &(0x7f0000000a40)=""/228, 0x41100, 0x18, '\x00', 0x0, 0x0, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffca, 0x0, 0x0, 0x10, 0x7ff}, 0x94) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000006c0)={{{@in6=@private0}}, {{}, 0x0, @in6=@private2}}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x0, 0x400) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 5.586862889s ago: executing program 2 (id=306): r0 = syz_usb_connect$cdc_ncm(0x2, 0x7a, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000600), 0x1, 0x24002) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x42}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x400c8c1) sysinfo(&(0x7f0000000000)=""/196) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r1, 0x404c4701, &(0x7f0000000380)={0x5, 0xfffffffd, 0x0, 0x3, 0x12, "3e04000000000000000600000000000400"}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4000) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8000) accept$inet(0xffffffffffffffff, &(0x7f0000001500)={0x2, 0x0, @initdev}, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000006c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000080)=[{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f00000003c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000001c0)={0x0, 0xffffffffffffff9a, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/67, 0x51}, {&(0x7f00000002c0)=""/188, 0xbc}], 0x2}, 0x40010000) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x1ff, 0x0, 0x8009}, 0x10) write(r3, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000020000000200000800040001000000", 0x24) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x8, 0x0, 0x4}]}, 0x10) 4.875903901s ago: executing program 4 (id=307): socket(0x2, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001b000)=""/102400, 0x19000) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18}, './file0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r1, 0x0, 0x0, 0x200cc0c5, &(0x7f0000000080)={0xa, 0x4c20, 0x0, @mcast2}, 0x1c) sendto$inet6(r1, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420", 0x11, 0x8000, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f0000000040)=0x40, 0x4) recvmmsg(r1, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002003, 0x0) r2 = gettid() ptrace$setopts(0x4200, r2, 0x7ff, 0x41) r3 = openat(0xffffffffffffff9c, 0x0, 0x351142, 0x1cd) quotactl_fd$Q_GETQUOTA(r3, 0xffffffff80000700, 0x0, &(0x7f00000001c0)) syz_emit_vhci(0x0, 0x17) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000140)) r4 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x2000, 0x0) mq_notify(r4, &(0x7f0000000000)={0x110c23c000, 0x3, 0x2, @thr={0x0, 0x0}}) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}}) openat$audio1(0xffffffffffffff9c, 0x0, 0x40, 0x0) mremap(&(0x7f000000d000/0x4000)=nil, 0x4000, 0x3000, 0x7, &(0x7f0000ffb000/0x3000)=nil) 4.750479399s ago: executing program 3 (id=308): open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) open_tree(0xffffffffffffff9c, 0x0, 0x89901) socket$inet_tcp(0x2, 0x1, 0x0) fsopen(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001100)=ANY=[@ANYBLOB="200000006800e97800000000ffdbdf250a0000000000000008000500", @ANYRES32=r2, @ANYBLOB="ce2cb59827c9cbf50cb81f73e871d9a454cb8e4a9fd7d2179b5b50f6826d8a3ea8a54e73321a5d2139061411649026df4f929716026db110f26f13950f00a0a03179089fdccf81e502175c186b470d80ae0ab2d2e6916088af16f6d1baf71eab28487a5676fade2a942a8b4396d6e86e70ed59420ca54652749094fd8c1ab6910357861edcaae29263e0498c2ae2f49b3982e09cb708a733"], 0x20}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$TCFLSH(r6, 0x400455cb, 0x2) 4.290364487s ago: executing program 3 (id=309): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) symlink(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x89e0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(0x0, 0xea) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000240)={0x43, 0x3, 0x3, 0x3}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="7472796c6f630900000034351d5dee63b5c802fe2c21910c21be9d5c8f0000000000"], 0xf) creat(0x0, 0xecf86c37d53048cc) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x204001, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201100112201040ac0501854e9e0102030109021b0001000090000904a000010e010000092505030800000010"], 0x0) read$msr(r2, &(0x7f000001aa40)=""/102400, 0x19000) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) recvmmsg(r6, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000440)=""/196, 0xc4}], 0x1}, 0x828}], 0x1, 0x2000, 0x0) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r7 = fsmount(r5, 0x0, 0x81) fchdir(r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) setsockopt(r0, 0x84, 0x81, &(0x7f00000000c0)="1a00000082000000", 0x8) 4.289496717s ago: executing program 4 (id=310): syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0xffffffff, 0x0, 0x8000, 0x1, 0xffffffffffffffff, 0x2}, 0x50) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, 0x0) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x57, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000040)={0x2f, 0x1, 0x0, "3ad38eff230c000000002029fdfd0004100000410000000000000300", 0x32314d56}) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) 4.237675049s ago: executing program 1 (id=311): setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x841, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = syz_usb_connect(0x5, 0xf4, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f00000009c0)={0x2c, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="00039b0b52e10203"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c00000004000000040000000900000000000000", @ANYRES32, @ANYBLOB='\r\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000078a0285172"], 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x18, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x4}]}, 0x18}}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r4, 0x4018aee2, &(0x7f0000000240)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r3}, &(0x7f0000000880), &(0x7f00000008c0)}, 0x20) socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) socket$nl_xfrm(0x10, 0x3, 0x6) r8 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r8, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10, 0x0}, 0x3000c085) sched_setattr(0xffffffffffffffff, &(0x7f0000000180)={0x38, 0x3, 0x10, 0xeb8, 0x4, 0x5, 0x6, 0x0, 0x6, 0x2}, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r8, 0x1, 0x3e, &(0x7f0000000100)=r9, 0x4) sendmsg$inet(r8, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) sendmsg$BATADV_CMD_GET_DAT_CACHE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="0503000000000000f6ff0700000008000300", @ANYRES32=r7], 0x1c}}, 0x24044080) 3.218824731s ago: executing program 4 (id=312): r0 = socket$packet(0x11, 0x2, 0x300) io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0x14, &(0x7f0000003480)={0x0, 0x0, 0x4, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(0xffffffffffffffff, 0x1e, &(0x7f0000000000), 0x1) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYRESOCT=r0, @ANYRESOCT=r0], 0x0, 0x34}, 0x28) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000300)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) sendmsg$IPCTNL_MSG_EXP_DELETE(r2, 0x0, 0x4004815) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sysvipc/shm\x00', 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/disk', 0x169a82, 0x18c) unshare(0x40400) pselect6(0x40, &(0x7f0000000180)={0x1f, 0x0, 0x3ff, 0x0, 0xfff, 0xfffffffffffffffc, 0x0, 0xea0a}, 0x0, 0x0, 0x0, 0x0) read$FUSE(r4, &(0x7f0000002480)={0x2020}, 0x2020) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000680)}], 0x1}, 0x4000) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000002140)='/proc/asound/card1/oss_mixer\x00', 0x600000, 0x0) unshare(0x4c060d00) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x8884) r6 = syz_open_dev$vbi(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r6, 0xc0205649, &(0x7f0000000200)={0x0, 0x8000001, 0x1, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x0, 0x8000, '\x00', @p_u8=&(0x7f0000000100)=0x3}}) openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000002180)='./file0\x00', 0x8) bind$802154_dgram(0xffffffffffffffff, &(0x7f00000001c0)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0202}}}, 0x14) eventfd(0x0) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180)) 2.065336555s ago: executing program 4 (id=313): r0 = syz_open_dev$dri(0x0, 0x1, 0xaa001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000004c0)={{0x82, 0xfa}, 'port1\x00', 0xf3, 0x1b1c07, 0xfffffffa, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x8}) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000000c0)={"e5a11af80100007ea25edd00"}) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="280000000a14020027bd7000fbdbdf25080003000100000008009aea2c0f53a8c308010000000000"], 0x28}, 0x1, 0x0, 0x0, 0x20020000}, 0x20000804) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x10000005, 0x0, 0x0, 0x40e00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$UI_DEV_CREATE(r3, 0x5501) r4 = syz_open_dev$swradio(&(0x7f0000000340), 0x0, 0x2) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f00000003c0)=0xffffffffffffffff) ioctl$VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000400)=@multiplanar_userptr={0xb, 0x4, 0x4, 0x1000, 0x10, {0x77359400}, {0x5, 0x8, 0x7, 0x3, 0x6, 0xff, "3694d318"}, 0x400, 0x2, {&(0x7f0000000680)=[{0xe, 0x1, {&(0x7f0000000480)}, 0x200}, {0x7ff, 0x9, {&(0x7f0000000640)}, 0x7}]}, 0x29aa, 0x0, r5}) syz_emit_ethernet(0x3c, &(0x7f00000010c0)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb86dd60dd690b00482f00fc000000000000000000000000000000ff0200000000000000000000000000012420542246d71222eb000000000000000000000800000086dd080088be00000000100000000100000000000000080022eb0000000020000000020000000000000000000000080065"], 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800fbc524f680000020000103fcffffff0000000002000000050000030f0000000c000c400000040000007fff"], 0x28}}, 0x42094) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x439, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1303}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x3c}}, 0x0) mount$tmpfs(0x0, 0x0, &(0x7f0000000180), 0x44441, &(0x7f0000000b00)=ANY=[@ANYBLOB="67fe7071766f74616f6c9a5f686172646c696d69743d3965e09848e493c3495aa500", @ANYBLOB="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"]) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8) bind$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfb, 0x4000000}, 0xc) 1.266302198s ago: executing program 0 (id=314): sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000014}, 0x800) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net\x00') fchdir(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mincore(&(0x7f0000000000/0xc00000)=nil, 0xc00000, &(0x7f0000000140)=""/142) setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) socket$nl_audit(0x10, 0x3, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) r2 = syz_io_uring_setup(0x460, &(0x7f0000000480)={0x0, 0x40000020, 0x10, 0x2, 0x1ef}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0xffffffffffffff8a) 1.02256221s ago: executing program 4 (id=315): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x53}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x25}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000480), 0x4) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) truncate(&(0x7f0000000240)='./file0\x00', 0x648) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000400)='netfs_rreq_ref\x00', r5, 0x0, 0x9}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x143042, 0x80) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x9, 0x4, 0x80, 0x4}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000680)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="a1ab23bd7000fdffffff32000000080017015900000008000300", @ANYRES32=0x0, @ANYBLOB="24fce2e22e335bc4c7d01307cc8eb751b2a32ffcabbd6dbadfdafb7435f24e3900d271fa7d8d6812f7148f50254f2b5fa633"], 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0) r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000440), 0x14900) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r10, 0x40bc5311, &(0x7f00000005c0)={0x2, 0x1, 'client0\x00', 0x0, "51c40345fd231a38", "7ebc540c1d58fc02818ed9750acaf35971ac030cd70907280d7b029059fda92c", 0x4, 0x4}) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r11 = socket$kcm(0xa, 0x3, 0x3a) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x40100, 0x0) sendmsg$kcm(r11, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00\x00', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) 988.078563ms ago: executing program 1 (id=316): socket(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000003b810000850000007d000000850000005000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000100)='sys_exit\x00', r1}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000340), 0x0, 0x2000) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f0000000380)={0x0, 0x8000, 0x9}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sched_setscheduler(0x0, 0x2, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = syz_io_uring_setup(0xa0, &(0x7f00000002c0)={0x0, 0x305cc6, 0x1, 0x0, 0x20a}, &(0x7f0000000240)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffa, 0x0, 0x4) mlock(&(0x7f0000794000/0x2000)=nil, 0x2000) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0xc000000, &(0x7f0000000000)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x12}) io_uring_enter(r6, 0x847ba, 0x0, 0xe, 0x0, 0x0) 971.406683ms ago: executing program 4 (id=317): r0 = syz_open_dev$dri(0x0, 0x0, 0x202) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f00000000c0)) syz_open_dev$radio(0x0, 0x0, 0x2) r1 = memfd_create(&(0x7f00000003c0)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?&^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xe3\xe5\x19T\xff\x01\x00\x00\xe2\x9f\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\xaa\xe6\x05\xe4\xc3\x90\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\x97.A\x84\x1d\xc2\x86\x89{\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e/\x85c\xae\x9c\xe9\xc4\xd2\xf3\x9f\n-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\x12\x00\x00\x00\x00\x00\x00\x00[\xf9\r\t\xef{h\xb0\xc0\x00\x00\x00\x00\x06\xf8\x83\x87+nM\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?\x87\x84\\/y\xed\x01#?\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x10M\x8b\xd0\xc0\xb8Fb\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xdc\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5W\xfb\x82\xac\x19,\\D\x91T\xfd\x9c\xb8\x8b\x88\xa5O\x8fI\x00\xf0\xc9%\n\xa7\x0f:\xb0\xf5?\xc3\x88\x1e\xbb-\xa6\xecA\x92\xaf\xa4Xl\v\xa5\xca\v|\xe2N\xac\x80\xc7\x15\x96fh\x83\x15\xc7\xea\xd5\xe8\x89W\x11\xd7oC\xe4\x06\xa8[O\xe6\x1d=\x87\x93\x0f\x87I\xdf\xb1\xeb\x89\x11.\x01\x00\r`\x1e8\x94\xb7\xbc\xc3\xad\xf1\x92\xaf(A=A\x8b\xa5\xb0\x89\x9e5\x12\xa4\x9a\va\xdf\xf4\xea\xc6\xc7\x10g\x1d\xd5\xb0\x9d\xd2\xfc]fC\x8d\x0f\xa6q\x0f\xef\x90\xfe\x94k\xf1\xb8\xfa\xbbb\xb1\x00\x99\xf7\xfd\'\xae\x906\xe0\xaa\xdbtWWH\xa4L\xb5pe,\xdfN\x0f\x00\x01\x00\x00_H\xd4\xe3\xb2,oj\xac\xd7\xbd\xd0\xadW\x1f<\xd0s\xa8\x1f(\x00/ \xe4]@\xf7mA\xe8\xd1\xf4:\xb3\xeb\x81\xb9\x018\x1c\x95%o\x05x\x1a\x90\xf4\x03\xe7\xe9\xa9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x84\xe38\xac>\xbbqJ\x8f\x8cmu\x12\x1d\x9a\xd7\x1c}\x8a]1\x8a\x84\xedo\t*77\xbb0\x8b\xe5R\xc8\t\x94\xbc\x95\xc0\x92\xfc^e\x15\x10\x96\x18\'\xfa\x8e\x81\x03)3\xbf\xa6|\x88\x1f\xfb\xf0\xa3\xd2\x99\x06\xb1\x15\xc4\xe9\x80\xfb\xcfD\xe3\xff\xc1V\x00\xc4\xd1\xa1\xa6\xba\x9a\x91\xdb\x0f\xb6\xb9&\xf5\x05\x9b_\xde\xc6\xc4P\xf9,\xab\x13\xd0+*\xa3\x002\x19Z\x0e\xa7\xb9\xf2\xed\xd7#\b0\xba\xaa\x93\xf6\xef-\x1fL\xc6\xdc\xa7?\xf9\xbcdI\xca_\xa3\xbd\xe6,\xe6\x87$\xe8W8\xa6Zb\x1a7\xd7\x86\xe5\v\xa5\xaf\x8b\xd8t\x9fk\xee#\"\xa4\x96\xd5m\xdb\xb0\xdf\xa8\xb9{\xca\xea\nD|+;\x14\xc4\xe5\x9c\xebDJ\xf4\x19PFi\xce\xd6E9\x18\x1d~\x17\x06\xe9iDu:ou\a<\xaf\x8f0v\x81\xb1HC\xf3\x96\x96]bp\a\xdf7\xcb\x10x\xff\x17L\xde\xff\b\fm\a\x1b\x13\xe2[\xea,\xfc\x8ep<\xa4gq\xf4\xb4\xd7\x1d\'\xd6\xb5\xa3\x90\xf9\xf2\x1a\xaa\xb0\b\x7f\x89\xf7\x9e\x89\x85O\xe6U\x9fO\xa5\x8dfO\x11S\x00\xb6\x809\r\x96\xf2\xb8,\xe1N\xa1\xfd\xaa\x99\xe9\xb4\t\xf1(>\xf8fLBQ\xcf\x9c\xd4\x88\x96\xbc\xf0\xa4\xeb\x92\xd7\xc1\xef\x13\xc7U\x9b\xa8r\xc1_\x11<\x19?)\xb3\xfdf\xc3\xba\x1e\xbaY\xea|~^\x00\x1e\xea/\x1e\xd2&1Z@\xa50\x06s\xf2PP\xf9\xdcv\xc6\xaf\x12M\x8b\x12\xdbf\xb2r\x1a\x84\b\xde\b5\xdb[ruJ\xa0\xa9Nj\xd5<\xcc\xdeA4|1Ye\xd7\xf3\x1b\xedq)\xab_\xc1\aR\xef%\xfb\x9c\x18<\xa3\x133T\x89\xff\x99S\xb7n\xe3%\x05g*X\xe5\xfc\x97\x01\xec\xeb\xd6\rf\xbdl\xee\xca\x1c\xa2{\x98v\xcc\x8a\xcc\xa1\xf1\xb4\xf6\xe1\xc0\x96\xc8\x1c\x05C\x93\x1c\x89e\xc1~\xf3\xc8\xe8\xe6]S\xbd\xbe\xb3M\xc1\x9b\x05\x12\xe9C\x11\xbb\x03U\x80KRd\x14c3I\xa0\xc7\x8a\xba9\xfeH\x94\xb2\xe7h\xb1\x02\xf6\x0f\x02\xb0\xc3\xd8\x02\r\v\xfa\xc7\xbdE\xf6b\xde\xbeJ\x9509\xe8\x18\x05\x15zi\xba\tf7\x9b,\xa3\xa5\xa1\xc1|\xd2:D3z\x8f\x19\xa8\xe1d\xedk\xe8\xa2/\x95`$\x81\xc2g\x04u\x16\xbc{\xb7\x90\xbe\xeb\x85 \f ^I\xd5\x0e\r\xdf4\xd0\x95d\xe4\xaf\x83\x88\xd8l\xae\"\xef\xe5\xfc\x01\x15\xb5\x99U\x1c\xb1\x9c \xe7\xa6\x8fv\xfe\xea\x9a\x11\xe2-', 0x4) ioctl$FS_IOC_RESVSP(r1, 0x4030582b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x5}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = gettid() r4 = landlock_create_ruleset(0x0, 0x0, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000000)={0xe108, 0x0, 0x1}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) r6 = syz_create_resource$binfmt(&(0x7f0000000100)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r6, 0x41, 0x1ff) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}}) fchmodat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40) lremovexattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000240)=@known='system.posix_acl_default\x00') read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x78, 0x0, 0x3, {0x8000, 0xcd, 0x0, {0x2, 0x0, 0x9ef1, 0x1000, 0x5, 0x9b, 0xf79c000, 0x2339fdf8, 0x3, 0x8000, 0x538, 0x0, 0xffffffffffffffff, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) landlock_restrict_self(r4, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x8, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r7) sendmsg$IEEE802154_LLSEC_ADD_DEV(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)={0x3c, r8, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x3c}, 0x4, 0x700000000000000}, 0x40) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f00000002c0)=0x2, 0xb, 0x2, &(0x7f0000000300)={0x77359400}, &(0x7f00000004c0)=0x1, 0x2) 722.935232ms ago: executing program 3 (id=318): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond0\x00'}) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$qrtrtun(r1, &(0x7f0000000300), 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xd, @loopback, 0x3}, {0xa, 0x4e23, 0x2, @empty, 0xa4a1}, 0xffffffffffffffff, 0x7}}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x428480, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x30, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x58}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r7, @ANYBLOB="08002600940900000800b7"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 62.604538ms ago: executing program 3 (id=319): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86fb, 0x10100}, &(0x7f0000000040), &(0x7f0000000000)) socket$xdp(0x2c, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x47836cd3592ab724, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r6, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x2, 0x3, 0x14, "3eccd8000000000000000010000000040100"}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_procfs(r1, &(0x7f0000000000)='net/vlan/vlan1\x00') write$binfmt_misc(r7, 0x0, 0x0) r8 = socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc810}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x30, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}}, 0x24040084) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x31, 0x1) 0s ago: executing program 1 (id=320): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="20000000f1000000030000000000000000000040"], 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.148' (ED25519) to the list of known hosts. [ 57.382643][ T30] audit: type=1400 audit(1759406216.848:62): avc: denied { mounton } for pid=5807 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 57.406025][ T30] audit: type=1400 audit(1759406216.868:63): avc: denied { mount } for pid=5807 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 57.408453][ T5807] cgroup: Unknown subsys name 'net' [ 57.435620][ T30] audit: type=1400 audit(1759406216.898:64): avc: denied { unmount } for pid=5807 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 57.633506][ T5807] cgroup: Unknown subsys name 'cpuset' [ 57.641530][ T5807] cgroup: Unknown subsys name 'rlimit' [ 57.826242][ T30] audit: type=1400 audit(1759406217.288:65): avc: denied { setattr } for pid=5807 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=819 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 57.858747][ T30] audit: type=1400 audit(1759406217.288:66): avc: denied { create } for pid=5807 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 57.892273][ T30] audit: type=1400 audit(1759406217.288:67): avc: denied { write } for pid=5807 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 57.910378][ T5809] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 57.912993][ T30] audit: type=1400 audit(1759406217.288:68): avc: denied { read } for pid=5807 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 57.941610][ T30] audit: type=1400 audit(1759406217.298:69): avc: denied { mounton } for pid=5807 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 57.967275][ T30] audit: type=1400 audit(1759406217.298:70): avc: denied { mount } for pid=5807 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 57.992295][ T30] audit: type=1400 audit(1759406217.338:71): avc: denied { read } for pid=5489 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 58.936464][ T5807] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 61.075054][ T5821] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 61.082888][ T5821] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 61.100014][ T5831] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 61.101720][ T5821] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 61.108379][ T5831] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 61.121578][ T5821] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 61.131750][ T5831] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 61.140439][ T5834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 61.147917][ T5821] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 61.156352][ T5821] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 61.156648][ T5836] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 61.164277][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 61.171185][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 61.185476][ T5836] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 61.186765][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 61.193009][ T5836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 61.201074][ T5145] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 61.207773][ T5836] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 61.215311][ T5145] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 61.224584][ T5836] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 61.235314][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 61.247511][ T5836] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 61.250587][ T5145] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 61.262875][ T5836] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 61.275045][ T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 61.677481][ T5822] chnl_net:caif_netlink_parms(): no params data found [ 61.711416][ T5817] chnl_net:caif_netlink_parms(): no params data found [ 61.767715][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 61.866488][ T5817] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.873713][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.881729][ T5817] bridge_slave_0: entered allmulticast mode [ 61.888370][ T5817] bridge_slave_0: entered promiscuous mode [ 61.898317][ T5817] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.905755][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.912885][ T5817] bridge_slave_1: entered allmulticast mode [ 61.919732][ T5817] bridge_slave_1: entered promiscuous mode [ 61.965828][ T5819] chnl_net:caif_netlink_parms(): no params data found [ 61.984090][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.991213][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.998278][ T5822] bridge_slave_0: entered allmulticast mode [ 62.005603][ T5822] bridge_slave_0: entered promiscuous mode [ 62.012874][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.019917][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.027123][ T5822] bridge_slave_1: entered allmulticast mode [ 62.033837][ T5822] bridge_slave_1: entered promiscuous mode [ 62.067750][ T5817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.119930][ T5817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.144999][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.152837][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.159982][ T5826] bridge_slave_0: entered allmulticast mode [ 62.167486][ T5826] bridge_slave_0: entered promiscuous mode [ 62.187854][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.197116][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.205075][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.212248][ T5826] bridge_slave_1: entered allmulticast mode [ 62.218838][ T5826] bridge_slave_1: entered promiscuous mode [ 62.232095][ T5817] team0: Port device team_slave_0 added [ 62.239402][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.265488][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 62.275879][ T5817] team0: Port device team_slave_1 added [ 62.342774][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.352008][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.359098][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.367449][ T5819] bridge_slave_0: entered allmulticast mode [ 62.374588][ T5819] bridge_slave_0: entered promiscuous mode [ 62.385713][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.392778][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.418877][ T5817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.431783][ T5822] team0: Port device team_slave_0 added [ 62.439089][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.457271][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.464393][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.471625][ T5819] bridge_slave_1: entered allmulticast mode [ 62.478302][ T5819] bridge_slave_1: entered promiscuous mode [ 62.488251][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.495219][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.521503][ T5817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.533578][ T5822] team0: Port device team_slave_1 added [ 62.599563][ T5826] team0: Port device team_slave_0 added [ 62.606834][ T5826] team0: Port device team_slave_1 added [ 62.615266][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.637082][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.644209][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.651581][ T5829] bridge_slave_0: entered allmulticast mode [ 62.658187][ T5829] bridge_slave_0: entered promiscuous mode [ 62.681731][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.698445][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.705842][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.713957][ T5829] bridge_slave_1: entered allmulticast mode [ 62.720689][ T5829] bridge_slave_1: entered promiscuous mode [ 62.727336][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.734661][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.760921][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.789814][ T5817] hsr_slave_0: entered promiscuous mode [ 62.795883][ T5817] hsr_slave_1: entered promiscuous mode [ 62.810460][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.817558][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.844062][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.860098][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.867517][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.893568][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.913743][ T5819] team0: Port device team_slave_0 added [ 62.929189][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.936289][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.962424][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.979594][ T5819] team0: Port device team_slave_1 added [ 62.987370][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.038891][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.052095][ T5822] hsr_slave_0: entered promiscuous mode [ 63.058103][ T5822] hsr_slave_1: entered promiscuous mode [ 63.064307][ T5822] debugfs: 'hsr0' already exists in 'hsr' [ 63.070077][ T5822] Cannot create hsr debugfs directory [ 63.127982][ T5826] hsr_slave_0: entered promiscuous mode [ 63.134254][ T5826] hsr_slave_1: entered promiscuous mode [ 63.140081][ T5826] debugfs: 'hsr0' already exists in 'hsr' [ 63.146315][ T5826] Cannot create hsr debugfs directory [ 63.152405][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.159325][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.185253][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.217109][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.224678][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.224742][ T5832] Bluetooth: hci0: command tx timeout [ 63.250891][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.268053][ T5829] team0: Port device team_slave_0 added [ 63.291344][ T5829] team0: Port device team_slave_1 added [ 63.303297][ T5827] Bluetooth: hci3: command tx timeout [ 63.306796][ T5832] Bluetooth: hci1: command tx timeout [ 63.309093][ T50] Bluetooth: hci2: command tx timeout [ 63.381566][ T50] Bluetooth: hci4: command tx timeout [ 63.406152][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.413342][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.439304][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.452277][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.459209][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.485520][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.511906][ T5819] hsr_slave_0: entered promiscuous mode [ 63.518072][ T5819] hsr_slave_1: entered promiscuous mode [ 63.524204][ T5819] debugfs: 'hsr0' already exists in 'hsr' [ 63.529942][ T5819] Cannot create hsr debugfs directory [ 63.640289][ T5829] hsr_slave_0: entered promiscuous mode [ 63.646660][ T5829] hsr_slave_1: entered promiscuous mode [ 63.653243][ T5829] debugfs: 'hsr0' already exists in 'hsr' [ 63.658956][ T5829] Cannot create hsr debugfs directory [ 63.804803][ T5817] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.815530][ T5817] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.829871][ T5817] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.857076][ T5817] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.929350][ T5826] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 63.943782][ T5826] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 63.954567][ T5826] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 63.971886][ T5826] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 64.033804][ T5822] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 64.061029][ T5822] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 64.070157][ T5822] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 64.091230][ T5822] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.113207][ T5817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.174462][ T5819] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 64.188894][ T5817] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.206396][ T5819] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 64.215820][ T5819] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 64.237259][ T5819] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 64.255825][ T2993] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.263051][ T2993] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.299548][ T2993] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.306660][ T2993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.351572][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.390054][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.407156][ T5829] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 64.416454][ T5829] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 64.429111][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.436238][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.445920][ T1144] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.453052][ T1144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.473083][ T5829] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 64.483677][ T5829] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.506161][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.548774][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.593370][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.600962][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.612637][ T1144] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.616576][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 64.616587][ T30] audit: type=1400 audit(1759406224.078:86): avc: denied { sys_module } for pid=5817 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 64.619722][ T1144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.767768][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.868700][ T5817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.883005][ T5819] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.903452][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.929161][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.936325][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.956105][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.979946][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.987099][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.997219][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.004347][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.017789][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.049654][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.056765][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.096223][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.143573][ T5817] veth0_vlan: entered promiscuous mode [ 65.169923][ T5826] veth0_vlan: entered promiscuous mode [ 65.192341][ T5826] veth1_vlan: entered promiscuous mode [ 65.198934][ T5817] veth1_vlan: entered promiscuous mode [ 65.258565][ T5822] veth0_vlan: entered promiscuous mode [ 65.289301][ T5822] veth1_vlan: entered promiscuous mode [ 65.302636][ T50] Bluetooth: hci0: command tx timeout [ 65.324717][ T5826] veth0_macvtap: entered promiscuous mode [ 65.335895][ T5817] veth0_macvtap: entered promiscuous mode [ 65.353735][ T5826] veth1_macvtap: entered promiscuous mode [ 65.362235][ T5817] veth1_macvtap: entered promiscuous mode [ 65.381897][ T50] Bluetooth: hci2: command tx timeout [ 65.387302][ T50] Bluetooth: hci3: command tx timeout [ 65.392924][ T5827] Bluetooth: hci1: command tx timeout [ 65.427812][ T5822] veth0_macvtap: entered promiscuous mode [ 65.467257][ T50] Bluetooth: hci4: command tx timeout [ 65.469815][ T5822] veth1_macvtap: entered promiscuous mode [ 65.493347][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.512575][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.524038][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.537830][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.555298][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.563591][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.576757][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.598870][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.606111][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.615651][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.637461][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.647345][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.657054][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.669766][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.688935][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.698550][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.725623][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.744862][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.799322][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.815535][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.829908][ T5829] veth0_vlan: entered promiscuous mode [ 65.871489][ T3509] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.879410][ T3509] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.935742][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.948582][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.957294][ T5829] veth1_vlan: entered promiscuous mode [ 65.984678][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.018211][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.040712][ T2993] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.049013][ T2993] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.085977][ T30] audit: type=1400 audit(1759406225.548:87): avc: denied { mounton } for pid=5822 comm="syz-executor" path="/root/syzkaller.Vx1eTe/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 66.113819][ T30] audit: type=1400 audit(1759406225.548:88): avc: denied { mount } for pid=5822 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 66.138105][ T30] audit: type=1400 audit(1759406225.548:89): avc: denied { mounton } for pid=5822 comm="syz-executor" path="/root/syzkaller.Vx1eTe/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 66.149098][ T5829] veth0_macvtap: entered promiscuous mode [ 66.179213][ T5822] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 66.200476][ T5819] veth0_vlan: entered promiscuous mode [ 66.201037][ T30] audit: type=1400 audit(1759406225.548:90): avc: denied { mount } for pid=5822 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 66.219562][ T5819] veth1_vlan: entered promiscuous mode [ 66.233910][ T30] audit: type=1400 audit(1759406225.558:91): avc: denied { mounton } for pid=5822 comm="syz-executor" path="/root/syzkaller.Vx1eTe/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 66.247637][ T5829] veth1_macvtap: entered promiscuous mode [ 66.267835][ T30] audit: type=1400 audit(1759406225.558:92): avc: denied { mounton } for pid=5822 comm="syz-executor" path="/root/syzkaller.Vx1eTe/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7613 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 66.297880][ T30] audit: type=1400 audit(1759406225.558:93): avc: denied { unmount } for pid=5822 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 66.328376][ T2993] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.337722][ T3509] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.338452][ T30] audit: type=1400 audit(1759406225.588:94): avc: denied { mounton } for pid=5822 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2782 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 66.348684][ T3509] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.373640][ T30] audit: type=1400 audit(1759406225.588:95): avc: denied { mount } for pid=5822 comm="syz-executor" name="/" dev="gadgetfs" ino=7625 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 66.377766][ T2993] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.438758][ T5819] veth0_macvtap: entered promiscuous mode [ 66.460463][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.493036][ T5819] veth1_macvtap: entered promiscuous mode [ 66.544005][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.571899][ T3509] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.594609][ T3509] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.693822][ T3509] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.760830][ T3509] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.770018][ T5943] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'. [ 66.775958][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.960794][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 67.165410][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 67.206324][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.267926][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 67.314426][ T3509] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.343984][ T3509] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.372008][ T3509] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.388968][ T3509] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.391059][ T50] Bluetooth: hci0: command tx timeout [ 67.463437][ T50] Bluetooth: hci2: command tx timeout [ 67.468850][ T50] Bluetooth: hci3: command tx timeout [ 67.474708][ T50] Bluetooth: hci1: command tx timeout [ 67.546085][ T5827] Bluetooth: hci4: command tx timeout [ 67.557570][ T3509] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.571058][ T3509] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.960310][ T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.029358][ T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.200901][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 68.266714][ T2993] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.319939][ T2993] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.380866][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 69.006302][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.015014][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.075410][ T5967] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=5967 comm=syz.0.9 [ 69.101890][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 69.151042][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 69.330831][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 69.418196][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 69.430926][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 69.460842][ T5827] Bluetooth: hci0: command tx timeout [ 69.551139][ T50] Bluetooth: hci3: command tx timeout [ 69.551152][ T5832] Bluetooth: hci2: command tx timeout [ 69.561925][ T5827] Bluetooth: hci1: command tx timeout [ 69.620902][ T5827] Bluetooth: hci4: command tx timeout [ 69.745611][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 69.745623][ T30] audit: type=1400 audit(69.719:137): avc: denied { unlink } for pid=5974 comm="syz.4.5" name="#1" dev="tmpfs" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 70.236735][ T5981] lo speed is unknown, defaulting to 1000 [ 70.243789][ T5981] lo speed is unknown, defaulting to 1000 [ 70.244822][ T30] audit: type=1400 audit(69.829:138): avc: denied { create } for pid=5969 comm="syz.0.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 70.254939][ T5981] lo speed is unknown, defaulting to 1000 [ 70.270215][ T30] audit: type=1400 audit(69.829:139): avc: denied { write } for pid=5969 comm="syz.0.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 70.278307][ T5981] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 70.305005][ T5981] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 70.328201][ T5981] lo speed is unknown, defaulting to 1000 [ 70.334764][ T5981] lo speed is unknown, defaulting to 1000 [ 70.341999][ T5981] lo speed is unknown, defaulting to 1000 [ 70.348913][ T5981] lo speed is unknown, defaulting to 1000 [ 70.356396][ T5981] lo speed is unknown, defaulting to 1000 [ 70.969272][ T5990] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12'. [ 71.233687][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.240218][ T30] audit: type=1400 audit(70.499:140): avc: denied { name_bind } for pid=5971 comm="syz.1.11" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 71.263202][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.334697][ T30] audit: type=1400 audit(70.499:141): avc: denied { create } for pid=5971 comm="syz.1.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 71.458225][ T30] audit: type=1400 audit(70.509:142): avc: denied { mount } for pid=5974 comm="syz.4.5" name="/" dev="overlay" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 71.709600][ T5994] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13'. [ 71.946385][ T30] audit: type=1400 audit(70.619:143): avc: denied { block_suspend } for pid=5971 comm="syz.1.11" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 71.967566][ T30] audit: type=1400 audit(70.619:144): avc: denied { write } for pid=5971 comm="syz.1.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 72.550058][ T30] audit: type=1400 audit(72.489:145): avc: denied { create } for pid=5995 comm="syz.4.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 72.935959][ T30] audit: type=1400 audit(72.599:146): avc: denied { name_bind } for pid=5998 comm="syz.3.16" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 73.095729][ T6005] tipc: Started in network mode [ 73.102021][ T6005] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 73.112891][ T6005] tipc: Enabled bearer , priority 10 [ 73.457011][ T6015] netlink: 64 bytes leftover after parsing attributes in process `syz.3.18'. [ 74.315617][ T9] tipc: Node number set to 4269801488 [ 75.078244][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 75.078259][ T30] audit: type=1400 audit(75.049:165): avc: denied { read write } for pid=6039 comm="syz.1.25" name="raw-gadget" dev="devtmpfs" ino=819 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 75.161478][ T30] audit: type=1400 audit(75.089:166): avc: denied { open } for pid=6039 comm="syz.1.25" path="/dev/raw-gadget" dev="devtmpfs" ino=819 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 75.200686][ T30] audit: type=1400 audit(75.089:167): avc: denied { ioctl } for pid=6039 comm="syz.1.25" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 75.230552][ T30] audit: type=1400 audit(75.199:168): avc: denied { unmount } for pid=5829 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 75.400745][ T30] audit: type=1400 audit(75.369:169): avc: denied { create } for pid=6045 comm="syz.3.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 75.401016][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 76.270783][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 76.433280][ T9] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 76.550753][ T30] audit: type=1400 audit(76.439:170): avc: denied { create } for pid=6054 comm="syz.4.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 76.643741][ T9] usb 2-1: config 0 has no interface number 0 [ 76.691715][ T9] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 76.702929][ T30] audit: type=1400 audit(76.449:171): avc: denied { ioctl } for pid=6054 comm="syz.4.31" path="socket:[8552]" dev="sockfs" ino=8552 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 76.731833][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.782459][ T9] usb 2-1: Product: syz [ 77.804934][ T9] usb 2-1: Manufacturer: syz [ 77.809655][ T30] audit: type=1400 audit(76.449:172): avc: denied { write } for pid=6054 comm="syz.4.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 77.840709][ T9] usb 2-1: SerialNumber: syz [ 77.858125][ T9] usb 2-1: config 0 descriptor?? [ 77.879920][ T30] audit: type=1400 audit(76.929:173): avc: denied { create } for pid=6059 comm="syz.3.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 77.899792][ T9] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 77.911501][ T30] audit: type=1400 audit(76.929:174): avc: denied { create } for pid=6059 comm="syz.3.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 78.368110][ T9] usb 2-1: qt2_attach - failed to power on unit: -71 [ 78.382190][ T6069] netlink: 4 bytes leftover after parsing attributes in process `syz.3.34'. [ 78.395170][ T9] quatech2 2-1:0.51: probe with driver quatech2 failed with error -71 [ 78.504831][ T6068] virtio-fs: tag not found [ 78.541212][ T9] usb 2-1: USB disconnect, device number 2 [ 79.129280][ T6068] fuse: Unknown parameter '¦d' [ 80.289106][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 80.839064][ T43] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 80.954348][ T9] usb 2-1: config 0 has an invalid interface number: 160 but max is 0 [ 80.964634][ T9] usb 2-1: config 0 has no interface number 0 [ 80.970877][ T9] usb 2-1: config 0 interface 160 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 80.996956][ T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=9e.4e [ 81.015925][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.028583][ T9] usb 2-1: Product: syz [ 81.037524][ T9] usb 2-1: Manufacturer: syz [ 81.422203][ T10] cfg80211: failed to load regulatory.db [ 81.440666][ T43] usb 4-1: Using ep0 maxpacket: 32 [ 81.476291][ T9] usb 2-1: SerialNumber: syz [ 81.485627][ T9] usb 2-1: config 0 descriptor?? [ 81.488458][ T43] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 81.506469][ T9] usb 2-1: Found UVC 0.00 device syz (05ac:8501) [ 81.513760][ T9] usb 2-1: No valid video chain found. [ 81.625608][ T43] usb 4-1: config 0 has no interface number 0 [ 81.633899][ T43] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 81.642985][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.651069][ T43] usb 4-1: Product: syz [ 81.655605][ T43] usb 4-1: Manufacturer: syz [ 81.660197][ T43] usb 4-1: SerialNumber: syz [ 81.671369][ T43] usb 4-1: config 0 descriptor?? [ 81.679360][ T43] smsc95xx v2.0.0 [ 81.688454][ T43] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 82.095371][ T43] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -22 [ 82.130468][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 82.130484][ T30] audit: type=1400 audit(82.099:183): avc: denied { create } for pid=6105 comm="syz.4.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 82.172689][ T30] audit: type=1400 audit(82.149:184): avc: denied { write } for pid=6105 comm="syz.4.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 82.174667][ T6104] netlink: 64 bytes leftover after parsing attributes in process `syz.2.45'. [ 82.208651][ T30] audit: type=1400 audit(82.149:185): avc: denied { nlmsg_write } for pid=6105 comm="syz.4.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 82.246852][ T9] usb 2-1: USB disconnect, device number 3 [ 82.396015][ T30] audit: type=1400 audit(82.369:186): avc: denied { mount } for pid=6109 comm="syz.1.47" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 82.517411][ T30] audit: type=1400 audit(82.489:187): avc: denied { read write } for pid=6109 comm="syz.1.47" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 82.613672][ T30] audit: type=1400 audit(82.489:188): avc: denied { open } for pid=6109 comm="syz.1.47" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 82.673523][ T30] audit: type=1400 audit(82.549:189): avc: denied { create } for pid=6109 comm="syz.1.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 82.878662][ T30] audit: type=1400 audit(82.849:190): avc: denied { mounton } for pid=6112 comm="syz.4.48" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 82.889749][ T6120] SQUASHFS error: Failed to read block 0x0: -5 [ 82.914746][ T6120] unable to read squashfs_super_block [ 83.094246][ T9] usb 4-1: USB disconnect, device number 2 [ 83.300798][ T30] audit: type=1400 audit(83.249:191): avc: denied { unmount } for pid=5826 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 83.319900][ T6126] SQUASHFS error: Failed to read block 0x0: -5 [ 83.319959][ C0] vkms_vblank_simulate: vblank timer overrun [ 83.333054][ T6126] unable to read squashfs_super_block [ 83.485921][ T6126] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 83.528045][ T6129] netlink: 8 bytes leftover after parsing attributes in process `syz.3.53'. [ 83.551743][ T6132] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=30235 sclass=netlink_xfrm_socket pid=6132 comm=syz.2.54 [ 83.660309][ T30] audit: type=1400 audit(83.519:192): avc: denied { ioctl } for pid=6131 comm="syz.2.54" path="/dev/vbi0" dev="devtmpfs" ino=951 ioctlcmd=0x5608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 84.517592][ T6116] infiniband syz!: set active [ 84.563301][ T6116] infiniband syz!: added team_slave_0 [ 84.971643][ T6116] syz!: rxe_create_cq: returned err = -12 [ 84.988212][ T6116] infiniband syz!: Couldn't create ib_mad CQ [ 85.004497][ T6116] infiniband syz!: Couldn't open port 1 [ 85.071902][ T6116] RDS/IB: syz!: added [ 85.076121][ T6116] smc: adding ib device syz! with port count 1 [ 85.095291][ T6116] smc: ib device syz! port 1 has pnetid [ 86.042448][ T43] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 86.403818][ T43] usb 3-1: Using ep0 maxpacket: 32 [ 86.457363][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.468626][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.508483][ T43] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 86.661165][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.204090][ T43] usb 3-1: config 0 descriptor?? [ 87.229337][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 87.229350][ T30] audit: type=1400 audit(87.199:200): avc: denied { write } for pid=6166 comm="syz.1.61" name="sg0" dev="devtmpfs" ino=775 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 87.257992][ C0] vkms_vblank_simulate: vblank timer overrun [ 87.325553][ T43] hub 3-1:0.0: USB hub found [ 87.462612][ T43] hub 3-1:0.0: 2 ports detected [ 87.555550][ T30] audit: type=1400 audit(87.239:201): avc: denied { open } for pid=6166 comm="syz.1.61" path="/dev/sg0" dev="devtmpfs" ino=775 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 87.790708][ T30] audit: type=1400 audit(87.239:202): avc: denied { ioctl } for pid=6166 comm="syz.1.61" path="/dev/sg0" dev="devtmpfs" ino=775 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 87.944929][ T30] audit: type=1400 audit(87.489:203): avc: denied { create } for pid=6166 comm="syz.1.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 88.732322][ T43] hub 3-1:0.0: hub_hub_status failed (err = -32) [ 88.743001][ T43] hub 3-1:0.0: config failed, can't get hub status (err -32) [ 88.781233][ T30] audit: type=1400 audit(87.489:204): avc: denied { bind } for pid=6166 comm="syz.1.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 88.811510][ T43] usbhid 3-1:0.0: can't add hid device: -32 [ 88.832338][ T43] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 89.453632][ T30] audit: type=1400 audit(87.489:205): avc: denied { listen } for pid=6166 comm="syz.1.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 89.551329][ T30] audit: type=1400 audit(87.489:206): avc: denied { connect } for pid=6166 comm="syz.1.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 89.692986][ T30] audit: type=1400 audit(87.489:207): avc: denied { write } for pid=6166 comm="syz.1.61" path="socket:[8799]" dev="sockfs" ino=8799 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 89.716908][ T30] audit: type=1400 audit(87.489:208): avc: denied { accept } for pid=6166 comm="syz.1.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 89.736688][ T30] audit: type=1400 audit(87.489:209): avc: denied { read } for pid=6166 comm="syz.1.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 89.977120][ T6197] 9pnet_fd: Insufficient options for proto=fd [ 90.753378][ T43] usb 3-1: USB disconnect, device number 2 [ 92.377090][ T6227] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=30235 sclass=netlink_xfrm_socket pid=6227 comm=syz.1.77 [ 92.399362][ T6220] netlink: 48 bytes leftover after parsing attributes in process `syz.3.79'. [ 93.139112][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 93.139129][ T30] audit: type=1400 audit(93.109:212): avc: denied { mount } for pid=6234 comm="syz.0.83" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 93.400829][ T5876] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 93.570401][ T5876] usb 4-1: config 0 has an invalid interface number: 160 but max is 0 [ 93.724632][ T5876] usb 4-1: config 0 has no interface number 0 [ 94.176528][ T5876] usb 4-1: config 0 interface 160 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 94.233031][ T5876] usb 4-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=9e.4e [ 94.257276][ T5876] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.281660][ T5876] usb 4-1: Product: syz [ 94.290841][ T5876] usb 4-1: Manufacturer: syz [ 94.295451][ T5876] usb 4-1: SerialNumber: syz [ 94.393668][ T5876] usb 4-1: config 0 descriptor?? [ 94.405147][ T5876] usb 4-1: Found UVC 0.00 device syz (05ac:8501) [ 94.434128][ T5876] usb 4-1: No valid video chain found. [ 94.823767][ T30] audit: type=1400 audit(94.799:213): avc: denied { create } for pid=6230 comm="syz.3.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 95.142565][ T30] audit: type=1400 audit(94.799:214): avc: denied { connect } for pid=6230 comm="syz.3.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 95.176275][ T30] audit: type=1400 audit(95.099:215): avc: denied { read } for pid=6230 comm="syz.3.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 95.204837][ T30] audit: type=1400 audit(95.169:216): avc: denied { write } for pid=6254 comm="syz.0.87" name="001" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 95.252648][ T30] audit: type=1400 audit(95.229:217): avc: denied { create } for pid=6254 comm="syz.0.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 95.292444][ T30] audit: type=1400 audit(95.259:218): avc: denied { search } for pid=5489 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.319026][ T30] audit: type=1400 audit(95.259:219): avc: denied { search } for pid=5489 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.386751][ T30] audit: type=1400 audit(95.269:221): avc: denied { write } for pid=6230 comm="syz.3.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 95.564141][ T30] audit: type=1400 audit(95.259:220): avc: denied { search } for pid=5489 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 97.163457][ T10] usb 4-1: USB disconnect, device number 3 [ 98.742690][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 98.742701][ T30] audit: type=1400 audit(98.719:235): avc: denied { add_name } for pid=6264 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 98.865492][ T30] audit: type=1400 audit(98.749:236): avc: denied { create } for pid=6264 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 98.990830][ T30] audit: type=1400 audit(98.749:237): avc: denied { write } for pid=6264 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.sl0.link" dev="tmpfs" ino=2312 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 99.649728][ T30] audit: type=1400 audit(98.749:238): avc: denied { append } for pid=6264 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" dev="tmpfs" ino=2312 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 99.675277][ T30] audit: type=1400 audit(98.749:239): avc: denied { read } for pid=6298 comm="syz.2.98" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 99.698533][ T30] audit: type=1400 audit(98.749:240): avc: denied { open } for pid=6298 comm="syz.2.98" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 99.730355][ T30] audit: type=1400 audit(98.779:241): avc: denied { ioctl } for pid=6298 comm="syz.2.98" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 99.774579][ T30] audit: type=1400 audit(98.779:242): avc: denied { set_context_mgr } for pid=6298 comm="syz.2.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 99.916931][ T30] audit: type=1400 audit(98.789:243): avc: denied { map } for pid=6298 comm="syz.2.98" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 99.999732][ T30] audit: type=1400 audit(98.829:244): avc: denied { call } for pid=6298 comm="syz.2.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 100.281037][ T6322] mmap: syz.2.101 (6322) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 101.402638][ T6346] netlink: 64 bytes leftover after parsing attributes in process `syz.1.106'. [ 102.952589][ T5830] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 103.038661][ T6375] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 103.059719][ T6375] netlink: 8 bytes leftover after parsing attributes in process `syz.2.112'. [ 103.460040][ T6375] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 103.471449][ T5830] usb 2-1: Using ep0 maxpacket: 16 [ 103.558487][ T5830] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 103.581639][ T5830] usb 2-1: config 0 has no interfaces? [ 103.589885][ T5830] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 103.612299][ T5830] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.624267][ T5830] usb 2-1: Product: syz [ 103.628527][ T5830] usb 2-1: Manufacturer: syz [ 103.652217][ T5830] usb 2-1: SerialNumber: syz [ 103.669706][ T5830] usb 2-1: config 0 descriptor?? [ 103.686895][ T6380] lo speed is unknown, defaulting to 1000 [ 103.850748][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 104.663724][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 104.701645][ T6391] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 104.757346][ T5830] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 104.886237][ T6391] block device autoloading is deprecated and will be removed. [ 104.930736][ T9] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 105.066740][ T5830] usb 3-1: Using ep0 maxpacket: 32 [ 105.412744][ T5830] usb 3-1: too many configurations: 140, using maximum allowed: 8 [ 105.438155][ T9] usb 1-1: config 0 has no interface number 0 [ 105.535941][ T5830] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 105.544445][ T9] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 105.572627][ T24] usb 2-1: USB disconnect, device number 4 [ 105.581614][ T5830] usb 3-1: can't read configurations, error -61 [ 105.660506][ T9] usb 1-1: config 0 interface 85 has no altsetting 0 [ 105.713152][ T9] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 105.723428][ T5830] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 105.745816][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.848459][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 105.870969][ T9] usb 1-1: Product: syz [ 105.875601][ T9] usb 1-1: Manufacturer: syz [ 105.887842][ T9] usb 1-1: SerialNumber: syz [ 106.366286][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 106.366301][ T30] audit: type=1400 audit(105.939:258): avc: denied { create } for pid=6400 comm="syz.4.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 106.402263][ T5830] usb 3-1: Using ep0 maxpacket: 32 [ 106.404032][ T30] audit: type=1400 audit(105.949:259): avc: denied { bind } for pid=6400 comm="syz.4.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 106.429833][ T9] usb 1-1: config 0 descriptor?? [ 106.436990][ T5830] usb 3-1: too many configurations: 140, using maximum allowed: 8 [ 106.461759][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 106.474973][ T5830] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 106.488491][ T10] usb 4-1: too many configurations: 140, using maximum allowed: 8 [ 106.535521][ T5830] usb 3-1: can't read configurations, error -61 [ 106.550333][ T10] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 106.565963][ T5830] usb usb3-port1: attempt power cycle [ 106.571475][ T10] usb 4-1: can't read configurations, error -61 [ 106.739538][ T9] usb 1-1: can't set config #0, error -71 [ 106.771729][ T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 106.782401][ T9] usb 1-1: USB disconnect, device number 2 [ 107.045770][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 107.079827][ T10] usb 4-1: too many configurations: 140, using maximum allowed: 8 [ 107.216692][ T43] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 107.404480][ T10] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 107.595511][ T10] usb 4-1: can't read configurations, error -61 [ 107.614954][ T10] usb usb4-port1: attempt power cycle [ 107.639532][ T6422] netlink: 12 bytes leftover after parsing attributes in process `syz.3.123'. [ 107.679062][ T30] audit: type=1400 audit(107.649:260): avc: denied { setattr } for pid=6421 comm="syz.3.123" name="INET_SMC" dev="sockfs" ino=10204 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 107.946157][ T6424] netlink: 'syz.3.123': attribute type 16 has an invalid length. [ 107.954577][ T6424] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.123'. [ 108.275151][ T43] usb 5-1: Using ep0 maxpacket: 32 [ 108.310751][ T43] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 108.340024][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.531821][ T43] usb 5-1: config 0 descriptor?? [ 109.074007][ T43] as10x_usb: device has been detected [ 109.088467][ T43] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 109.098081][ T30] audit: type=1400 audit(109.069:261): avc: denied { map } for pid=6433 comm="syz.3.127" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 109.170051][ T43] usb 5-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 109.197453][ T30] audit: type=1400 audit(109.069:262): avc: denied { ioctl } for pid=6433 comm="syz.3.127" path="socket:[9124]" dev="sockfs" ino=9124 ioctlcmd=0x48d2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 109.257994][ T43] as10x_usb: error during firmware upload part1 [ 109.349127][ T30] audit: type=1400 audit(109.219:263): avc: denied { firmware_load } for pid=43 comm="kworker/1:1" path="/lib/firmware/as102_data1_st.hex" dev="sda1" ino=297 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 109.405370][ T43] Registered device nBox DVB-T Dongle [ 109.941198][ T30] audit: type=1400 audit(109.519:264): avc: denied { create } for pid=6404 comm="syz.4.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 109.965727][ C0] vkms_vblank_simulate: vblank timer overrun [ 110.001082][ T5876] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 110.073478][ T30] audit: type=1400 audit(110.039:265): avc: denied { watch } for pid=6443 comm="syz.0.130" path="/31" dev="tmpfs" ino=186 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 110.222255][ T5876] usb 3-1: Using ep0 maxpacket: 32 [ 110.229177][ T5876] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 110.279560][ T5876] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 110.291076][ T5876] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.320301][ T5876] usb 3-1: Product: syz [ 110.360622][ T5876] usb 3-1: Manufacturer: syz [ 110.382979][ T5876] usb 3-1: SerialNumber: syz [ 110.447812][ T5876] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 110.559522][ T5876] imon 3-1:155.0: unable to initialize intf0, err -19 [ 110.567225][ T5876] imon:imon_probe: failed to initialize context! [ 110.578722][ T5876] imon 3-1:155.0: unable to register, err -19 [ 111.175167][ T5948] usb 5-1: USB disconnect, device number 2 [ 111.193945][ T5948] Unregistered device nBox DVB-T Dongle [ 111.195785][ T5948] as10x_usb: device has been disconnected [ 111.235609][ T6436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.247152][ T6436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.319161][ T6455] netlink: 828 bytes leftover after parsing attributes in process `syz.2.126'. [ 111.734763][ T30] audit: type=1400 audit(111.709:266): avc: denied { bind } for pid=6435 comm="syz.2.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 111.761834][ T9] usb 3-1: USB disconnect, device number 6 [ 111.839615][ T30] audit: type=1400 audit(111.789:267): avc: denied { read } for pid=6459 comm="syz.3.133" name="media1" dev="devtmpfs" ino=932 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 111.867991][ T30] audit: type=1400 audit(111.789:268): avc: denied { open } for pid=6459 comm="syz.3.133" path="/dev/media1" dev="devtmpfs" ino=932 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 112.201800][ T30] audit: type=1400 audit(112.119:269): avc: denied { create } for pid=6464 comm="syz.4.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 112.562569][ T30] audit: type=1400 audit(112.129:270): avc: denied { append } for pid=6464 comm="syz.4.134" name="loop6" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 112.728749][ T30] audit: type=1400 audit(112.139:271): avc: denied { map } for pid=6464 comm="syz.4.134" path="socket:[11287]" dev="sockfs" ino=11287 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 112.751638][ T30] audit: type=1400 audit(112.159:272): avc: denied { ioctl } for pid=6464 comm="syz.4.134" path="socket:[11291]" dev="sockfs" ino=11291 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 112.897271][ T30] audit: type=1400 audit(112.169:273): avc: denied { write } for pid=6464 comm="syz.4.134" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 113.620187][ T30] audit: type=1400 audit(113.499:274): avc: denied { ioctl } for pid=6475 comm="syz.2.137" path="socket:[11313]" dev="sockfs" ino=11313 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 113.882951][ T9] libceph: connect (1)[c::]:6789 error -101 [ 113.897288][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 113.950079][ T6487] netlink: 830 bytes leftover after parsing attributes in process `syz.0.139'. [ 113.969834][ T6487] SQUASHFS error: Failed to read block 0x0: -5 [ 113.977574][ T6487] unable to read squashfs_super_block [ 114.006943][ T9] libceph: connect (1)[c::]:6789 error -101 [ 114.013644][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 114.101400][ T10] libceph: connect (1)[b::]:6789 error -101 [ 114.107657][ T10] libceph: mon0 (1)[b::]:6789 connect error [ 114.127908][ T30] audit: type=1400 audit(114.099:275): avc: denied { setopt } for pid=6475 comm="syz.2.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 114.152569][ T6478] ceph: No mds server is up or the cluster is laggy [ 114.197160][ T6487] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 114.245605][ T6482] ceph: No mds server is up or the cluster is laggy [ 115.218626][ T6505] random: crng reseeded on system resumption [ 115.941247][ T43] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 116.260688][ T24] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 116.275130][ T43] usb 1-1: config index 0 descriptor too short (expected 19492, got 36) [ 116.310680][ T43] usb 1-1: config 0 has too many interfaces: 36, using maximum allowed: 32 [ 116.363744][ T43] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 36 [ 116.376451][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 116.396125][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.408219][ T43] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 116.431524][ T43] usb 1-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.00 [ 116.440661][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.453967][ T24] usb 4-1: config 0 has an invalid interface number: 160 but max is 0 [ 116.462325][ T24] usb 4-1: config 0 has no interface number 0 [ 116.472500][ T24] usb 4-1: config 0 interface 160 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 116.837790][ T43] usb 1-1: config 0 descriptor?? [ 116.949146][ T24] usb 4-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=9e.4e [ 116.958611][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.966979][ T24] usb 4-1: Product: syz [ 116.982654][ T24] usb 4-1: Manufacturer: syz [ 116.989649][ T24] usb 4-1: SerialNumber: syz [ 117.052300][ T24] usb 4-1: config 0 descriptor?? [ 117.068474][ T24] usb 4-1: Found UVC 0.00 device syz (05ac:8501) [ 117.080031][ T24] usb 4-1: No valid video chain found. [ 117.161704][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 117.161719][ T30] audit: type=1400 audit(117.119:281): avc: denied { setopt } for pid=6530 comm="syz.4.151" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 117.227323][ T6533] process 'syz.1.150' launched './file1' with NULL argv: empty string added [ 117.240748][ T30] audit: type=1400 audit(117.119:282): avc: denied { ioctl } for pid=6530 comm="syz.4.151" path="socket:[11475]" dev="sockfs" ino=11475 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 117.303868][ T30] audit: type=1400 audit(117.199:283): avc: denied { execute } for pid=6532 comm="syz.1.150" name="file1" dev="tmpfs" ino=176 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 117.311106][ T43] lg-g15 0003:046D:C225.0001: hidraw0: USB HID v1.01 Device [HID 046d:c225] on usb-dummy_hcd.0-1/input0 [ 117.421133][ T6534] netlink: 8 bytes leftover after parsing attributes in process `syz.1.150'. [ 117.431516][ T6534] openvswitch: netlink: nsh attribute has 2338 unknown bytes. [ 117.439021][ T6534] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 117.657064][ T6512] syz.0.145 uses obsolete (PF_INET,SOCK_PACKET) [ 117.669281][ T6512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.678603][ T6512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.686822][ T30] audit: type=1400 audit(117.249:284): avc: denied { execute_no_trans } for pid=6532 comm="syz.1.150" path="/29/file1" dev="tmpfs" ino=176 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 117.732071][ T6512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.741692][ T30] audit: type=1400 audit(117.259:285): avc: denied { connect } for pid=6532 comm="syz.1.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 117.767906][ T6512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.790556][ T6543] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.798213][ T6543] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.846140][ T30] audit: type=1400 audit(117.639:286): avc: denied { write } for pid=6511 comm="syz.0.145" name="ptype" dev="proc" ino=4026532804 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 117.888265][ T6543] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.896217][ T6543] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.938590][ T24] usb 1-1: USB disconnect, device number 3 [ 118.066649][ T6546] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 118.082502][ T6546] netlink: 4 bytes leftover after parsing attributes in process `syz.1.153'. [ 118.091689][ T6546] bridge_slave_1: left allmulticast mode [ 118.097420][ T6546] bridge_slave_1: left promiscuous mode [ 118.107792][ T6546] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.108358][ T6535] fido_id[6535]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 118.130356][ T6546] bridge_slave_0: left allmulticast mode [ 118.143946][ T6546] bridge_slave_0: left promiscuous mode [ 118.149778][ T6546] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.268546][ T30] audit: type=1400 audit(119.109:287): avc: denied { map } for pid=6554 comm="syz.0.156" path="/dev/nullb0" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 119.294910][ T10] usb 4-1: USB disconnect, device number 7 [ 119.524757][ T10] libceph: connect (1)[c::]:6789 error -101 [ 119.533530][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 119.548792][ T10] libceph: connect (1)[c::]:6789 error -101 [ 119.555616][ T30] audit: type=1400 audit(119.109:288): avc: denied { execute } for pid=6554 comm="syz.0.156" path="/dev/nullb0" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 119.587586][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 119.600439][ T30] audit: type=1400 audit(119.569:289): avc: denied { watch } for pid=6562 comm="syz.1.157" path="/32/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 119.645939][ T30] audit: type=1400 audit(119.569:290): avc: denied { watch_sb watch_reads } for pid=6562 comm="syz.1.157" path="/32/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 119.840729][ T43] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 119.852131][ T10] libceph: connect (1)[c::]:6789 error -101 [ 119.858487][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 119.866339][ T5948] libceph: connect (1)[c::]:6789 error -101 [ 119.950927][ T5948] libceph: mon0 (1)[c::]:6789 connect error [ 119.961944][ T6559] ceph: No mds server is up or the cluster is laggy [ 119.973745][ T6556] ceph: No mds server is up or the cluster is laggy [ 119.992338][ T43] usb 4-1: Using ep0 maxpacket: 8 [ 119.999456][ T43] usb 4-1: unable to get BOS descriptor or descriptor too short [ 120.018685][ T43] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 120.033493][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 120.052155][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 120.080017][ T43] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1 [ 120.124820][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 120.134815][ T43] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 480 [ 120.158552][ T43] usb 4-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 120.168553][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.194526][ T43] usb 4-1: Product: syz [ 120.499857][ T43] usb 4-1: Manufacturer: syz [ 120.505882][ T43] usb 4-1: SerialNumber: syz [ 120.514007][ T43] usb 4-1: config 0 descriptor?? [ 120.551160][ T6568] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 120.558395][ T6568] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 120.604490][ T43] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 120.779888][ T6578] Zero length message leads to an empty skb [ 121.034954][ T6578] ubi31: attaching mtd0 [ 121.040228][ T6578] ubi31: scanning is finished [ 121.045453][ T6578] ubi31: empty MTD device detected [ 121.530723][ T6578] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 121.538326][ T6578] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 121.546053][ T6578] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 121.553236][ T6578] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 121.560782][ T6578] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 121.567645][ T6578] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 122.037480][ T6578] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1196196523 [ 122.058587][ T6578] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 122.081250][ T6593] ubi31: background thread "ubi_bgt31d" started, PID 6593 [ 122.493696][ T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 122.507736][ T6600] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 122.701162][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 122.747688][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 122.769886][ T6599] netlink: 8 bytes leftover after parsing attributes in process `syz.0.166'. [ 122.784571][ T10] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 122.799337][ T6599] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 122.836012][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 122.897060][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 122.952378][ T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1 [ 122.962472][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 122.998294][ T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 480 [ 123.017097][ T10] usb 5-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 123.027563][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.036018][ T10] usb 5-1: Product: syz [ 123.040453][ T10] usb 5-1: Manufacturer: syz [ 123.045987][ T10] usb 5-1: SerialNumber: syz [ 123.061841][ T10] usb 5-1: config 0 descriptor?? [ 123.067720][ T6592] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 123.080688][ T6592] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 123.099920][ T10] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 123.171903][ T5830] usb 4-1: USB disconnect, device number 8 [ 123.301029][ T43] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 123.459299][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 123.459315][ T30] audit: type=1400 audit(123.429:294): avc: denied { sys_module } for pid=6609 comm="syz.3.169" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 123.562682][ T43] usb 1-1: config 0 has an invalid interface number: 160 but max is 0 [ 123.595774][ T43] usb 1-1: config 0 has no interface number 0 [ 123.622453][ T43] usb 1-1: config 0 interface 160 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 123.709040][ T43] usb 1-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=9e.4e [ 123.719718][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.728420][ T43] usb 1-1: Product: syz [ 123.737387][ T43] usb 1-1: Manufacturer: syz [ 123.744256][ T43] usb 1-1: SerialNumber: syz [ 123.805408][ T43] usb 1-1: config 0 descriptor?? [ 123.835251][ T43] usb 1-1: Found UVC 0.00 device syz (05ac:8501) [ 123.856856][ T43] usb 1-1: No valid video chain found. [ 124.016237][ T6618] netlink: 64 bytes leftover after parsing attributes in process `syz.1.171'. [ 124.801907][ T24] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 125.218773][ T30] audit: type=1400 audit(125.189:295): avc: denied { shutdown } for pid=6632 comm="syz.2.174" laddr=::1 lport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 125.278491][ T24] usb 2-1: config 0 has an invalid interface number: 160 but max is 0 [ 125.320655][ T24] usb 2-1: config 0 has no interface number 0 [ 125.354189][ T24] usb 2-1: config 0 interface 160 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 125.385712][ T30] audit: type=1400 audit(125.349:296): avc: denied { read append } for pid=6634 comm="syz.2.175" name="fb0" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 125.399956][ T24] usb 2-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=9e.4e [ 125.434886][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.452103][ T24] usb 2-1: Product: syz [ 125.457791][ T43] usb 5-1: USB disconnect, device number 3 [ 125.579102][ T30] audit: type=1400 audit(125.379:297): avc: denied { open } for pid=6634 comm="syz.2.175" path="/dev/fb0" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 125.602240][ T24] usb 2-1: Manufacturer: syz [ 125.606892][ T24] usb 2-1: SerialNumber: syz [ 125.647471][ T24] usb 2-1: config 0 descriptor?? [ 125.650526][ T30] audit: type=1400 audit(125.399:298): avc: denied { map } for pid=6634 comm="syz.2.175" path="/dev/fb0" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 125.762070][ T24] usb 2-1: Found UVC 0.00 device syz (05ac:8501) [ 126.028782][ T24] usb 2-1: No valid video chain found. [ 126.087245][ T10] usb 1-1: USB disconnect, device number 4 [ 126.201836][ T6635] ======================================================= [ 126.201836][ T6635] WARNING: The mand mount option has been deprecated and [ 126.201836][ T6635] and is ignored by this kernel. Remove the mand [ 126.201836][ T6635] option from the mount to silence this warning. [ 126.201836][ T6635] ======================================================= [ 126.240644][ T30] audit: type=1400 audit(125.399:299): avc: denied { write execute } for pid=6634 comm="syz.2.175" path="/dev/fb0" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 126.466414][ T6641] syz.3.177 (6641) used greatest stack depth: 17976 bytes left [ 126.640686][ T24] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 126.684755][ T30] audit: type=1400 audit(126.169:300): avc: denied { ioctl } for pid=6634 comm="syz.2.175" path="/dev/nullb0" dev="devtmpfs" ino=695 ioctlcmd=0x70c8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 127.324204][ T24] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 127.334356][ T24] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 127.345959][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 1024, setting to 64 [ 127.358623][ T24] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 127.368502][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.377533][ T24] usb 3-1: Product: syz [ 127.382071][ T24] usb 3-1: Manufacturer: syz [ 127.386781][ T24] usb 3-1: SerialNumber: syz [ 127.394394][ T24] usb 3-1: config 0 descriptor?? [ 127.399871][ T6635] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 127.409133][ T24] usb 3-1: ucan: probing device on interface #0 [ 127.416557][ T24] usb 3-1: ucan: invalid endpoint configuration [ 127.422886][ T5876] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 127.432425][ T24] usb 3-1: ucan: probe failed; try to update the device firmware [ 127.610727][ T5876] usb 1-1: Using ep0 maxpacket: 32 [ 127.617677][ T5876] usb 1-1: too many configurations: 140, using maximum allowed: 8 [ 127.641990][ T24] usb 3-1: USB disconnect, device number 7 [ 127.654797][ T5876] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 127.663469][ T5876] usb 1-1: can't read configurations, error -61 [ 127.874931][ T5876] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 127.978038][ T30] audit: type=1400 audit(127.949:301): avc: denied { create } for pid=6668 comm="syz.4.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 128.000363][ T30] audit: type=1400 audit(127.949:302): avc: denied { setopt } for pid=6668 comm="syz.4.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 128.085788][ T5876] usb 1-1: Using ep0 maxpacket: 32 [ 128.104126][ T5876] usb 1-1: too many configurations: 140, using maximum allowed: 8 [ 128.119907][ T6673] netlink: 4 bytes leftover after parsing attributes in process `syz.4.185'. [ 128.131205][ T5876] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 128.138836][ T5876] usb 1-1: can't read configurations, error -61 [ 128.147510][ T24] usb 2-1: USB disconnect, device number 5 [ 128.159116][ T5876] usb usb1-port1: attempt power cycle [ 128.433365][ T5830] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 128.953504][ T5876] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 128.981105][ T5876] usb 1-1: Using ep0 maxpacket: 32 [ 128.988813][ T5876] usb 1-1: too many configurations: 140, using maximum allowed: 8 [ 129.064909][ T5830] usb 5-1: Using ep0 maxpacket: 16 [ 129.071767][ T5830] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 129.082766][ T5830] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 129.100493][ T5830] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.116404][ T5876] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 129.124020][ T5830] usb 5-1: Product: syz [ 129.124041][ T5830] usb 5-1: Manufacturer: syz [ 129.124053][ T5830] usb 5-1: SerialNumber: syz [ 129.131702][ T5830] usb 5-1: config 0 descriptor?? [ 129.206834][ T5830] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 129.310013][ T5830] usb 5-1: Detected FT232R [ 129.315767][ T5876] usb 1-1: can't read configurations, error -61 [ 129.443489][ T5830] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 129.451705][ T5876] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 129.552778][ T5876] usb 1-1: Using ep0 maxpacket: 32 [ 129.563776][ T5876] usb 1-1: too many configurations: 140, using maximum allowed: 8 [ 129.601355][ T6691] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 129.743686][ T5830] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 129.817869][ T5876] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 129.825704][ T5876] usb 1-1: can't read configurations, error -71 [ 129.836366][ T5876] usb usb1-port1: unable to enumerate USB device [ 130.091637][ T5830] usb 5-1: USB disconnect, device number 4 [ 130.113501][ T5830] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 130.144426][ T5830] ftdi_sio 5-1:0.0: device disconnected [ 130.562591][ C1] vcan0: j1939_tp_rxtimer: 0xffff888055ad2c00: rx timeout, send abort [ 130.571919][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888055ad2c00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 130.676402][ T30] audit: type=1400 audit(130.559:303): avc: denied { read } for pid=5176 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 130.705975][ T30] audit: type=1400 audit(130.559:304): avc: denied { search } for pid=5176 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 131.159911][ T30] audit: type=1400 audit(130.559:305): avc: denied { search } for pid=5176 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 131.181815][ T30] audit: type=1400 audit(130.559:306): avc: denied { add_name } for pid=5176 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 131.246565][ T30] audit: type=1400 audit(130.559:307): avc: denied { create } for pid=5176 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 131.301443][ T30] audit: type=1400 audit(130.559:308): avc: denied { append open } for pid=5176 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 131.324014][ T30] audit: type=1400 audit(130.559:309): avc: denied { getattr } for pid=5176 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 131.476129][ T6712] netlink: 4 bytes leftover after parsing attributes in process `syz.1.196'. [ 131.869906][ T30] audit: type=1400 audit(131.839:310): avc: denied { open } for pid=6710 comm="syz.4.197" path="/dev/ptyqd" dev="devtmpfs" ino=131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 132.378312][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.384665][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.398086][ T30] audit: type=1400 audit(131.869:311): avc: denied { ioctl } for pid=6710 comm="syz.4.197" path="/dev/ptyqd" dev="devtmpfs" ino=131 ioctlcmd=0x5420 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 132.645468][ T5877] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 132.802943][ T5877] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 2023, setting to 1024 [ 132.822224][ T5877] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 132.833956][ T5877] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 132.852258][ T5877] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 132.875988][ T5877] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.887741][ T5877] usb 1-1: Product: syz [ 132.904360][ T5877] usb 1-1: Manufacturer: syz [ 132.919984][ T5877] usb 1-1: SerialNumber: syz [ 132.944341][ T6719] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 133.952075][ T5877] cdc_ncm 1-1:1.0: bind() failure [ 133.962141][ T5877] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 133.969029][ T5877] cdc_ncm 1-1:1.1: bind() failure [ 133.978790][ T5877] usb 1-1: USB disconnect, device number 9 [ 134.152801][ T5898] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 134.320733][ T5898] usb 2-1: Using ep0 maxpacket: 32 [ 134.328926][ T5898] usb 2-1: too many configurations: 140, using maximum allowed: 8 [ 134.341690][ T5898] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 134.349454][ T5898] usb 2-1: can't read configurations, error -61 [ 134.480731][ T5898] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 134.510795][ T5877] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 134.693971][ T5898] usb 2-1: Using ep0 maxpacket: 32 [ 134.709614][ T5898] usb 2-1: too many configurations: 140, using maximum allowed: 8 [ 134.786894][ T5898] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 134.789796][ T6746] blkio.reset_stats is deprecated [ 134.801033][ T5898] usb 2-1: can't read configurations, error -61 [ 134.822340][ T5877] usb 4-1: config index 0 descriptor too short (expected 19492, got 36) [ 134.841539][ T5898] usb usb2-port1: attempt power cycle [ 134.875305][ T5877] usb 4-1: config 0 has too many interfaces: 36, using maximum allowed: 32 [ 134.876127][ T30] audit: type=1400 audit(134.839:312): avc: denied { append } for pid=6744 comm="syz.0.206" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 134.894314][ T5877] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 36 [ 135.010988][ T5877] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 135.030802][ T5877] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.050865][ T5877] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 135.163747][ T5877] usb 4-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.00 [ 135.188667][ T5877] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.255040][ T6752] FAULT_INJECTION: forcing a failure. [ 135.255040][ T6752] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 135.268429][ T6752] CPU: 0 UID: 0 PID: 6752 Comm: syz.0.207 Not tainted syzkaller #0 PREEMPT(full) [ 135.268453][ T6752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 135.268463][ T6752] Call Trace: [ 135.268469][ T6752] [ 135.268476][ T6752] dump_stack_lvl+0x16c/0x1f0 [ 135.268504][ T6752] should_fail_ex+0x512/0x640 [ 135.268530][ T6752] strncpy_from_user+0x3b/0x2e0 [ 135.268551][ T6752] getname_flags.part.0+0x8f/0x550 [ 135.268576][ T6752] getname_flags+0x93/0xf0 [ 135.268601][ T6752] __x64_sys_execve+0x74/0xb0 [ 135.268626][ T6752] do_syscall_64+0xcd/0x4e0 [ 135.268650][ T6752] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.268667][ T6752] RIP: 0033:0x7f69c5b8eec9 [ 135.268682][ T6752] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.268697][ T6752] RSP: 002b:00007f69c6a50038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 135.268714][ T6752] RAX: ffffffffffffffda RBX: 00007f69c5de6180 RCX: 00007f69c5b8eec9 [ 135.268725][ T6752] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000400 [ 135.268735][ T6752] RBP: 00007f69c6a50090 R08: 0000000000000000 R09: 0000000000000000 [ 135.268745][ T6752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.268755][ T6752] R13: 00007f69c5de6218 R14: 00007f69c5de6180 R15: 00007ffeb1ddd298 [ 135.268777][ T6752] [ 135.445789][ T5877] usb 4-1: config 0 descriptor?? [ 135.500784][ T5898] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 135.523500][ T5898] usb 2-1: Using ep0 maxpacket: 32 [ 135.534107][ T5898] usb 2-1: too many configurations: 140, using maximum allowed: 8 [ 135.583650][ T5898] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 135.598025][ T5898] usb 2-1: can't read configurations, error -61 [ 135.634209][ T6756] could not allocate digest TFM handle cbcmac-aes-neon [ 135.740985][ T5898] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 135.762957][ T5898] usb 2-1: Using ep0 maxpacket: 32 [ 135.768818][ T5898] usb 2-1: too many configurations: 140, using maximum allowed: 8 [ 135.782177][ T5898] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 135.789898][ T5898] usb 2-1: can't read configurations, error -61 [ 135.800141][ T5898] usb usb2-port1: unable to enumerate USB device [ 135.849630][ T30] audit: type=1400 audit(135.799:313): avc: denied { read } for pid=6761 comm="syz.4.211" name="sg0" dev="devtmpfs" ino=775 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 135.942120][ T5877] lg-g15 0003:046D:C225.0002: hidraw0: USB HID v1.01 Device [HID 046d:c225] on usb-dummy_hcd.3-1/input0 [ 136.205199][ T6743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.213962][ T6743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.351508][ T6768] netlink: 'syz.2.212': attribute type 2 has an invalid length. [ 136.373024][ T5877] usb 4-1: USB disconnect, device number 9 [ 136.526670][ T6774] fido_id[6774]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 138.023285][ T30] audit: type=1400 audit(137.989:314): avc: denied { read } for pid=6795 comm="syz.4.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 138.400303][ T6803] netlink: 8 bytes leftover after parsing attributes in process `syz.3.221'. [ 139.161096][ T30] audit: type=1400 audit(138.369:315): avc: denied { getopt } for pid=6799 comm="syz.3.221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 140.174164][ T6802] warning: `syz.2.220' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 140.284682][ T30] audit: type=1400 audit(140.239:316): avc: denied { watch watch_reads } for pid=6798 comm="syz.2.220" path="pipe:[12068]" dev="pipefs" ino=12068 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 140.630836][ T30] audit: type=1400 audit(140.599:317): avc: denied { read } for pid=6807 comm="syz.1.223" name="event2" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 140.733308][ T6813] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=4 sclass=netlink_xfrm_socket pid=6813 comm=syz.1.223 [ 140.990679][ T24] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 141.038409][ T30] audit: type=1400 audit(140.599:318): avc: denied { open } for pid=6807 comm="syz.1.223" path="/dev/input/event2" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 141.070868][ T30] audit: type=1400 audit(140.639:319): avc: denied { read } for pid=6807 comm="syz.1.223" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 141.147547][ T30] audit: type=1400 audit(140.639:320): avc: denied { open } for pid=6807 comm="syz.1.223" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 141.201493][ T24] usb 5-1: device descriptor read/64, error -71 [ 141.218504][ T30] audit: type=1400 audit(140.749:321): avc: denied { ioctl } for pid=6807 comm="syz.1.223" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9378 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 141.277422][ T30] audit: type=1400 audit(140.749:322): avc: denied { ioctl } for pid=6807 comm="syz.1.223" path="/dev/input/event2" dev="devtmpfs" ino=921 ioctlcmd=0x4504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 141.334902][ T5949] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 141.380873][ T10] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 141.461747][ T24] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 141.490648][ T5949] usb 4-1: Using ep0 maxpacket: 32 [ 141.504438][ T5949] usb 4-1: too many configurations: 140, using maximum allowed: 8 [ 141.514767][ T5949] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 141.522559][ T5949] usb 4-1: can't read configurations, error -61 [ 141.552977][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 141.569039][ T5898] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 141.571465][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.612134][ T10] usb 3-1: config 1 interface 1 has no altsetting 1 [ 141.643982][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 141.665344][ T5949] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 141.681000][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.699101][ T10] usb 3-1: Product: syz [ 141.703427][ T10] usb 3-1: Manufacturer: syz [ 141.729103][ T10] usb 3-1: SerialNumber: syz [ 141.756293][ T10] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 141.771038][ T5898] usb 2-1: Using ep0 maxpacket: 8 [ 141.771962][ T10] cdc_ncm 3-1:1.0: bind() failure [ 141.789388][ T5898] usb 2-1: unable to get BOS descriptor or descriptor too short [ 141.790732][ T10] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 141.804108][ T10] cdc_ncm 3-1:1.1: bind() failure [ 141.831453][ T5949] usb 4-1: Using ep0 maxpacket: 32 [ 141.839939][ T5949] usb 4-1: too many configurations: 140, using maximum allowed: 8 [ 141.855578][ T5949] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 141.865595][ T5949] usb 4-1: can't read configurations, error -61 [ 141.874681][ T5949] usb usb4-port1: attempt power cycle [ 141.921518][ T5898] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 141.933205][ T5898] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 141.945678][ T5898] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 141.955506][ T5898] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1 [ 141.965264][ T5898] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 141.975017][ T5898] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 480 [ 141.987854][ T5898] usb 2-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 141.997882][ T5898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.006056][ T5898] usb 2-1: Product: syz [ 142.010634][ T5898] usb 2-1: Manufacturer: syz [ 142.015286][ T5898] usb 2-1: SerialNumber: syz [ 142.037382][ T5898] usb 2-1: config 0 descriptor?? [ 142.045472][ T6817] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 142.054553][ T6817] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 142.088708][ T5898] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 142.190747][ T24] usb 5-1: device descriptor read/64, error -71 [ 142.221488][ T5949] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 142.272585][ T5949] usb 4-1: Using ep0 maxpacket: 32 [ 142.279496][ T5949] usb 4-1: too many configurations: 140, using maximum allowed: 8 [ 142.304925][ T24] usb usb5-port1: attempt power cycle [ 142.315492][ T5949] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 142.325806][ T5949] usb 4-1: can't read configurations, error -61 [ 142.460958][ T5949] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 142.502169][ T5949] usb 4-1: Using ep0 maxpacket: 32 [ 142.525402][ T5949] usb 4-1: too many configurations: 140, using maximum allowed: 8 [ 142.782145][ T5949] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 142.789735][ T5949] usb 4-1: can't read configurations, error -61 [ 142.871777][ T24] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 143.038578][ T5949] usb usb4-port1: unable to enumerate USB device [ 143.071356][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 143.086186][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 143.101319][ T24] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 143.120247][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 143.133817][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 143.144588][ T24] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1 [ 143.159566][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 143.169893][ T24] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 480 [ 143.183343][ T24] usb 5-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 143.192775][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.202054][ T24] usb 5-1: Product: syz [ 143.206439][ T24] usb 5-1: Manufacturer: syz [ 143.211385][ T24] usb 5-1: SerialNumber: syz [ 143.231821][ T24] usb 5-1: config 0 descriptor?? [ 143.239517][ T6819] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 143.247329][ T6819] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 143.267027][ T24] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 143.360288][ T24] usb 3-1: USB disconnect, device number 8 [ 144.900500][ T5949] usb 2-1: USB disconnect, device number 10 [ 145.182185][ T10] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 145.352501][ T6850] netlink: 830 bytes leftover after parsing attributes in process `syz.3.234'. [ 145.411254][ T5949] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 145.438552][ T6850] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 145.481172][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 145.557460][ T10] usb 3-1: too many configurations: 140, using maximum allowed: 8 [ 145.578635][ T10] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 145.587780][ T5949] usb 2-1: config 0 has an invalid interface number: 120 but max is 0 [ 145.596053][ T5949] usb 2-1: config 0 has no interface number 0 [ 145.602742][ T10] usb 3-1: can't read configurations, error -61 [ 145.609860][ T5949] usb 2-1: config 0 interface 120 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 145.621268][ T5949] usb 2-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 145.630521][ T5949] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.643016][ T5949] usb 2-1: config 0 descriptor?? [ 145.751013][ T10] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 145.779333][ T5898] usb 5-1: USB disconnect, device number 7 [ 145.810374][ T6857] netlink: 20 bytes leftover after parsing attributes in process `syz.0.236'. [ 145.854310][ T6845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.884029][ T6845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.950702][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 145.961397][ T10] usb 3-1: too many configurations: 140, using maximum allowed: 8 [ 145.970660][ T43] usb 2-1: USB disconnect, device number 11 [ 145.980403][ T10] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 145.991708][ T10] usb 3-1: can't read configurations, error -61 [ 146.323959][ T10] usb usb3-port1: attempt power cycle [ 146.485335][ T5837] udevd[5837]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 146.684865][ T5839] udevd[5839]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 146.722333][ T30] audit: type=1400 audit(146.699:323): avc: denied { setopt } for pid=6867 comm="syz.2.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 146.827553][ T43] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 147.124461][ T30] audit: type=1400 audit(147.079:324): avc: denied { write } for pid=6871 comm="syz.0.241" name="event2" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 147.192843][ T43] usb 2-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 147.312703][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.626859][ T43] usb 2-1: config 0 descriptor?? [ 148.062693][ T43] logitech 0003:046D:C218.0003: unknown main item tag 0x0 [ 148.081290][ T43] logitech 0003:046D:C218.0003: hidraw0: USB HID v0.00 Device [HID 046d:c218] on usb-dummy_hcd.1-1/input0 [ 148.096741][ T43] logitech 0003:046D:C218.0003: no inputs found [ 148.931224][ T6891] Unsupported ieee802154 address type: 0 [ 148.971767][ T30] audit: type=1400 audit(148.909:325): avc: denied { bind } for pid=6865 comm="syz.1.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 149.775570][ T6904] netlink: 830 bytes leftover after parsing attributes in process `syz.3.247'. [ 149.798198][ T6904] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 149.951497][ T5830] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 150.130774][ T5830] usb 3-1: Using ep0 maxpacket: 16 [ 150.142051][ T5830] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 150.584952][ T5948] usb 2-1: USB disconnect, device number 12 [ 150.601661][ T5830] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 150.639625][ T5830] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 150.660524][ T5830] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.712842][ T5830] usb 3-1: config 0 descriptor?? [ 150.829176][ T9] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 150.991976][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 151.287100][ T9] usb 5-1: too many configurations: 140, using maximum allowed: 8 [ 151.305966][ T9] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 151.313888][ T9] usb 5-1: can't read configurations, error -61 [ 151.410659][ T43] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 151.450834][ T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 151.582511][ T43] usb 2-1: config 0 has an invalid interface number: 160 but max is 0 [ 151.600806][ T43] usb 2-1: config 0 has no interface number 0 [ 151.607589][ T43] usb 2-1: config 0 interface 160 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 151.628117][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 151.635361][ T43] usb 2-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=9e.4e [ 151.648194][ T6922] netlink: 536 bytes leftover after parsing attributes in process `syz.0.252'. [ 151.661134][ T6919] netlink: 536 bytes leftover after parsing attributes in process `syz.0.252'. [ 151.671645][ T9] usb 5-1: too many configurations: 140, using maximum allowed: 8 [ 151.677047][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.688851][ T9] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 151.699095][ T6919] netlink: 16 bytes leftover after parsing attributes in process `syz.0.252'. [ 151.703223][ T43] usb 2-1: Product: syz [ 151.708352][ T9] usb 5-1: can't read configurations, error -61 [ 151.714019][ T43] usb 2-1: Manufacturer: syz [ 151.723545][ T43] usb 2-1: SerialNumber: syz [ 151.723802][ T9] usb usb5-port1: attempt power cycle [ 151.735574][ T43] usb 2-1: config 0 descriptor?? [ 152.009383][ T24] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 152.056580][ T43] usb 2-1: Found UVC 0.00 device syz (05ac:8501) [ 152.074290][ T43] usb 2-1: No valid video chain found. [ 152.111017][ T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 152.134312][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 152.139942][ T9] usb 5-1: too many configurations: 140, using maximum allowed: 8 [ 152.149186][ T9] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 152.156933][ T9] usb 5-1: can't read configurations, error -61 [ 152.366982][ T24] usb 4-1: config 0 has an invalid interface number: 20 but max is 0 [ 152.421552][ T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 152.494863][ T24] usb 4-1: config 0 has no interface number 0 [ 152.502753][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 152.508831][ T9] usb 5-1: too many configurations: 140, using maximum allowed: 8 [ 152.516810][ T24] usb 4-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 152.537252][ T24] usb 4-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 152.549452][ T9] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 152.566190][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.568406][ T9] usb 5-1: can't read configurations, error -61 [ 152.595206][ T24] usb 4-1: Product: syz [ 152.614341][ T9] usb usb5-port1: unable to enumerate USB device [ 152.738892][ T24] usb 4-1: Manufacturer: syz [ 152.770722][ T24] usb 4-1: SerialNumber: syz [ 152.777599][ T24] usb 4-1: config 0 descriptor?? [ 152.791890][ T6921] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 152.804036][ T24] usb-storage 4-1:0.20: USB Mass Storage device detected [ 152.923781][ T6935] netlink: 136 bytes leftover after parsing attributes in process `syz.0.255'. [ 152.933006][ T6935] netlink: 16 bytes leftover after parsing attributes in process `syz.0.255'. [ 153.256921][ T5830] usb 3-1: string descriptor 0 read error: -71 [ 153.368377][ T5830] usb 3-1: USB disconnect, device number 12 [ 153.372525][ T24] usb-storage 4-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 155.302675][ T6958] netlink: 8 bytes leftover after parsing attributes in process `syz.2.259'. [ 155.318958][ T30] audit: type=1400 audit(155.119:326): avc: denied { mounton } for pid=6954 comm="syz.2.259" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 155.474784][ T6957] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 155.569376][ T24] scsi host1: usb-storage 4-1:0.20 [ 155.602875][ T24] usb 4-1: USB disconnect, device number 14 [ 155.815452][ T6963] input: syz1 as /devices/virtual/input/input5 [ 155.860146][ T30] audit: type=1400 audit(155.829:327): avc: denied { read } for pid=5179 comm="acpid" name="event4" dev="devtmpfs" ino=2925 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 155.916469][ T30] audit: type=1400 audit(155.829:328): avc: denied { open } for pid=5179 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2925 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 155.943351][ T6968] netlink: 20 bytes leftover after parsing attributes in process `syz.0.261'. [ 155.981794][ T30] audit: type=1400 audit(155.829:329): avc: denied { ioctl } for pid=5179 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2925 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 157.208189][ T5837] udevd[5837]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 157.227100][ T6982] netlink: 64 bytes leftover after parsing attributes in process `syz.3.265'. [ 157.428133][ T5839] udevd[5839]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 157.653533][ T24] usb 2-1: USB disconnect, device number 13 [ 159.050673][ T24] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 159.242481][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.320773][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.372243][ T5948] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 159.380163][ T24] usb 2-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 159.438197][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.572415][ T5948] usb 1-1: config 7 has an invalid interface number: 208 but max is 0 [ 159.582873][ T5948] usb 1-1: config 7 has no interface number 0 [ 159.588998][ T5948] usb 1-1: New USB device found, idVendor=1bc7, idProduct=1073, bcdDevice=99.97 [ 159.590092][ T24] usb 2-1: config 0 descriptor?? [ 159.611007][ T5948] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.620371][ T30] audit: type=1400 audit(159.589:330): avc: denied { getopt } for pid=7006 comm="syz.4.273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 160.078731][ T5948] option 1-1:7.208: GSM modem (1-port) converter detected [ 160.232409][ T24] hid-led 0003:04D8:F372.0004: unknown main item tag 0x0 [ 160.239442][ T24] hid-led 0003:04D8:F372.0004: unknown main item tag 0x0 [ 160.264096][ T24] hid-led 0003:04D8:F372.0004: unknown main item tag 0x0 [ 160.694765][ T5876] usb 1-1: USB disconnect, device number 10 [ 160.701628][ T5876] option 1-1:7.208: device disconnected [ 160.719120][ T6994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.799925][ T24] hid-led 0003:04D8:F372.0004: hidraw0: USB HID v0.00 Device [HID 04d8:f372] on usb-dummy_hcd.1-1/input0 [ 160.827750][ T6994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.835712][ T30] audit: type=1400 audit(160.769:331): avc: denied { ioctl } for pid=7009 comm="syz.2.274" path="socket:[13321]" dev="sockfs" ino=13321 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 161.246383][ T30] audit: type=1400 audit(160.919:332): avc: denied { getopt } for pid=6993 comm="syz.1.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 161.247489][ T24] hid-led 0003:04D8:F372.0004: Greynut Luxafor initialized [ 161.265505][ C1] vkms_vblank_simulate: vblank timer overrun [ 161.313421][ T7021] 9pnet_fd: Insufficient options for proto=fd [ 161.327047][ T30] audit: type=1400 audit(161.289:333): avc: denied { write } for pid=7020 comm="syz.4.276" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 161.487526][ T24] usb 2-1: USB disconnect, device number 14 [ 161.885588][ T30] audit: type=1400 audit(161.349:334): avc: denied { create } for pid=7024 comm="syz.3.277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 161.913555][ T30] audit: type=1400 audit(161.449:335): avc: denied { accept } for pid=7024 comm="syz.3.277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 161.948449][ T30] audit: type=1400 audit(161.449:336): avc: denied { ioctl } for pid=7024 comm="syz.3.277" path="socket:[13338]" dev="sockfs" ino=13338 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 161.982343][ T7032] netlink: 20 bytes leftover after parsing attributes in process `syz.4.279'. [ 162.018406][ T1162] leds luxafor0:blue:led5: Setting an LED's brightness failed (-38) [ 162.066180][ T7032] netlink: 'syz.4.279': attribute type 4 has an invalid length. [ 162.075455][ T36] leds luxafor0:green:led5: Setting an LED's brightness failed (-38) [ 162.105545][ T36] leds luxafor0:red:led5: Setting an LED's brightness failed (-38) [ 162.146439][ T36] leds luxafor0:blue:led4: Setting an LED's brightness failed (-38) [ 162.212440][ T36] leds luxafor0:green:led4: Setting an LED's brightness failed (-38) [ 162.222097][ T2993] leds luxafor0:red:led4: Setting an LED's brightness failed (-38) [ 162.236397][ T36] leds luxafor0:blue:led3: Setting an LED's brightness failed (-38) [ 162.338579][ T7039] netlink: 'syz.4.280': attribute type 2 has an invalid length. [ 162.358698][ T2993] leds luxafor0:green:led3: Setting an LED's brightness failed (-38) [ 162.370247][ T2993] leds luxafor0:red:led3: Setting an LED's brightness failed (-38) [ 162.380075][ T2993] leds luxafor0:blue:led2: Setting an LED's brightness failed (-38) [ 162.394546][ T2993] leds luxafor0:green:led2: Setting an LED's brightness failed (-38) [ 162.462017][ T7043] netlink: 20 bytes leftover after parsing attributes in process `syz.4.280'. [ 162.616100][ T7045] exFAT-fs (loop4): unable to read boot sector [ 162.622416][ T7045] exFAT-fs (loop4): failed to read boot sector [ 162.628585][ T7045] exFAT-fs (loop4): failed to recognize exfat type [ 162.815283][ T2993] leds luxafor0:red:led2: Setting an LED's brightness failed (-38) [ 162.939042][ T2993] leds luxafor0:blue:led1: Setting an LED's brightness failed (-38) [ 162.948507][ T2993] leds luxafor0:green:led1: Setting an LED's brightness failed (-38) [ 162.957474][ T2993] leds luxafor0:red:led1: Setting an LED's brightness failed (-38) [ 162.966428][ T2993] leds luxafor0:blue:led0: Setting an LED's brightness failed (-38) [ 163.201273][ T7051] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 163.207914][ T7051] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 163.353396][ T1162] leds luxafor0:green:led0: Setting an LED's brightness failed (-38) [ 163.389322][ T7050] netlink: 4 bytes leftover after parsing attributes in process `syz.1.282'. [ 163.408370][ T36] leds luxafor0:red:led0: Setting an LED's brightness failed (-38) [ 163.680968][ T5876] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 163.972729][ T5876] usb 1-1: config 0 has an invalid interface number: 160 but max is 0 [ 164.003057][ T7062] netlink: 64 bytes leftover after parsing attributes in process `syz.4.286'. [ 164.014212][ T5876] usb 1-1: config 0 has no interface number 0 [ 164.023735][ T5876] usb 1-1: config 0 interface 160 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 164.826491][ T5876] usb 1-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=9e.4e [ 164.845314][ T5876] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.864378][ T5876] usb 1-1: Product: syz [ 164.868574][ T5876] usb 1-1: Manufacturer: syz [ 164.901930][ T5876] usb 1-1: SerialNumber: syz [ 164.918769][ T5876] usb 1-1: config 0 descriptor?? [ 164.942111][ T5876] usb 1-1: Found UVC 0.00 device syz (05ac:8501) [ 164.959035][ T5876] usb 1-1: No valid video chain found. [ 165.111186][ T24] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 165.323523][ T24] usb 3-1: config 0 has an invalid interface number: 160 but max is 0 [ 165.332371][ T24] usb 3-1: config 0 has no interface number 0 [ 165.364759][ T24] usb 3-1: config 0 interface 160 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 165.408715][ T24] usb 3-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=9e.4e [ 165.417979][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.468600][ T24] usb 3-1: Product: syz [ 165.482340][ T24] usb 3-1: Manufacturer: syz [ 165.544001][ T24] usb 3-1: SerialNumber: syz [ 165.579248][ T7068] syz.1.288 (7068): drop_caches: 2 [ 165.589708][ T24] usb 3-1: config 0 descriptor?? [ 165.599248][ T24] usb 3-1: Found UVC 0.00 device syz (05ac:8501) [ 165.643126][ T24] usb 3-1: No valid video chain found. [ 167.042347][ T43] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 167.151147][ T30] audit: type=1400 audit(167.129:337): avc: denied { read } for pid=7101 comm="syz.4.295" name="loop-control" dev="devtmpfs" ino=645 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 167.297536][ T5876] usb 1-1: USB disconnect, device number 11 [ 167.321866][ T30] audit: type=1400 audit(167.129:338): avc: denied { open } for pid=7101 comm="syz.4.295" path="/dev/loop-control" dev="devtmpfs" ino=645 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 167.417821][ T7108] netlink: 132 bytes leftover after parsing attributes in process `syz.4.295'. [ 168.337234][ T43] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 168.399388][ T43] usb 4-1: config 1 has no interface number 0 [ 168.406417][ T43] usb 4-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 168.417436][ T43] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 168.427386][ T43] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0xF has invalid maxpacket 1983, setting to 1024 [ 168.441836][ T43] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 168.450921][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.458906][ T43] usb 4-1: Product: syz [ 168.463091][ T43] usb 4-1: Manufacturer: syz [ 168.467889][ T43] usb 4-1: SerialNumber: syz [ 168.475913][ T7100] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 168.483184][ T7100] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 168.492332][ T43] usb 4-1: Expected 3 endpoints, found: 2 [ 168.557883][ T5830] usb 3-1: USB disconnect, device number 13 [ 168.565932][ T30] audit: type=1400 audit(167.419:339): avc: denied { ioctl } for pid=7101 comm="syz.4.295" path="/dev/loop-control" dev="devtmpfs" ino=645 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 169.193169][ T7123] netlink: 4 bytes leftover after parsing attributes in process `syz.2.298'. [ 169.730925][ T43] usb 4-1: USB disconnect, device number 15 [ 171.050027][ T24] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 171.181572][ T9] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 171.513310][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 171.524476][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 171.535569][ T9] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 171.547335][ T9] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 171.582958][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 171.681620][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 171.690350][ T24] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 171.703613][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 171.717680][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 171.727801][ T24] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1 [ 171.735326][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 171.737830][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 171.756339][ T5876] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 171.799170][ T24] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 480 [ 171.816590][ T24] usb 1-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 171.826961][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.835088][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.835440][ T24] usb 1-1: Product: syz [ 171.847358][ T9] usb 3-1: Product: syz [ 171.847662][ T24] usb 1-1: Manufacturer: syz [ 171.856322][ T9] usb 3-1: Manufacturer: syz [ 171.856895][ T24] usb 1-1: SerialNumber: syz [ 171.867851][ T9] usb 3-1: SerialNumber: syz [ 171.868447][ T24] usb 1-1: config 0 descriptor?? [ 171.882352][ T7144] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 171.892450][ T9] cdc_mbim 3-1:1.0: skipping garbage [ 171.896210][ T7137] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 171.907579][ T7137] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 171.918865][ T24] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 171.933150][ T5876] usb 4-1: config 0 has an invalid interface number: 160 but max is 0 [ 171.943754][ T5876] usb 4-1: config 0 has no interface number 0 [ 171.950003][ T5876] usb 4-1: config 0 interface 160 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 171.993758][ T5876] usb 4-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=9e.4e [ 172.003652][ T5876] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.032959][ T5876] usb 4-1: Product: syz [ 172.054743][ T5876] usb 4-1: Manufacturer: syz [ 172.082394][ T5876] usb 4-1: SerialNumber: syz [ 172.092708][ T7144] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 172.100207][ T7144] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 172.149801][ T5876] usb 4-1: config 0 descriptor?? [ 172.177449][ T5876] usb 4-1: Found UVC 0.00 device syz (05ac:8501) [ 172.210984][ T5876] usb 4-1: No valid video chain found. [ 174.424511][ T5876] usb 1-1: USB disconnect, device number 12 [ 174.542654][ T30] audit: type=1400 audit(174.499:340): avc: denied { read } for pid=7138 comm="syz.2.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 174.965096][ T5948] usb 4-1: USB disconnect, device number 16 [ 175.793019][ T7194] ------------[ cut here ]------------ [ 175.798587][ T7194] WARNING: CPU: 0 PID: 7194 at fs/nsfs.c:493 nsfs_fh_to_dentry+0x9de/0xe10 [ 175.808527][ T7194] Modules linked in: [ 175.813750][ T7194] CPU: 0 UID: 0 PID: 7194 Comm: syz.1.320 Not tainted syzkaller #0 PREEMPT(full) [ 175.823092][ T7194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 175.834154][ T7194] RIP: 0010:nsfs_fh_to_dentry+0x9de/0xe10 [ 175.839934][ T7194] Code: 0c 50 ff e9 63 fe ff ff e8 bf 30 74 ff 90 0f 0b 90 e9 7b f8 ff ff e8 b1 30 74 ff 90 0f 0b 90 e9 ce f8 ff ff e8 a3 30 74 ff 90 <0f> 0b 90 e9 32 f9 ff ff e8 95 30 74 ff 49 8d 7d 10 48 b8 00 00 00 [ 175.860325][ T7194] RSP: 0018:ffffc9001d86fb38 EFLAGS: 00010283 [ 175.867002][ T7194] RAX: 0000000000000070 RBX: 0000000000000000 RCX: ffffc90005412000 [ 175.875241][ T7194] RDX: 0000000000080000 RSI: ffffffff8246e85d RDI: 0000000000000004 [ 175.883302][ T7194] RBP: ffff888034be1388 R08: 0000000000000004 R09: 00000000effffff9 [ 175.891479][ T7194] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff92003b0df68 [ 175.899528][ T7194] R13: ffffffff9ad00a98 R14: 00000000effffff9 R15: 0000000000000003 [ 175.907619][ T7194] FS: 00007fc5c6a336c0(0000) GS:ffff888124e71000(0000) knlGS:0000000000000000 [ 175.917495][ T7194] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 175.924356][ T7194] CR2: 0000200000000000 CR3: 000000005667d000 CR4: 00000000003526f0 [ 175.932486][ T7194] Call Trace: [ 175.935769][ T7194] [ 175.938686][ T7194] ? do_handle_open+0x564/0xc90 [ 175.943630][ T7194] ? __pfx_nsfs_fh_to_dentry+0x10/0x10 [ 175.949355][ T7194] ? __kasan_kmalloc+0xaa/0xb0 [ 175.954392][ T7194] ? __kmalloc_noprof+0x223/0x510 [ 175.959510][ T7194] ? do_handle_open+0x564/0xc90 [ 175.964386][ T7194] ? do_syscall_64+0xcd/0x4e0 [ 175.969055][ T7194] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.975129][ T7194] exportfs_decode_fh_raw+0x167/0x7d0 [ 175.980521][ T7194] ? __pfx_vfs_dentry_acceptable+0x10/0x10 [ 175.986386][ T7194] ? __pfx_nsfs_fh_to_dentry+0x10/0x10 [ 175.991867][ T7194] ? __pfx_exportfs_decode_fh_raw+0x10/0x10 [ 175.997777][ T7194] do_handle_open+0x702/0xc90 [ 176.002455][ T7194] ? __pfx_do_handle_open+0x10/0x10 [ 176.007640][ T7194] ? __x64_sys_futex+0x1e0/0x4c0 [ 176.012605][ T7194] ? xfd_validate_state+0x61/0x180 [ 176.017849][ T7194] ? do_syscall_64+0xcd/0x4e0 [ 176.022785][ T7194] do_syscall_64+0xcd/0x4e0 [ 176.027282][ T7194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.033192][ T7194] RIP: 0033:0x7fc5c5b8eec9 [ 176.037591][ T7194] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 176.057573][ T7194] RSP: 002b:00007fc5c6a33038 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 176.066228][ T7194] RAX: ffffffffffffffda RBX: 00007fc5c5de5fa0 RCX: 00007fc5c5b8eec9 [ 176.074213][ T7194] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 176.082184][ T7194] RBP: 00007fc5c5c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 176.090140][ T7194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 176.098115][ T7194] R13: 00007fc5c5de6038 R14: 00007fc5c5de5fa0 R15: 00007ffeecb323e8 [ 176.106202][ T7194] [ 176.109253][ T7194] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 176.116510][ T7194] CPU: 0 UID: 0 PID: 7194 Comm: syz.1.320 Not tainted syzkaller #0 PREEMPT(full) [ 176.125691][ T7194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 176.135721][ T7194] Call Trace: [ 176.138994][ T7194] [ 176.141912][ T7194] dump_stack_lvl+0x3d/0x1f0 [ 176.146494][ T7194] vpanic+0x6e8/0x7a0 [ 176.150464][ T7194] ? __pfx_vpanic+0x10/0x10 [ 176.154942][ T7194] ? nsfs_fh_to_dentry+0x9de/0xe10 [ 176.160025][ T7194] panic+0xca/0xd0 [ 176.163720][ T7194] ? __pfx_panic+0x10/0x10 [ 176.168127][ T7194] check_panic_on_warn+0xab/0xb0 [ 176.173035][ T7194] __warn+0xf6/0x3c0 [ 176.176900][ T7194] ? nsfs_fh_to_dentry+0x9de/0xe10 [ 176.181981][ T7194] report_bug+0x3c3/0x580 [ 176.186296][ T7194] ? nsfs_fh_to_dentry+0x9de/0xe10 [ 176.191385][ T7194] handle_bug+0x184/0x210 [ 176.195692][ T7194] exc_invalid_op+0x17/0x50 [ 176.200171][ T7194] asm_exc_invalid_op+0x1a/0x20 [ 176.204991][ T7194] RIP: 0010:nsfs_fh_to_dentry+0x9de/0xe10 [ 176.210682][ T7194] Code: 0c 50 ff e9 63 fe ff ff e8 bf 30 74 ff 90 0f 0b 90 e9 7b f8 ff ff e8 b1 30 74 ff 90 0f 0b 90 e9 ce f8 ff ff e8 a3 30 74 ff 90 <0f> 0b 90 e9 32 f9 ff ff e8 95 30 74 ff 49 8d 7d 10 48 b8 00 00 00 [ 176.230264][ T7194] RSP: 0018:ffffc9001d86fb38 EFLAGS: 00010283 [ 176.236318][ T7194] RAX: 0000000000000070 RBX: 0000000000000000 RCX: ffffc90005412000 [ 176.244261][ T7194] RDX: 0000000000080000 RSI: ffffffff8246e85d RDI: 0000000000000004 [ 176.252212][ T7194] RBP: ffff888034be1388 R08: 0000000000000004 R09: 00000000effffff9 [ 176.260153][ T7194] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff92003b0df68 [ 176.268092][ T7194] R13: ffffffff9ad00a98 R14: 00000000effffff9 R15: 0000000000000003 [ 176.276038][ T7194] ? nsfs_fh_to_dentry+0x9dd/0xe10 [ 176.281127][ T7194] ? nsfs_fh_to_dentry+0x9dd/0xe10 [ 176.286207][ T7194] ? do_handle_open+0x564/0xc90 [ 176.291032][ T7194] ? __pfx_nsfs_fh_to_dentry+0x10/0x10 [ 176.296467][ T7194] ? __kasan_kmalloc+0xaa/0xb0 [ 176.301205][ T7194] ? __kmalloc_noprof+0x223/0x510 [ 176.306204][ T7194] ? do_handle_open+0x564/0xc90 [ 176.311022][ T7194] ? do_syscall_64+0xcd/0x4e0 [ 176.315671][ T7194] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.321712][ T7194] exportfs_decode_fh_raw+0x167/0x7d0 [ 176.327069][ T7194] ? __pfx_vfs_dentry_acceptable+0x10/0x10 [ 176.332851][ T7194] ? __pfx_nsfs_fh_to_dentry+0x10/0x10 [ 176.338307][ T7194] ? __pfx_exportfs_decode_fh_raw+0x10/0x10 [ 176.344204][ T7194] do_handle_open+0x702/0xc90 [ 176.348854][ T7194] ? __pfx_do_handle_open+0x10/0x10 [ 176.354030][ T7194] ? __x64_sys_futex+0x1e0/0x4c0 [ 176.358955][ T7194] ? xfd_validate_state+0x61/0x180 [ 176.364051][ T7194] ? do_syscall_64+0xcd/0x4e0 [ 176.368708][ T7194] do_syscall_64+0xcd/0x4e0 [ 176.373200][ T7194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.379072][ T7194] RIP: 0033:0x7fc5c5b8eec9 [ 176.383459][ T7194] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 176.403046][ T7194] RSP: 002b:00007fc5c6a33038 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 176.411440][ T7194] RAX: ffffffffffffffda RBX: 00007fc5c5de5fa0 RCX: 00007fc5c5b8eec9 [ 176.419388][ T7194] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 176.427334][ T7194] RBP: 00007fc5c5c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 176.435292][ T7194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 176.443241][ T7194] R13: 00007fc5c5de6038 R14: 00007fc5c5de5fa0 R15: 00007ffeecb323e8 [ 176.451194][ T7194] [ 176.454411][ T7194] Kernel Offset: disabled [ 176.458708][ T7194] Rebooting in 86400 seconds..