last executing test programs: 9.698892807s ago: executing program 4 (id=1987): socket$nl_generic(0x10, 0x3, 0x10) add_key$user(&(0x7f0000000240), 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x0}, &(0x7f0000000740), 0x0, 0xffffffffffffffff) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0xcc) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000400), 0x400, 0x0) fchdir(r0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x101040, 0x108) getdents64(r2, &(0x7f0000000f80)=""/4096, 0x1000) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r4, 0xc0205648, &(0x7f00000001c0)={0x0, 0x1, 0x0, r4, 0x0, &(0x7f0000000040)={0x98f903, 0x8000, '\x00', @value64=0x7fffffffffffffff}}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2040}, 0x800) 9.612220964s ago: executing program 1 (id=1988): close(0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x25dfdbfb, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x8, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x3, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x499f, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x1a}, 0x40, 0x0, 0x3, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@broadcast, 0x0, 0x33}, 0x0, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x3, 0x1, 0x7}}, 0xe4) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x4cc, 0x0, 0x940c, 0x3002, 0x0, 0x2c0, 0x404, 0x3d8, 0x3d8, 0x404, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x28c, 0x2d4, 0x0, {}, [@common=@inet=@recent0={{0xf4}, {0x0, 0x2, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf4}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, [0x0, 0x0, 0xff000000, 0xff], [0xffffff00, 0xffffff00, 0xff000000, 0xffffffff], 'team_slave_1\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x886215f4d37bb4bb, 0x90, 0x1, 0x69}, 0x0, 0xc8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x24}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x528) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x11, 0x80a, 0x1) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r7, 0x4000) syz_init_net_socket$ax25(0x3, 0x2, 0xce) 9.183764421s ago: executing program 4 (id=1989): socket$pppoe(0x18, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000002c00010026bd70f7fbdbdf250400002804001d00"], 0x18}, 0x1, 0x0, 0x0, 0x404000c}, 0x40000) socket$igmp6(0xa, 0x3, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$join(0x1, &(0x7f0000000040)={'syz', 0x3}) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071100000000000001d400500000000004704000001ed00000f030000000000001d44000000000000620a00fe000000007203000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) 8.640791228s ago: executing program 1 (id=1991): syz_open_dev$vim2m(0x0, 0x7, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2}, 0x18) connect$can_j1939(r1, &(0x7f0000000140)={0x1d, r2}, 0x18) sendmmsg(r1, &(0x7f0000003e40), 0x3fffffffffffe3d, 0x0) 7.931234646s ago: executing program 3 (id=1995): mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x0, 0x200000) ioctl$CEC_S_MODE(r2, 0x40046109, &(0x7f0000000200)=0x8001) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x54, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x80000000}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}]}, 0x54}}, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SDTEFACILITIES(r4, 0x89eb, &(0x7f0000000040)={0x40, 0x8, 0x8, 0x5, 0x1, 0x26, 0x34, "195847a0aa45de6ba8ea4130c81b99fe0129f7cf", "39e8599818f836f17fc62a065f77a36d35695c8b"}) r5 = socket(0xa, 0x2, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) r9 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r9, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r10, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r8, 0xc06864ce, &(0x7f0000000400)={r11, 0x0, 0x0, 0x0, 0x0, [0x0], [], [0x1000], [0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r7, 0xc00c642d, &(0x7f0000000100)={r12, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r13}) close_range(r5, 0xffffffffffffffff, 0x0) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000011035bac9a8e47c85f15838e55d90737a6889c7f65c754631f25cc"], 0xa) syz_init_net_socket$rose(0xb, 0x5, 0x0) 7.498873659s ago: executing program 1 (id=1998): ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0185647, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x54}}, 0x0) 7.497598783s ago: executing program 3 (id=1999): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) getsockopt$ax25_int(r0, 0x101, 0xc, 0x0, &(0x7f0000000300)) 7.28514038s ago: executing program 3 (id=2001): socket$key(0xf, 0x3, 0x2) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0x1a1002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sched_setaffinity(r0, 0xffffffb3, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet6(0xa, 0x6, 0x0) listen(r4, 0x80080400) io_uring_enter(0xffffffffffffffff, 0x2def, 0x4000, 0x0, 0x0, 0x0) r5 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x1, 0x1) fchdir(r6) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 7.284458452s ago: executing program 1 (id=2002): syz_clone3(&(0x7f0000002c00)={0x9828000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r3, 0x1, 0x12, &(0x7f0000000140)=0xffff0000, 0x4) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$netlink(r0, 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x30) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)='jfs\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 6.620179944s ago: executing program 2 (id=2004): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)}, 0x0) 5.716819655s ago: executing program 3 (id=2005): connect$pppoe(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00'}) keyctl$join(0x1, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYRES32=r0], 0x20}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{0x0}], 0x1) syz_usbip_server_init(0x1) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) futex(0x0, 0x3, 0x801, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="21003300d0800000080211000000080211000001505050505050000000000000", @ANYRES16=r3], 0x40}}, 0x0) 5.524880274s ago: executing program 2 (id=2006): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00'}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r0, 0x8982, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xfffffffe, 0x0, 0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x1c, r4, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20048080}, 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r6, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) setsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f00000001c0)={0x2, 0x80, 0xb, 0x1, 0x9, 0xff, 0xf, 0xce, 0x8, 0x82, 0xf3, 0x4, 0x0, 0x8d}, 0xe) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfe00, 0xa0}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9a02fff0}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r9}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000580)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 5.524352654s ago: executing program 1 (id=2007): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x840000000002, 0x3, 0xff) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x14, r5, 0x303, 0x4, 0x25dfdbfd, {0x3d}}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x4000080) 5.016541279s ago: executing program 4 (id=2008): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x201008, 0x0) chdir(&(0x7f0000001180)='./bus\x00') r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x3) dup(r1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x9, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x9) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x8200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x0) close(r3) inotify_init1(0x0) fcntl$setstatus(r3, 0x4, 0x2c00) fcntl$setown(r3, 0x8, 0x0) rmdir(&(0x7f0000000100)='./control\x00') 4.151661835s ago: executing program 1 (id=2010): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={r0, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x1c, "fee8a2ab78fcffffffffffffff2000b8785d960000000000000000000000000f00000000000100000000000000000000000000000200", "2809e897bdb2128bfc82525edd665240f45f819e01982861ac0000000000000000001100", "90be8b1c551265406c7f306003d8a0f4bd00", [0x20]}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$I2C(0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, &(0x7f00000000c0)='wg0\x00', 0x4) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0xa00) 3.704476446s ago: executing program 2 (id=2011): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, 0x0, 0x0, 0x4048841) 3.690024418s ago: executing program 0 (id=2012): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) getsockopt$ax25_int(r0, 0x101, 0xc, 0x0, &(0x7f0000000300)) 3.68948002s ago: executing program 3 (id=2013): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x101000, 0x0) copy_file_range(r2, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)=0x8010000, 0x400000, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000003500)=@newtfilter={0x44, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r5, {0xc, 0x4}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_EMATCHES={0x10, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffc}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8050}, 0x20040054) 3.362758602s ago: executing program 4 (id=2014): openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x7, @remote}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @private2}, {0xa, 0x0, 0x8004, @local}, r1}}, 0x48) openat$cuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) r3 = getpid() syz_pidfd_open(r3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) write$P9_RSTATu(r5, &(0x7f0000000580)=ANY=[@ANYRES32=r2, @ANYBLOB="bb8f7f079fc5012156669aae03789258922cdb06cd91399a4e6e6e87e18f009b54c95c228ec70feb1601de807b0e9a8b55e845ac5b29e5b2a8c57b7530389a66942744e0482f2c8ecad1d41f3f260bb3e4d64faf09908a2f5195be8df4b77dcfcb0273a40783c1197b3f"], 0x20e) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x20) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000000)={0x3, 0x1000000000000000, 0x8000000000000000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x10000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0xffe, 0x0, 0x8, 0x0, 0xfffffffffffffffc, 0x2, 0x100000000004}, 0x0, 0x0) 3.108738161s ago: executing program 2 (id=2015): socket$key(0xf, 0x3, 0x2) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0x1a1002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sched_setaffinity(r0, 0xffffffb3, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet6(0xa, 0x6, 0x0) listen(r4, 0x80080400) io_uring_enter(0xffffffffffffffff, 0x2def, 0x4000, 0x0, 0x0, 0x0) r5 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x1, 0x1) fchdir(r6) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 2.435758662s ago: executing program 0 (id=2016): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)}, 0x0) 2.287317567s ago: executing program 4 (id=2017): prlimit64(0x0, 0x1, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) pipe2$9p(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) truncate(&(0x7f0000000240)='./file0\x00', 0x206b12) 1.784889473s ago: executing program 0 (id=2018): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x48}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x43}, 0x2400c044) 1.73372217s ago: executing program 3 (id=2019): mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) listen(r0, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000005c0)={0x53, 0x20, 0x6, 0x2, @scatter={0x0, 0x3, 0x0}, &(0x7f0000000240)="5b8d7acda0b2", 0x0, 0x1, 0x1, 0x0, 0x0}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) socket$inet6(0x10, 0x80000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000240)={'filter\x00', 0xb001, 0x4, 0x3a8, 0x0, 0x1d0, 0x0, 0x2c0, 0x2c0, 0x2c0, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x2c0}}, {{@uncond, 0xc0, 0xe8, 0x0, {0x0, 0x1e03}}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x46e, 0xfffc}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3f8) pselect6(0x40, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0, 0x2}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0xffffffffffffffff}, 0x0, 0x0) unshare(0x22020600) r5 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) fsmount(r5, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) 1.708923938s ago: executing program 0 (id=2020): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x840000000002, 0x3, 0xff) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x14, r5, 0x303, 0x4, 0x25dfdbfd, {0x3d}}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x4000080) 1.650303293s ago: executing program 4 (id=2021): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000), &(0x7f0000000380)=0x0) syz_io_uring_setup(0x5e2, &(0x7f00000003c0), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r2, 0xa3d, 0x0, 0x0, 0x0, 0x0) mq_open(0x0, 0x6e93ebbbcc0884f2, 0x12e, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@cache_mmap}], [], 0x6b}}) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r8 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$UHID_INPUT(r8, &(0x7f0000000540)={0x8, {"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", 0x1000}}, 0x1006) pwritev2(r8, &(0x7f0000000180)=[{&(0x7f0000000340)='L', 0x1}], 0x1, 0x8, 0x7, 0x17) 1.472527115s ago: executing program 2 (id=2022): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00'}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r0, 0x8982, &(0x7f0000000180)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x1c, r4, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20048080}, 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r6, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) setsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f00000001c0)={0x2, 0x80, 0xb, 0x1, 0x9, 0xff, 0xf, 0xce, 0x8, 0x82, 0xf3, 0x4, 0x0, 0x8d}, 0xe) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfe00, 0xa0}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9a02fff0}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r9}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000580)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 555.523954ms ago: executing program 0 (id=2023): syz_open_dev$vim2m(0x0, 0x7, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2}, 0x18) connect$can_j1939(r1, &(0x7f0000000140)={0x1d, r2}, 0x18) sendmmsg(r1, &(0x7f0000003e40), 0x3fffffffffffe3d, 0x0) 145.963429ms ago: executing program 0 (id=2024): socket$key(0xf, 0x3, 0x2) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0x1a1002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sched_setaffinity(r0, 0xffffffb3, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet6(0xa, 0x6, 0x0) listen(r4, 0x80080400) io_uring_enter(0xffffffffffffffff, 0x2def, 0x4000, 0x0, 0x0, 0x0) r5 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x1, 0x1) fchdir(r6) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 0s ago: executing program 2 (id=2025): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, 0x0, 0x10) r0 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x16fa, 0x800, 0x4, 0x8}, &(0x7f0000000340)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x400, 0x1}) io_uring_enter(r0, 0x3516, 0x0, 0x4, 0x0, 0x0) kernel console output (not intermixed with test programs): ctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 230.519830][ T971] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 230.843089][ T971] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 230.858064][ T971] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 231.052195][ T971] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 231.093829][ T971] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.364875][ T971] usb 4-1: usb_control_msg returned -32 [ 231.379469][ T971] usbtmc 4-1:16.0: can't read capabilities [ 231.450489][ T971] usb 4-1: USB disconnect, device number 6 [ 231.631900][ T7470] netlink: 4 bytes leftover after parsing attributes in process `syz.1.405'. [ 231.739038][ T7470] netlink: 'syz.1.405': attribute type 10 has an invalid length. [ 231.903606][ T7470] bond0: (slave wlan1): Opening slave failed [ 232.289921][ T971] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 232.361265][ T30] audit: type=1400 audit(1746422083.345:905): avc: denied { create } for pid=7496 comm="syz.2.417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 232.380484][ C1] vkms_vblank_simulate: vblank timer overrun [ 232.386658][ T30] audit: type=1400 audit(1746422083.345:906): avc: denied { connect } for pid=7496 comm="syz.2.417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 232.392359][ T7492] siw: device registration error -23 [ 232.410973][ T7492] IPVS: stopping master sync thread 7500 ... [ 232.472365][ T7501] program syz.3.414 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 232.806299][ T30] audit: type=1400 audit(1746422083.345:907): avc: denied { bind } for pid=7496 comm="syz.2.417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 232.806340][ T30] audit: type=1400 audit(1746422083.345:908): avc: denied { write } for pid=7496 comm="syz.2.417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 232.806374][ T30] audit: type=1400 audit(1746422083.345:909): avc: denied { getopt } for pid=7496 comm="syz.2.417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 232.983222][ T971] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 232.983254][ T971] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 232.983293][ T971] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 232.983314][ T971] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.227745][ T971] usb 2-1: usb_control_msg returned -32 [ 233.244719][ T971] usbtmc 2-1:16.0: can't read capabilities [ 233.266115][ T971] usb 2-1: USB disconnect, device number 3 [ 234.798336][ T5823] Bluetooth: hci2: unexpected event for opcode 0x2042 [ 234.807113][ T5861] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 234.931610][ T7534] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input10 [ 235.001948][ T5823] Bluetooth: hci1: unexpected event for opcode 0x202a [ 235.013726][ T5861] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 235.025920][ T5861] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 235.040021][ T5861] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 235.049599][ T5861] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.274957][ T5861] usb 3-1: usb_control_msg returned -32 [ 235.287720][ T5861] usbtmc 3-1:16.0: can't read capabilities [ 235.406911][ T5861] usb 3-1: USB disconnect, device number 4 [ 235.595845][ T5823] Bluetooth: hci1: unexpected event for opcode 0x2042 [ 235.749890][ T30] audit: type=1326 audit(1746422086.715:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7557 comm="syz.1.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f284c98e969 code=0x7ffc0000 [ 235.773110][ C1] vkms_vblank_simulate: vblank timer overrun [ 235.800778][ T30] audit: type=1326 audit(1746422086.715:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7557 comm="syz.1.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f284c98e969 code=0x7ffc0000 [ 235.824097][ C1] vkms_vblank_simulate: vblank timer overrun [ 235.846372][ T30] audit: type=1326 audit(1746422086.715:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7557 comm="syz.1.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f284c98e969 code=0x7ffc0000 [ 235.909166][ T30] audit: type=1326 audit(1746422086.715:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7557 comm="syz.1.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f284c98e969 code=0x7ffc0000 [ 236.051840][ T30] audit: type=1326 audit(1746422086.715:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7557 comm="syz.1.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f284c98e969 code=0x7ffc0000 [ 236.075123][ C1] vkms_vblank_simulate: vblank timer overrun [ 236.114180][ T30] audit: type=1326 audit(1746422086.715:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7557 comm="syz.1.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f284c98e969 code=0x7ffc0000 [ 236.147136][ T7565] random: crng reseeded on system resumption [ 236.446984][ T30] audit: type=1326 audit(1746422086.715:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7557 comm="syz.1.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f284c98e969 code=0x7ffc0000 [ 236.941712][ T30] audit: type=1326 audit(1746422086.715:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7557 comm="syz.1.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f284c98e969 code=0x7ffc0000 [ 237.018452][ T30] audit: type=1326 audit(1746422086.715:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7557 comm="syz.1.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f284c98e969 code=0x7ffc0000 [ 237.100052][ T30] audit: type=1326 audit(1746422086.715:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7557 comm="syz.1.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f284c98e969 code=0x7ffc0000 [ 237.459899][ T971] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 237.714644][ T971] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 237.725672][ T971] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 237.748246][ T971] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 237.769550][ T971] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.059197][ T971] usb 2-1: usb_control_msg returned -32 [ 238.071754][ T971] usbtmc 2-1:16.0: can't read capabilities [ 238.079097][ T5861] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 238.468961][ T7602] 9pnet_fd: Insufficient options for proto=fd [ 238.492414][ T7600] netlink: 'syz.4.454': attribute type 1 has an invalid length. [ 238.500152][ T7600] netlink: 'syz.4.454': attribute type 2 has an invalid length. [ 238.532216][ T7598] nftables ruleset with unbound set [ 238.626580][ T7608] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input11 [ 238.702406][ T5861] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 238.727201][ T5861] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 238.802772][ T5861] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 238.812186][ T5861] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.039091][ T5861] usb 3-1: usb_control_msg returned -32 [ 239.044783][ T5861] usbtmc 3-1:16.0: can't read capabilities [ 239.065825][ T5861] usb 3-1: USB disconnect, device number 5 [ 240.361933][ T9] usb 2-1: USB disconnect, device number 4 [ 240.796884][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 240.807483][ T30] audit: type=1400 audit(1746422091.775:950): avc: denied { getopt } for pid=7620 comm="syz.4.462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 240.944977][ T30] audit: type=1400 audit(1746422091.905:951): avc: denied { ioctl } for pid=7639 comm="syz.3.467" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 241.199329][ T30] audit: type=1400 audit(1746422092.175:952): avc: denied { bind } for pid=7639 comm="syz.3.467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 241.419035][ T30] audit: type=1400 audit(1746422092.385:953): avc: denied { mounton } for pid=7653 comm="syz.2.474" path="/proc/284/task" dev="proc" ino=13976 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 242.350312][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 242.521402][ T9] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 242.610514][ T9] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 242.637258][ T9] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 242.651271][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.073963][ T7671] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 243.102030][ T9] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 243.314897][ T5862] usb 3-1: USB disconnect, device number 6 [ 243.924593][ T30] audit: type=1400 audit(1746422094.905:954): avc: denied { append } for pid=7708 comm="syz.4.492" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 243.948082][ C0] vkms_vblank_simulate: vblank timer overrun [ 243.957873][ T7709] loop6: detected capacity change from 0 to 63 [ 243.974300][ T7709] Buffer I/O error on dev loop6, logical block 0, async page read [ 243.983397][ T7709] Buffer I/O error on dev loop6, logical block 1, async page read [ 243.993794][ T30] audit: type=1400 audit(1746422094.945:955): avc: denied { map } for pid=7708 comm="syz.4.492" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 244.017525][ C0] vkms_vblank_simulate: vblank timer overrun [ 244.027724][ T7709] Buffer I/O error on dev loop6, logical block 2, async page read [ 244.036661][ T7709] Buffer I/O error on dev loop6, logical block 3, async page read [ 244.048978][ T7710] Buffer I/O error on dev loop6, logical block 0, async page read [ 244.069251][ T30] audit: type=1400 audit(1746422094.945:956): avc: denied { execute } for pid=7708 comm="syz.4.492" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 244.114227][ T7710] Buffer I/O error on dev loop6, logical block 1, async page read [ 244.157630][ T7710] Buffer I/O error on dev loop6, logical block 2, async page read [ 244.199321][ T7710] Buffer I/O error on dev loop6, logical block 3, async page read [ 244.257547][ T7710] Buffer I/O error on dev loop6, logical block 0, async page read [ 244.284571][ T7710] Buffer I/O error on dev loop6, logical block 1, async page read [ 244.717218][ T5823] Bluetooth: hci2: unexpected event for opcode 0x2042 [ 245.473787][ T7729] evm: overlay not supported [ 245.536176][ T7728] 9pnet_fd: Insufficient options for proto=fd [ 246.737905][ T5862] kernel write not supported for file /radio9 (pid: 5862 comm: kworker/1:5) [ 247.820080][ T5823] Bluetooth: hci1: unexpected event for opcode 0x2042 [ 248.106923][ T30] audit: type=1400 audit(1746422099.085:957): avc: denied { block_suspend } for pid=7758 comm="syz.0.509" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 248.181300][ T30] audit: type=1326 audit(1746422099.165:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7758 comm="syz.0.509" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f212e18e969 code=0x0 [ 249.047427][ T7784] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 249.115345][ T7769] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 249.131884][ T7769] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 249.179910][ T30] audit: type=1326 audit(1746422100.135:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7786 comm="syz.4.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7bdf8e969 code=0x7ffc0000 [ 249.207840][ T7784] netlink: 4 bytes leftover after parsing attributes in process `syz.0.516'. [ 249.325144][ T7769] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 249.343509][ T30] audit: type=1326 audit(1746422100.135:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7786 comm="syz.4.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7bdf8e969 code=0x7ffc0000 [ 249.379885][ T30] audit: type=1326 audit(1746422100.135:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7786 comm="syz.4.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe7bdf8e969 code=0x7ffc0000 [ 249.403185][ T7769] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 249.740868][ T7769] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 249.746875][ T7769] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 249.769250][ T30] audit: type=1326 audit(1746422100.135:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7786 comm="syz.4.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7bdf8e969 code=0x7ffc0000 [ 249.892388][ T30] audit: type=1326 audit(1746422100.135:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7786 comm="syz.4.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7bdf8e969 code=0x7ffc0000 [ 249.936222][ T30] audit: type=1326 audit(1746422100.135:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7786 comm="syz.4.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7bdf8e969 code=0x7ffc0000 [ 249.990990][ T30] audit: type=1326 audit(1746422100.135:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7786 comm="syz.4.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7bdf8e969 code=0x7ffc0000 [ 250.042502][ T7769] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 250.072421][ T7769] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 250.085114][ T30] audit: type=1326 audit(1746422100.135:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7786 comm="syz.4.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe7bdf8e969 code=0x7ffc0000 [ 251.420680][ T7832] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 252.029965][ T7832] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 252.075066][ T7841] autofs: Bad value for 'fd' [ 252.294612][ T7844] netlink: 4 bytes leftover after parsing attributes in process `syz.4.535'. [ 252.294651][ T7844] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 252.294684][ T7844] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 252.326629][ T7844] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 252.326655][ T7844] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 253.556187][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 253.556204][ T30] audit: type=1400 audit(1746422104.535:981): avc: denied { setattr } for pid=7851 comm="syz.2.540" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 253.712476][ T7855] Malformed UNC in devname [ 253.712476][ T7855] [ 253.727366][ T7855] CIFS: VFS: Malformed UNC in devname [ 253.855119][ T7857] netlink: 12 bytes leftover after parsing attributes in process `syz.2.540'. [ 253.930899][ T7857] binder: 7851:7857 ioctl c0306201 200000000040 returned -22 [ 254.391751][ T7867] binder: 7866:7867 ioctl c0306201 0 returned -14 [ 254.412921][ T7867] binder: 7866:7867 ioctl c0306201 200000000540 returned -22 [ 255.553352][ T7884] netlink: 8 bytes leftover after parsing attributes in process `syz.0.542'. [ 255.583454][ T7884] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 255.621025][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.655404][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.299582][ T7889] autofs: Bad value for 'fd' [ 258.181736][ T7906] could not allocate digest TFM handle cbcmac-aes-neon [ 258.428056][ T7921] autofs: Bad value for 'fd' [ 258.505116][ T7919] ptrace attach of "./syz-executor exec"[5810] was attempted by ""[7919] [ 259.282077][ T7938] netlink: 'syz.0.558': attribute type 10 has an invalid length. [ 259.410918][ T7938] veth0_vlan: left promiscuous mode [ 259.543288][ T7938] veth0_vlan: entered promiscuous mode [ 259.564814][ T7938] team0: Device veth0_vlan failed to register rx_handler [ 261.129347][ T7960] Malformed UNC in devname [ 261.129347][ T7960] [ 261.225079][ T7960] CIFS: VFS: Malformed UNC in devname [ 261.955371][ T7966] autofs: Unknown parameter '0x0000000000000000' [ 262.161663][ T30] audit: type=1400 audit(1746422113.135:982): avc: denied { read } for pid=7971 comm="syz.1.575" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 262.414128][ T30] audit: type=1400 audit(1746422113.135:983): avc: denied { open } for pid=7971 comm="syz.1.575" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 263.399377][ T7984] random: crng reseeded on system resumption [ 263.754109][ T30] audit: type=1400 audit(1746422114.735:984): avc: denied { ioctl } for pid=7981 comm="syz.1.578" path="socket:[15491]" dev="sockfs" ino=15491 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 265.041200][ T30] audit: type=1400 audit(1746422115.905:985): avc: denied { getopt } for pid=7997 comm="syz.0.584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 265.086068][ T8002] autofs: Unknown parameter '0x0000000000000000' [ 265.238341][ T8004] overlayfs: failed to clone lowerpath [ 267.339881][ T30] audit: type=1400 audit(1746422118.315:986): avc: denied { bind } for pid=8015 comm="syz.4.590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 267.407779][ T30] audit: type=1400 audit(1746422118.315:987): avc: denied { name_bind } for pid=8015 comm="syz.4.590" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 267.407822][ T30] audit: type=1400 audit(1746422118.315:988): avc: denied { node_bind } for pid=8015 comm="syz.4.590" saddr=2001::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 268.243298][ T30] audit: type=1400 audit(1746422119.225:989): avc: denied { connect } for pid=8036 comm="syz.2.595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 268.896818][ T30] audit: type=1400 audit(1746422119.875:990): avc: denied { bind } for pid=8047 comm="syz.2.599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 269.020498][ T30] audit: type=1400 audit(1746422119.895:991): avc: denied { listen } for pid=8047 comm="syz.2.599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 269.140573][ T8052] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 269.244264][ T30] audit: type=1400 audit(1746422119.975:992): avc: denied { connect } for pid=8047 comm="syz.2.599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 270.039391][ T30] audit: type=1400 audit(1746422121.015:993): avc: denied { shutdown } for pid=8047 comm="syz.2.599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 271.127690][ T30] audit: type=1400 audit(1746422122.065:994): avc: denied { module_request } for pid=8074 comm="syz.4.607" kmod="net-pf-35-proto-4" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 271.297046][ T8079] lo speed is unknown, defaulting to 1000 [ 271.333049][ T8079] lo speed is unknown, defaulting to 1000 [ 271.353509][ T8079] lo speed is unknown, defaulting to 1000 [ 271.395806][ T8079] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 271.726866][ T8079] lo speed is unknown, defaulting to 1000 [ 271.733612][ T8079] lo speed is unknown, defaulting to 1000 [ 271.799022][ T8079] lo speed is unknown, defaulting to 1000 [ 271.805722][ T8079] lo speed is unknown, defaulting to 1000 [ 271.832547][ T8079] lo speed is unknown, defaulting to 1000 [ 271.892907][ T8081] smc: removing ib device syz! [ 275.057483][ T9] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 275.212473][ T9] usb 4-1: device descriptor read/64, error -71 [ 275.520079][ T9] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 275.652498][ T9] usb 4-1: device descriptor read/64, error -71 [ 276.275587][ T9] usb usb4-port1: attempt power cycle [ 276.418994][ T8146] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 276.680860][ T9] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 276.814668][ T9] usb 4-1: device descriptor read/8, error -71 [ 277.750013][ T9] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 278.271944][ T9] usb 4-1: device not accepting address 10, error -71 [ 278.545552][ T9] usb usb4-port1: unable to enumerate USB device [ 278.646060][ T5871] lo speed is unknown, defaulting to 1000 [ 278.652486][ T30] audit: type=1400 audit(1746422129.625:995): avc: denied { ioctl } for pid=8163 comm="syz.3.634" path="socket:[15317]" dev="sockfs" ino=15317 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 278.659795][ T5871] syz0: Port: 1 Link DOWN [ 279.622762][ T8177] overlayfs: missing 'lowerdir' [ 280.750975][ T8190] netlink: 24 bytes leftover after parsing attributes in process `syz.3.641'. [ 281.979559][ T8225] lo speed is unknown, defaulting to 1000 [ 281.992884][ T8225] lo speed is unknown, defaulting to 1000 [ 282.406378][ T8231] sch_fq: defrate 113 ignored. [ 282.625306][ T8236] netlink: 'syz.4.651': attribute type 11 has an invalid length. [ 282.633192][ T8236] netlink: 224 bytes leftover after parsing attributes in process `syz.4.651'. [ 282.684065][ T30] audit: type=1400 audit(1746422133.665:996): avc: denied { mount } for pid=8213 comm="syz.4.651" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 282.802059][ T30] audit: type=1804 audit(1746422133.735:997): pid=8242 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.657" name="bus" dev="tmpfs" ino=825 res=1 errno=0 [ 284.764873][ T8285] lo speed is unknown, defaulting to 1000 [ 284.778450][ T8285] lo speed is unknown, defaulting to 1000 [ 285.160050][ T5862] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 285.394391][ T5862] usb 4-1: Using ep0 maxpacket: 8 [ 285.453330][ T5862] usb 4-1: config index 0 descriptor too short (expected 74, got 45) [ 285.465801][ T5862] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 285.510014][ T30] audit: type=1400 audit(1746422136.485:998): avc: denied { setopt } for pid=8303 comm="syz.4.676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 285.558405][ T8304] netlink: 8 bytes leftover after parsing attributes in process `syz.4.676'. [ 285.569542][ T8304] netlink: 24 bytes leftover after parsing attributes in process `syz.4.676'. [ 285.615712][ T5862] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 285.626340][ T5862] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 285.637703][ T5862] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 285.648209][ T5862] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 285.665387][ T5862] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 285.674593][ T5862] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.675997][ T8304] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=8304 comm=syz.4.676 [ 286.376538][ T5862] usb 4-1: GET_CAPABILITIES returned 0 [ 286.383940][ T5862] usbtmc 4-1:16.0: can't read capabilities [ 286.449578][ T8316] siw: device registration error -23 [ 286.837110][ T8317] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 286.863255][ T5861] usb 4-1: USB disconnect, device number 11 [ 287.237009][ T30] audit: type=1400 audit(1746422138.215:999): avc: denied { ioctl } for pid=8330 comm="syz.4.684" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 287.519975][ T8345] lo speed is unknown, defaulting to 1000 [ 287.532024][ T8345] lo speed is unknown, defaulting to 1000 [ 288.564531][ T30] audit: type=1400 audit(1746422139.495:1000): avc: denied { setopt } for pid=8362 comm="syz.0.694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 288.613645][ T30] audit: type=1400 audit(1746422139.495:1001): avc: denied { read } for pid=8362 comm="syz.0.694" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 290.358498][ T30] audit: type=1400 audit(1746422141.305:1002): avc: denied { mounton } for pid=8391 comm="syz.2.702" path="/142/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 291.149823][ T8404] lo speed is unknown, defaulting to 1000 [ 291.162671][ T8404] lo speed is unknown, defaulting to 1000 [ 292.396705][ T8433] netlink: 12 bytes leftover after parsing attributes in process `syz.2.715'. [ 294.241980][ T30] audit: type=1400 audit(1746422145.215:1003): avc: denied { create } for pid=8446 comm="syz.1.719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 294.674553][ T8472] siw: device registration error -23 [ 295.224372][ T30] audit: type=1400 audit(1746422146.205:1004): avc: denied { name_bind } for pid=8474 comm="syz.1.728" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 296.670317][ T30] audit: type=1400 audit(1746422147.615:1005): avc: denied { read } for pid=8490 comm="syz.4.734" name="file0" dev="fuse" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 296.683578][ T8505] block device autoloading is deprecated and will be removed. [ 296.702827][ T30] audit: type=1400 audit(1746422147.615:1006): avc: denied { open } for pid=8490 comm="syz.4.734" path="/132/file0/file0" dev="fuse" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 297.236660][ T30] audit: type=1400 audit(1746422147.755:1007): avc: denied { allowed } for pid=8508 comm="syz.1.738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 297.418817][ T8514] netlink: 28 bytes leftover after parsing attributes in process `syz.4.739'. [ 298.177793][ T8527] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 299.547234][ T8567] netlink: 12 bytes leftover after parsing attributes in process `syz.1.760'. [ 300.393672][ T8596] 8021q: adding VLAN 0 to HW filter on device bond1 [ 300.570311][ T8600] netlink: zone id is out of range [ 300.579667][ T8600] netlink: zone id is out of range [ 300.596850][ T8600] netlink: zone id is out of range [ 300.612275][ T8600] netlink: zone id is out of range [ 300.628325][ T8600] netlink: zone id is out of range [ 300.641797][ T8600] netlink: zone id is out of range [ 300.652140][ T30] audit: type=1400 audit(1746422151.635:1008): avc: denied { getopt } for pid=8605 comm="syz.3.775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 300.655082][ T8600] netlink: zone id is out of range [ 300.773231][ T8600] netlink: del zone limit has 4 unknown bytes [ 300.874989][ T8613] siw: device registration error -23 [ 300.888426][ T8613] IPVS: stopping master sync thread 8317 ... [ 301.734021][ T8626] wireguard0: entered promiscuous mode [ 301.744929][ T8626] wireguard0: entered allmulticast mode [ 302.196396][ T8636] dummy0: entered promiscuous mode [ 302.203019][ T8636] macsec1: entered allmulticast mode [ 302.210431][ T8636] dummy0: entered allmulticast mode [ 303.121045][ T8655] No control pipe specified [ 303.415528][ T8664] netlink: 28 bytes leftover after parsing attributes in process `syz.0.793'. [ 304.562574][ T8669] wireguard0: entered promiscuous mode [ 304.568061][ T8669] wireguard0: entered allmulticast mode [ 304.593989][ T8681] random: crng reseeded on system resumption [ 304.794024][ T8684] No control pipe specified [ 304.954534][ T8692] netlink: 28 bytes leftover after parsing attributes in process `syz.2.804'. [ 305.936463][ T8705] wireguard0: entered promiscuous mode [ 305.942182][ T8705] wireguard0: entered allmulticast mode [ 306.719669][ T8721] No control pipe specified [ 306.730800][ T8722] ======================================================= [ 306.730800][ T8722] WARNING: The mand mount option has been deprecated and [ 306.730800][ T8722] and is ignored by this kernel. Remove the mand [ 306.730800][ T8722] option from the mount to silence this warning. [ 306.730800][ T8722] ======================================================= [ 306.766038][ T8722] 9pnet_virtio: no channels available for device syz [ 306.915975][ T30] audit: type=1800 audit(1746422157.855:1009): pid=8722 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.815" name="bus" dev="overlay" ino=809 res=0 errno=0 [ 306.937558][ C1] vkms_vblank_simulate: vblank timer overrun [ 307.409844][ T5871] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 307.561093][ T5871] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 307.561118][ T5871] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 307.561139][ T5871] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 307.561151][ T5871] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.669498][ T8732] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 307.849284][ T5871] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 308.098892][ T5871] usb 3-1: USB disconnect, device number 7 [ 308.469965][ T8747] wireguard1: entered promiscuous mode [ 308.495838][ T8747] wireguard1: entered allmulticast mode [ 308.677442][ T30] audit: type=1400 audit(1746422159.655:1010): avc: denied { bind } for pid=8755 comm="syz.1.826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 308.715215][ T30] audit: type=1400 audit(1746422159.675:1011): avc: denied { write } for pid=8755 comm="syz.1.826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 311.082159][ T30] audit: type=1400 audit(1746422162.065:1012): avc: denied { create } for pid=8792 comm="syz.3.840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 311.101736][ C1] vkms_vblank_simulate: vblank timer overrun [ 312.836746][ T8821] 9pnet_virtio: no channels available for device syz [ 312.862537][ T8821] overlayfs: failed to clone upperpath [ 312.905173][ T30] audit: type=1400 audit(1746422163.885:1013): avc: denied { read } for pid=8824 comm="syz.1.851" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 312.983236][ T30] audit: type=1400 audit(1746422163.885:1014): avc: denied { open } for pid=8824 comm="syz.1.851" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 313.006197][ C1] vkms_vblank_simulate: vblank timer overrun [ 314.338456][ T8847] lo speed is unknown, defaulting to 1000 [ 314.351653][ T8847] lo speed is unknown, defaulting to 1000 [ 315.120953][ T8859] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 315.146047][ T8859] netlink: 4 bytes leftover after parsing attributes in process `syz.4.860'. [ 316.066386][ T8865] IPVS: stopping master sync thread 8864 ... [ 316.437512][ T8873] 9pnet_virtio: no channels available for device syz [ 316.511612][ T30] audit: type=1400 audit(1746422167.495:1015): avc: denied { link } for pid=8872 comm="syz.2.864" name="#17" dev="tmpfs" ino=914 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 316.598865][ T30] audit: type=1400 audit(1746422167.495:1016): avc: denied { rename } for pid=8872 comm="syz.2.864" name="#18" dev="tmpfs" ino=914 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 316.598918][ T30] audit: type=1800 audit(1746422167.545:1017): pid=8873 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.864" name="bus" dev="overlay" ino=915 res=0 errno=0 [ 316.928066][ T30] audit: type=1400 audit(1746422167.905:1018): avc: denied { read } for pid=8882 comm="syz.0.869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 317.054985][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.062738][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.153437][ T30] audit: type=1400 audit(1746422168.135:1019): avc: denied { mount } for pid=8891 comm="syz.1.872" name="/" dev="hugetlbfs" ino=18665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 317.195636][ T30] audit: type=1400 audit(1746422168.165:1020): avc: denied { remount } for pid=8891 comm="syz.1.872" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 317.251324][ T30] audit: type=1400 audit(1746422168.175:1021): avc: denied { unmount } for pid=5807 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 317.451052][ T8890] lo speed is unknown, defaulting to 1000 [ 317.466608][ T8890] lo speed is unknown, defaulting to 1000 [ 317.758388][ T30] audit: type=1400 audit(1746422168.735:1022): avc: denied { append } for pid=8895 comm="syz.1.873" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 318.704453][ T8913] could not allocate digest TFM handle cbcmac-aes-neon [ 318.774530][ T8921] netlink: 8 bytes leftover after parsing attributes in process `syz.4.878'. [ 319.131708][ T8926] nvme_fabrics: missing parameter 'transport=%s' [ 319.179871][ T8926] nvme_fabrics: missing parameter 'nqn=%s' [ 319.940851][ T8939] ptrace attach of "./syz-executor exec"[5808] was attempted by ""[8939] [ 320.890387][ T5862] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 321.099939][ T5862] usb 3-1: Using ep0 maxpacket: 8 [ 321.108127][ T5862] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 321.127621][ T5862] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 321.192990][ T5862] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 321.241608][ T5862] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 321.268498][ T5862] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 321.287201][ T5862] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 321.333464][ T8961] netlink: 24 bytes leftover after parsing attributes in process `syz.1.892'. [ 321.349794][ T5862] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 321.379467][ T5862] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.546297][ T5862] usb 3-1: GET_CAPABILITIES returned 0 [ 322.551959][ T5862] usbtmc 3-1:16.0: can't read capabilities [ 322.794404][ T47] usb 3-1: USB disconnect, device number 8 [ 323.583520][ T8998] netlink: 'syz.1.902': attribute type 23 has an invalid length. [ 323.782269][ T9006] netlink: 24 bytes leftover after parsing attributes in process `syz.1.906'. [ 323.924357][ T9007] lo speed is unknown, defaulting to 1000 [ 323.937793][ T9007] lo speed is unknown, defaulting to 1000 [ 324.343908][ T9015] netlink: 16 bytes leftover after parsing attributes in process `syz.4.909'. [ 324.623620][ T47] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 324.811503][ T47] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 324.822768][ T47] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 324.838381][ T47] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 324.859852][ T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.985398][ T9012] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 325.017006][ T47] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 325.231410][ T47] usb 4-1: USB disconnect, device number 12 [ 326.034262][ T30] audit: type=1400 audit(1746422176.495:1023): avc: denied { create } for pid=9025 comm="syz.2.914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 326.785241][ T30] audit: type=1400 audit(1746422177.765:1024): avc: denied { execute_no_trans } for pid=9040 comm="syz.4.917" path="/178/file0" dev="tmpfs" ino=959 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 328.274500][ T9058] netlink: 'syz.1.921': attribute type 4 has an invalid length. [ 328.302802][ T9058] netlink: 152 bytes leftover after parsing attributes in process `syz.1.921'. [ 328.351735][ T9058] : renamed from bond0 (while UP) [ 328.400773][ T9060] 9pnet: Found fid 0 not clunked [ 328.828926][ T9068] 9pnet_virtio: no channels available for device syz [ 328.945345][ T9060] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 330.060687][ T9082] overlayfs: failed to clone lowerpath [ 330.428634][ T30] audit: type=1400 audit(1746422181.405:1025): avc: denied { write } for pid=9084 comm="syz.4.929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 330.741289][ T9096] netlink: 4 bytes leftover after parsing attributes in process `syz.4.929'. [ 331.759666][ T9115] program syz.2.936 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 332.696196][ T9100] random: crng reseeded on system resumption [ 332.728020][ T9124] netlink: 8 bytes leftover after parsing attributes in process `syz.4.938'. [ 332.952504][ T9126] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 333.077622][ T9126] netlink: 4 bytes leftover after parsing attributes in process `syz.3.939'. [ 333.972194][ T30] audit: type=1400 audit(1746422184.945:1026): avc: denied { append } for pid=9136 comm="syz.2.940" name="video7" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 334.473536][ T9143] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 334.842049][ T9147] wireguard1: entered promiscuous mode [ 334.848669][ T9147] wireguard1: entered allmulticast mode [ 335.203407][ T9160] overlayfs: missing 'lowerdir' [ 335.654350][ T9169] netlink: 4 bytes leftover after parsing attributes in process `syz.1.952'. [ 335.949887][ T47] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 336.104243][ T9177] netlink: 12 bytes leftover after parsing attributes in process `syz.1.954'. [ 336.681403][ T47] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 336.718213][ T47] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 336.736373][ T47] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 336.765636][ T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.104655][ T47] usb 4-1: usb_control_msg returned -32 [ 337.145366][ T47] usbtmc 4-1:16.0: can't read capabilities [ 337.365814][ T9197] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 337.937174][ T5900] usb 4-1: USB disconnect, device number 13 [ 338.725277][ T9214] netlink: 4 bytes leftover after parsing attributes in process `syz.3.965'. [ 339.246063][ T30] audit: type=1400 audit(1746422190.215:1027): avc: denied { ioctl } for pid=9218 comm="syz.4.967" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 339.952914][ T9225] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 339.959866][ T9225] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 339.973074][ T9225] hsr_slave_0: left promiscuous mode [ 340.002828][ T9225] hsr_slave_1: left promiscuous mode [ 340.105904][ T30] audit: type=1400 audit(1746422191.075:1028): avc: denied { mount } for pid=9226 comm="syz.1.970" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 340.423711][ T9241] 9pnet_virtio: no channels available for device syz [ 340.929644][ T30] audit: type=1800 audit(1746422191.905:1029): pid=9241 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.974" name="bus" dev="overlay" ino=1025 res=0 errno=0 [ 341.029925][ T30] audit: type=1804 audit(1746422191.975:1030): pid=9236 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.972" name="/newroot/197/bus" dev="tmpfs" ino=1073 res=1 errno=0 [ 342.878431][ T9273] netlink: 4 bytes leftover after parsing attributes in process `syz.3.984'. [ 344.587767][ T9296] netlink: 80 bytes leftover after parsing attributes in process `syz.3.990'. [ 345.141875][ T9310] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 346.368103][ T9326] overlayfs: missing 'lowerdir' [ 347.095810][ T9333] siw: device registration error -23 [ 347.800811][ T9337] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1003'. [ 348.493979][ T9349] lo speed is unknown, defaulting to 1000 [ 348.507119][ T9349] lo speed is unknown, defaulting to 1000 [ 349.646150][ T9355] could not allocate digest TFM handle cbcmac-aes-neon [ 350.378772][ T9366] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 351.623989][ T5871] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 351.758800][ T30] audit: type=1400 audit(1746422202.655:1031): avc: denied { bind } for pid=9387 comm="syz.2.1015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 351.800129][ T5871] usb 2-1: Using ep0 maxpacket: 8 [ 351.812336][ T5871] usb 2-1: config index 0 descriptor too short (expected 5924, got 36) [ 351.823574][ T5871] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 351.832818][ T5871] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 351.847227][ T5871] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 351.857646][ T5871] usb 2-1: config 250 has no interface number 0 [ 351.864417][ T5871] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 351.875082][ T5871] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 351.885595][ T5871] usb 2-1: config 250 interface 228 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 351.899520][ T5871] usb 2-1: config 250 interface 228 has no altsetting 0 [ 351.911485][ T30] audit: type=1400 audit(1746422202.655:1032): avc: denied { setopt } for pid=9387 comm="syz.2.1015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 352.007877][ T5871] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 352.017303][ T5871] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 352.027296][ T5871] usb 2-1: Product: syz [ 352.032691][ T5871] usb 2-1: SerialNumber: syz [ 352.170672][ T5871] hub 2-1:250.228: bad descriptor, ignoring hub [ 352.177799][ T5871] hub 2-1:250.228: probe with driver hub failed with error -5 [ 352.598814][ T5871] usblp 2-1:250.228: usblp0: USB Unidirectional printer dev 5 if 228 alt 255 proto 1 vid 0x0525 pid 0xD292 [ 352.749857][ T9403] could not allocate digest TFM handle cbcmac-aes-neon [ 352.861639][ T30] audit: type=1400 audit(1746422203.845:1033): avc: denied { read write } for pid=9381 comm="syz.1.1014" name="lp0" dev="devtmpfs" ino=2903 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 353.933902][ T30] audit: type=1400 audit(1746422203.865:1034): avc: denied { open } for pid=9381 comm="syz.1.1014" path="/dev/usb/lp0" dev="devtmpfs" ino=2903 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 354.902674][ T5871] usb 2-1: USB disconnect, device number 5 [ 354.917047][ T5871] usblp0: removed [ 357.603951][ T30] audit: type=1804 audit(1746422208.565:1035): pid=9460 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.1031" name="/newroot/202/bus" dev="tmpfs" ino=1093 res=1 errno=0 [ 358.881832][ T971] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 359.189802][ T971] usb 2-1: Using ep0 maxpacket: 8 [ 359.230108][ T971] usb 2-1: config index 0 descriptor too short (expected 5924, got 36) [ 359.238428][ T971] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 359.249735][ T971] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 359.270930][ T971] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 359.292569][ T971] usb 2-1: config 250 has no interface number 0 [ 359.298886][ T971] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 359.350872][ T9481] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1041'. [ 359.374490][ T971] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 359.427668][ T971] usb 2-1: config 250 interface 228 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 359.480012][ T971] usb 2-1: config 250 interface 228 has no altsetting 0 [ 359.493661][ T971] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 359.511187][ T971] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 359.788221][ T9492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 359.838958][ T971] usb 2-1: Product: syz [ 359.843573][ T971] usb 2-1: SerialNumber: syz [ 359.878820][ T9486] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 360.018868][ T9494] lo speed is unknown, defaulting to 1000 [ 360.030208][ T9494] lo speed is unknown, defaulting to 1000 [ 360.440894][ T971] hub 2-1:250.228: bad descriptor, ignoring hub [ 360.475771][ T971] hub 2-1:250.228: probe with driver hub failed with error -5 [ 360.556226][ T971] usblp 2-1:250.228: usblp0: USB Unidirectional printer dev 6 if 228 alt 255 proto 1 vid 0x0525 pid 0xD292 [ 360.844563][ T9506] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 360.898029][ T9511] 9pnet_virtio: no channels available for device syz [ 360.960105][ T5862] usb 2-1: USB disconnect, device number 6 [ 360.978069][ T5862] usblp0: removed [ 361.103047][ T9521] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 361.348657][ T9521] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1052'. [ 361.961703][ T30] audit: type=1400 audit(1746422212.945:1036): avc: denied { write } for pid=9536 comm="syz.1.1060" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 362.075389][ T9539] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1059'. [ 362.278248][ T9544] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1061'. [ 362.494166][ T5871] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 362.686293][ T9556] lo speed is unknown, defaulting to 1000 [ 362.700130][ T9556] lo speed is unknown, defaulting to 1000 [ 362.978995][ T5862] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 363.049865][ T5871] usb 2-1: Using ep0 maxpacket: 8 [ 363.059490][ T5871] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 363.069945][ T5871] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.103864][ T5871] pvrusb2: Hardware description: Terratec Grabster AV400 [ 363.115412][ T5871] pvrusb2: ********** [ 363.119438][ T5871] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 363.132508][ T5871] pvrusb2: Important functionality might not be entirely working. [ 363.141038][ T5871] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 363.156381][ T5871] pvrusb2: ********** [ 363.169811][ T5862] usb 4-1: Using ep0 maxpacket: 8 [ 363.171335][ T5862] usb 4-1: config index 0 descriptor too short (expected 5924, got 36) [ 363.187151][ T5862] usb 4-1: config 250 has an invalid interface number: 228 but max is -1 [ 363.199614][ T5862] usb 4-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 363.215350][ T5862] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 363.226643][ T5862] usb 4-1: config 250 has no interface number 0 [ 363.319254][ T5862] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 363.332665][ T5862] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 363.343250][ T5862] usb 4-1: config 250 interface 228 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 363.347300][ T2329] pvrusb2: Invalid write control endpoint [ 363.357829][ T5862] usb 4-1: config 250 interface 228 has no altsetting 0 [ 363.495631][ T9570] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 363.527829][ T5862] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 363.541988][ T5862] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 363.550811][ T5862] usb 4-1: Product: syz [ 363.555003][ T5862] usb 4-1: SerialNumber: syz [ 363.559674][ T2329] pvrusb2: Invalid write control endpoint [ 363.568499][ T2329] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 363.592372][ T5862] hub 4-1:250.228: bad descriptor, ignoring hub [ 363.598851][ T5862] hub 4-1:250.228: probe with driver hub failed with error -5 [ 363.944242][ T2329] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 363.948808][ T5862] usblp 4-1:250.228: usblp0: USB Unidirectional printer dev 14 if 228 alt 255 proto 1 vid 0x0525 pid 0xD292 [ 363.951899][ T2329] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 363.951932][ T2329] pvrusb2: Device being rendered inoperable [ 363.981373][ T9546] pvrusb2: Attempted to execute control transfer when device not ok [ 363.991700][ T2329] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 363.994926][ T9] usb 2-1: USB disconnect, device number 7 [ 364.013549][ T2329] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 364.063664][ T5862] usb 4-1: USB disconnect, device number 14 [ 364.072763][ T2329] pvrusb2: Attached sub-driver cx25840 [ 364.082223][ T2329] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 364.093681][ T2329] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 364.300536][ T5862] usblp0: removed [ 364.334127][ T9580] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1076'. [ 364.553024][ T9591] Malformed UNC in devname [ 364.553024][ T9591] [ 364.561930][ T9591] CIFS: VFS: Malformed UNC in devname [ 364.680575][ T9596] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1083'. [ 365.059981][ T9611] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 365.691088][ T5871] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 365.883960][ T5871] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 365.919608][ T5871] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 365.960806][ T5871] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 366.046601][ T5871] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 366.076922][ T5871] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.262275][ T5871] usbtmc 4-1:16.0: probe with driver usbtmc failed with error -22 [ 367.387466][ T9631] cgroup: fork rejected by pids controller in /syz4 [ 367.846384][ T36] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.881079][ T9644] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 367.985228][ T36] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.109451][ T36] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.249144][ T36] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.251465][ T30] audit: type=1400 audit(1746422219.225:1037): avc: denied { create } for pid=9637 comm="syz.2.1097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 368.353010][ T30] audit: type=1400 audit(1746422219.225:1038): avc: denied { listen } for pid=9637 comm="syz.2.1097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 368.575129][ T30] audit: type=1400 audit(1746422219.225:1039): avc: denied { accept } for pid=9637 comm="syz.2.1097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 368.877997][ T9] usb 4-1: USB disconnect, device number 15 [ 369.073078][ T9659] overlayfs: failed to clone lowerpath [ 369.411550][ T30] audit: type=1400 audit(1746422220.395:1040): avc: denied { kexec_image_load } for pid=9661 comm="syz.3.1104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 369.520639][ T9668] overlayfs: failed to resolve './file0': -2 [ 369.528698][ T30] audit: type=1400 audit(1746422220.495:1041): avc: denied { watch } for pid=9661 comm="syz.3.1104" path="/187" dev="tmpfs" ino=994 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 370.475557][ T30] audit: type=1400 audit(1746422220.495:1042): avc: denied { watch_sb } for pid=9661 comm="syz.3.1104" path="/187" dev="tmpfs" ino=994 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 370.775426][ T5825] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 370.785874][ T5825] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 370.809362][ T5825] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 370.824372][ T5825] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 370.832166][ T5825] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 370.846519][ T5823] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 370.858434][ T5823] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 370.866060][ T5823] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 370.877390][ T5823] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 370.886118][ T5823] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 370.901588][ T30] audit: type=1400 audit(1746422221.885:1043): avc: denied { mounton } for pid=9679 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 371.403770][ T9695] overlayfs: missing 'lowerdir' [ 372.042120][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 372.055088][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 372.065451][ T36] bond0 (unregistering): Released all slaves [ 372.264696][ T9679] lo speed is unknown, defaulting to 1000 [ 372.273586][ T5871] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 372.318357][ T9704] wireguard1: entered promiscuous mode [ 372.342860][ T30] audit: type=1400 audit(1746422223.315:1044): avc: denied { write } for pid=9708 comm="syz.3.1113" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 372.370300][ T9704] wireguard1: entered allmulticast mode [ 372.471208][ T5871] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 372.495687][ T5871] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 372.575039][ T5871] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 372.594978][ T9679] lo speed is unknown, defaulting to 1000 [ 372.603855][ T5871] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.969781][ T5825] Bluetooth: hci3: command tx timeout [ 373.012793][ T5871] usb 3-1: usb_control_msg returned -32 [ 373.023915][ T5871] usbtmc 3-1:16.0: can't read capabilities [ 373.619121][ T9741] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1119'. [ 373.637171][ T36] hsr_slave_0: left promiscuous mode [ 373.645694][ T36] hsr_slave_1: left promiscuous mode [ 374.075443][ T36] veth1_macvtap: left promiscuous mode [ 374.081463][ T36] veth0_macvtap: left promiscuous mode [ 374.087213][ T36] veth1_vlan: left promiscuous mode [ 374.242360][ T30] audit: type=1400 audit(1746422225.225:1045): avc: denied { write } for pid=9730 comm="syz.3.1116" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 374.609957][ T9754] overlayfs: failed to clone lowerpath [ 375.059048][ T47] usb 3-1: USB disconnect, device number 9 [ 375.066522][ T5825] Bluetooth: hci3: command tx timeout [ 375.473837][ T36] team0 (unregistering): Port device team_slave_1 removed [ 375.537727][ T36] team0 (unregistering): Port device team_slave_0 removed [ 376.500048][ T5871] lo speed is unknown, defaulting to 1000 [ 376.572272][ T5871] infiniband syz2: ib_query_port failed (-19) [ 376.658479][ T9679] chnl_net:caif_netlink_parms(): no params data found [ 376.859352][ T9787] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1130'. [ 376.997306][ T30] audit: type=1400 audit(1746422227.975:1046): avc: denied { ioctl } for pid=9779 comm="syz.1.1129" path="/231/file0/file0" dev="fuse" ino=4 ioctlcmd=0x923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 377.022018][ C1] vkms_vblank_simulate: vblank timer overrun [ 377.129785][ T5825] Bluetooth: hci3: command tx timeout [ 377.561853][ T9679] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.062624][ T9679] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.090950][ T9679] bridge_slave_0: entered allmulticast mode [ 378.177647][ T9679] bridge_slave_0: entered promiscuous mode [ 378.314378][ T9679] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.544956][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.553083][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.608780][ T9679] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.636869][ T9679] bridge_slave_1: entered allmulticast mode [ 378.738819][ T9679] bridge_slave_1: entered promiscuous mode [ 379.211237][ T5825] Bluetooth: hci3: command tx timeout [ 379.756418][ T9679] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 379.783050][ T9679] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 380.002112][ T9679] team0: Port device team_slave_0 added [ 380.029006][ T9679] team0: Port device team_slave_1 added [ 380.154686][ T9860] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1144'. [ 380.168573][ T9679] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 380.176569][ T9679] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 380.202461][ C1] vkms_vblank_simulate: vblank timer overrun [ 380.220752][ T9679] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 380.359256][ T9679] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 380.372639][ T9679] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 380.419671][ T9679] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 380.442210][ T9870] devpts: Unknown parameter '00000000000000000000003' [ 380.469830][ T30] audit: type=1400 audit(1746422231.425:1047): avc: denied { remount } for pid=9869 comm="syz.1.1147" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 381.248804][ T9679] hsr_slave_0: entered promiscuous mode [ 381.262427][ T9679] hsr_slave_1: entered promiscuous mode [ 381.281956][ T9679] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 381.293013][ T9679] Cannot create hsr debugfs directory [ 383.567867][ T5900] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 383.914848][ T5900] usb 4-1: Using ep0 maxpacket: 16 [ 384.130045][ T5900] usb 4-1: config 0 has an invalid interface number: 145 but max is 0 [ 384.153665][ T5900] usb 4-1: config 0 has no interface number 0 [ 384.181188][ T5900] usb 4-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 384.199827][ T5900] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.217031][ T5900] usb 4-1: Product: syz [ 384.228506][ T5900] usb 4-1: Manufacturer: syz [ 384.237253][ T5900] usb 4-1: SerialNumber: syz [ 384.262617][ T5900] usb 4-1: config 0 descriptor?? [ 384.275918][ T5900] hub 4-1:0.145: bad descriptor, ignoring hub [ 384.351805][ T5900] hub 4-1:0.145: probe with driver hub failed with error -5 [ 384.429634][ T5900] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.145/input/input13 [ 385.297116][ T9940] Malformed UNC in devname [ 385.297116][ T9940] [ 385.339054][ T9940] CIFS: VFS: Malformed UNC in devname [ 386.024044][ T5861] usb 4-1: USB disconnect, device number 16 [ 386.259848][ T5861] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 386.470465][ T5861] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 386.484595][ T9679] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 386.504030][ T5861] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 386.524754][ T9679] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 386.545732][ T9679] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 386.564421][ T9679] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 386.568065][ T5861] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 386.597240][ T5861] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.856789][ T5861] usb 4-1: usb_control_msg returned -32 [ 386.871588][ T5861] usbtmc 4-1:16.0: can't read capabilities [ 387.015090][ T9679] 8021q: adding VLAN 0 to HW filter on device bond0 [ 387.060960][ T9986] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 387.063144][ T9679] 8021q: adding VLAN 0 to HW filter on device team0 [ 387.067754][ T9986] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 387.076365][ T9986] vhci_hcd vhci_hcd.0: Device attached [ 387.097282][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.105702][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 387.125684][ T3446] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.132902][ T3446] bridge0: port 2(bridge_slave_1) entered forwarding state [ 387.154376][ T9987] vhci_hcd: connection closed [ 387.157282][ T2947] vhci_hcd: stop threads [ 387.168263][ T2947] vhci_hcd: release socket [ 387.193007][ T2947] vhci_hcd: disconnect device [ 387.250072][ T5861] vhci_hcd: vhci_device speed not set [ 387.444969][ T47] usb 4-1: USB disconnect, device number 17 [ 387.535687][ T9679] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 388.156754][T10030] devpts: Unknown parameter 'ma00000000000000000000003' [ 388.459749][ T9679] veth0_vlan: entered promiscuous mode [ 388.594947][ T9679] veth1_vlan: entered promiscuous mode [ 388.750616][ T9679] veth0_macvtap: entered promiscuous mode [ 389.186746][ T9679] veth1_macvtap: entered promiscuous mode [ 389.231375][ T9679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 389.254028][ T9679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.275283][ T9679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 389.305647][ T9679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.325601][ T9679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 389.389887][ T9679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.421722][ T9679] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 389.440243][ T9679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 389.492535][ T9679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.558938][ T9679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 389.587927][ T9679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.638718][ T9679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 389.679764][ T9679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.713688][ T9679] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 389.781949][ T9679] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.852194][ T9679] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.870290][ T9679] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.879825][ T9679] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.084001][ T30] audit: type=1400 audit(1746422241.065:1048): avc: denied { write } for pid=10062 comm="syz.2.1189" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 390.228214][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.299955][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.323074][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.331463][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.464227][ T30] audit: type=1400 audit(1746422241.425:1049): avc: denied { mounton } for pid=9679 comm="syz-executor" path="/root/syzkaller.zLMrCw/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 390.574664][ T30] audit: type=1400 audit(1746422241.505:1050): avc: denied { mounton } for pid=9679 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 390.926517][ T30] audit: type=1400 audit(1746422241.895:1051): avc: denied { write } for pid=10082 comm="syz.2.1193" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 391.249869][ T30] audit: type=1400 audit(1746422241.895:1052): avc: denied { remove_name } for pid=10082 comm="syz.2.1193" name="binder1" dev="binder" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 391.566563][ T30] audit: type=1400 audit(1746422241.895:1053): avc: denied { unlink } for pid=10082 comm="syz.2.1193" name="binder1" dev="binder" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 391.899777][ T5863] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 391.934783][ T30] audit: type=1400 audit(1746422242.895:1054): avc: denied { wake_alarm } for pid=10113 comm="syz.1.1196" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 392.185243][ T5863] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 392.320992][T10128] overlayfs: failed to clone upperpath [ 392.720101][ T5863] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 392.774763][ T5863] usb 4-1: config 1 has no interface number 0 [ 392.794256][ T5863] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 392.805485][ T5863] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 392.818313][ T5863] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 392.830400][ T5863] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.847766][ T5863] usb 4-1: Product: syz [ 392.854821][ T5863] usb 4-1: Manufacturer: syz [ 392.860063][ T5863] usb 4-1: SerialNumber: syz [ 393.230355][ T5863] cdc_ncm 4-1:1.1: bind() failure [ 393.267438][ T5863] usb 4-1: USB disconnect, device number 18 [ 393.758563][ T30] audit: type=1400 audit(1746422244.385:1055): avc: denied { read } for pid=10140 comm="syz.4.1204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 394.408838][T10169] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1210'. [ 394.475153][T10171] fuse: Bad value for 'fd' [ 396.139823][ T5871] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 396.177998][ T5863] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 396.352783][ T5863] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 396.411876][ T5863] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 396.455320][ T5871] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 396.457167][ T5863] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 396.485964][ T5871] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 396.518675][ T5863] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.532727][ T5871] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 396.577740][ T5871] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 396.608056][ T5871] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 396.663064][ T5871] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 396.694106][ T5871] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 396.724267][ T5871] usb 5-1: Product: syz [ 396.738691][ T5871] usb 5-1: Manufacturer: syz [ 396.747631][ T5871] usb 5-1: SerialNumber: syz [ 396.764359][ T5863] usb 2-1: usb_control_msg returned -32 [ 396.771249][ T5871] usb 5-1: config 0 descriptor?? [ 396.785235][ T5863] usbtmc 2-1:16.0: can't read capabilities [ 396.998901][ T5871] radio-si470x 5-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 397.017425][ T5871] radio-si470x 5-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 397.309872][ T5871] radio-si470x 5-1:0.0: software version 0, hardware version 0 [ 397.329777][ T5871] radio-si470x 5-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 397.388794][ T5871] radio-si470x 5-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 397.510671][ T5871] radio-si470x 5-1:0.0: submitting int urb failed (-90) [ 398.322250][ T5871] radio-si470x 5-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 398.331161][ T5871] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -22 [ 398.398298][ T5871] usb 5-1: USB disconnect, device number 9 [ 398.786818][T10272] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1232'. [ 399.146690][ T5871] usb 2-1: USB disconnect, device number 8 [ 400.231591][T10294] fuse: Bad value for 'group_id' [ 400.236598][T10294] fuse: Bad value for 'group_id' [ 400.519784][ T5871] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 400.553165][T10303] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1243'. [ 400.689899][ T5871] usb 5-1: device descriptor read/64, error -71 [ 400.948386][ T5871] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 401.126582][ T5871] usb 5-1: device descriptor read/64, error -71 [ 401.505014][ T5871] usb usb5-port1: attempt power cycle [ 401.899828][ T5871] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 401.931920][ T5871] usb 5-1: device descriptor read/8, error -71 [ 402.189905][ T5871] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 402.253144][ T5871] usb 5-1: device descriptor read/8, error -71 [ 402.273395][T10328] fuse: Bad value for 'group_id' [ 402.278394][T10328] fuse: Bad value for 'group_id' [ 402.377169][ T5871] usb usb5-port1: unable to enumerate USB device [ 403.424247][T10342] siw: device registration error -23 [ 403.431331][T10342] IPVS: stopping master sync thread 10348 ... [ 404.333987][T10369] fuse: Bad value for 'group_id' [ 404.350122][T10369] fuse: Bad value for 'group_id' [ 407.183584][T10414] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1280'. [ 407.345310][T10419] Malformed UNC in devname [ 407.345310][T10419] [ 407.352131][T10419] CIFS: VFS: Malformed UNC in devname [ 409.150958][ T971] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 409.349763][ T971] usb 3-1: device descriptor read/64, error -71 [ 410.189765][ T971] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 410.771849][ T971] usb 3-1: device descriptor read/64, error -71 [ 410.890218][ T971] usb usb3-port1: attempt power cycle [ 411.192746][T10466] siw: device registration error -23 [ 411.269863][ T971] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 411.372188][ T971] usb 3-1: device descriptor read/8, error -71 [ 411.690126][ T971] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 411.734032][ T971] usb 3-1: device descriptor read/8, error -71 [ 411.850316][ T971] usb usb3-port1: unable to enumerate USB device [ 412.189327][T10481] lo speed is unknown, defaulting to 1000 [ 414.109972][ T5871] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 414.259745][ T5871] usb 5-1: device descriptor read/64, error -71 [ 414.499896][ T5871] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 414.661956][ T5871] usb 5-1: device descriptor read/64, error -71 [ 414.780093][ T5871] usb usb5-port1: attempt power cycle [ 414.907514][T10518] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1309'. [ 414.922122][T10518] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.929617][T10518] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.989763][ T971] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 415.143373][ T5871] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 415.158246][ T971] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 415.171946][ T971] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 415.247315][T10527] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1310'. [ 415.587888][ T971] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 415.597798][ T5871] usb 5-1: device descriptor read/8, error -71 [ 415.604237][ T971] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 415.621045][T10526] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1311'. [ 415.632582][ T971] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 415.644253][ T971] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 415.652499][ T971] usb 2-1: Manufacturer: syz [ 415.667513][ T971] usb 2-1: config 0 descriptor?? [ 415.889772][ T5871] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 415.931607][ T5871] usb 5-1: device descriptor read/8, error -71 [ 416.081252][ T5871] usb usb5-port1: unable to enumerate USB device [ 416.245391][ T971] appleir 0003:05AC:8243.0005: unknown main item tag 0x0 [ 416.256767][ T971] appleir 0003:05AC:8243.0005: No inputs registered, leaving [ 416.310920][ T971] appleir 0003:05AC:8243.0005: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 416.499432][ T971] usb 2-1: USB disconnect, device number 9 [ 416.638376][ T30] audit: type=1400 audit(1746422267.615:1056): avc: denied { ioctl } for pid=10544 comm="syz.3.1317" path="socket:[24146]" dev="sockfs" ino=24146 ioctlcmd=0x8b36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 418.470796][T10579] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1327'. [ 419.005139][ T5871] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 419.161619][ T5871] usb 3-1: Using ep0 maxpacket: 8 [ 419.253244][ T5871] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 419.261511][ T5871] usb 3-1: config 16 has an invalid interface number: 48 but max is 0 [ 419.276673][ T5871] usb 3-1: config 16 has an invalid descriptor of length 102, skipping remainder of the config [ 419.289908][ T5871] usb 3-1: config 16 has no interface number 0 [ 419.298601][ T5871] usb 3-1: too many endpoints for config 16 interface 48 altsetting 120: 102, using maximum allowed: 30 [ 419.359946][ T5871] usb 3-1: config 16 interface 48 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 102 [ 419.411141][ T5871] usb 3-1: config 16 interface 48 has no altsetting 0 [ 419.435085][ T5871] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 419.571944][ T5871] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.861090][ T5871] usb 3-1: string descriptor 0 read error: -71 [ 419.874045][ T5871] usb 3-1: USB disconnect, device number 14 [ 420.880065][ T5871] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 421.074192][ T5871] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 421.140543][ T5871] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 421.244244][ T5871] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 421.336792][ T5871] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.795556][ T5871] usb 2-1: usb_control_msg returned -32 [ 421.844449][ T5871] usbtmc 2-1:16.0: can't read capabilities [ 421.974018][ T5871] usb 2-1: USB disconnect, device number 10 [ 422.354676][T10613] input: syz0 as /devices/virtual/input/input16 [ 423.037914][ T30] audit: type=1400 audit(1746422274.015:1057): avc: denied { listen } for pid=10621 comm="syz.1.1341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 423.040250][T10623] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 423.149478][T10623] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1343'. [ 423.440051][ T5862] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 423.661588][ T5862] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 423.790011][ T5862] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 423.804031][ T5862] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 423.817910][ T5862] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 423.828865][ T5862] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.868598][ T5862] usbtmc 2-1:16.0: probe with driver usbtmc failed with error -22 [ 423.925853][ T5871] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 424.144030][ T5871] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 424.153884][ T5871] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 424.169846][ T5871] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 424.189049][ T5871] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.424459][ T5871] usb 3-1: usb_control_msg returned -32 [ 424.447610][ T5871] usbtmc 3-1:16.0: can't read capabilities [ 424.510210][ T5871] usb 3-1: USB disconnect, device number 15 [ 424.790662][T10660] ptrace attach of "./syz-executor exec"[5806] was attempted by "./syz-executor exec"[10660] [ 425.534735][T10684] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 425.570633][T10684] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1364'. [ 426.244520][ T5862] usb 2-1: USB disconnect, device number 11 [ 426.320111][ T30] audit: type=1400 audit(1746422277.305:1058): avc: denied { read append } for pid=10690 comm="syz.1.1366" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 426.689654][ T30] audit: type=1400 audit(1746422277.305:1059): avc: denied { open } for pid=10690 comm="syz.1.1366" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 426.789817][ T5862] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 427.351691][T10699] ptrace attach of "./syz-executor exec"[5806] was attempted by "./syz-executor exec"[10699] [ 427.609033][ T30] audit: type=1400 audit(1746422277.335:1060): avc: denied { ioctl } for pid=10690 comm="syz.1.1366" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x7008 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 427.701814][ T5862] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 427.711927][ T5862] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 427.754701][ T5862] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 428.391605][ T5862] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.536491][ T5862] usb 2-1: usb_control_msg returned -71 [ 429.555665][ T5862] usbtmc 2-1:16.0: can't read capabilities [ 429.588620][ T5862] usb 2-1: USB disconnect, device number 12 [ 429.617964][T10729] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 429.643338][T10729] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1378'. [ 429.859592][T10731] could not allocate digest TFM handle cbcmac-aes-neon [ 432.521173][T10778] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1391'. [ 432.949994][ T5871] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 433.102816][ T5871] usb 5-1: device descriptor read/64, error -71 [ 433.420272][T10781] could not allocate digest TFM handle cbcmac-aes-neon [ 433.429859][ T5871] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 433.569766][ T5871] usb 5-1: device descriptor read/64, error -71 [ 433.680084][ T5871] usb usb5-port1: attempt power cycle [ 434.019838][ T5871] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 434.051897][ T5871] usb 5-1: device descriptor read/8, error -71 [ 434.239746][T10531] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 434.289754][ T5871] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 434.320583][ T5871] usb 5-1: device descriptor read/8, error -71 [ 434.389759][T10531] usb 4-1: Using ep0 maxpacket: 8 [ 434.398877][T10531] usb 4-1: config index 0 descriptor too short (expected 5924, got 36) [ 434.408729][T10531] usb 4-1: config 250 has an invalid interface number: 228 but max is -1 [ 434.428316][T10531] usb 4-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 434.445778][ T5871] usb usb5-port1: unable to enumerate USB device [ 434.456542][T10531] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 434.476770][T10531] usb 4-1: config 250 has no interface number 0 [ 434.492213][T10531] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 434.504757][T10531] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 434.521947][T10531] usb 4-1: Product: syz [ 434.530950][T10531] usb 4-1: SerialNumber: syz [ 434.551304][T10531] hub 4-1:250.228: bad descriptor, ignoring hub [ 434.562846][T10531] hub 4-1:250.228: probe with driver hub failed with error -5 [ 434.663761][ T30] audit: type=1400 audit(1746422285.645:1061): avc: denied { ioctl } for pid=10804 comm="syz.2.1400" path="socket:[25613]" dev="sockfs" ino=25613 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 434.748055][T10807] can: request_module (can-proto-0) failed. [ 434.767551][ T30] audit: type=1400 audit(1746422285.745:1062): avc: denied { write } for pid=10801 comm="syz.1.1399" name="file0" dev="fuse" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 434.869961][ T5863] usb 4-1: USB disconnect, device number 19 [ 434.888545][T10810] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1401'. [ 435.111989][ T30] audit: type=1400 audit(1746422285.955:1063): avc: denied { connect } for pid=10806 comm="syz.2.1401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 435.297577][ T30] audit: type=1400 audit(1746422286.005:1064): avc: denied { write } for pid=10806 comm="syz.2.1401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 437.715310][T10832] could not allocate digest TFM handle cbcmac-aes-neon [ 437.725826][T10839] wireguard1: entered promiscuous mode [ 437.759828][T10839] wireguard1: entered allmulticast mode [ 438.394937][T10852] lo speed is unknown, defaulting to 1000 [ 439.933318][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.941600][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.530801][T10895] could not allocate digest TFM handle cbcmac-aes-neon [ 442.030099][T10908] netlink: 'syz.1.1429': attribute type 2 has an invalid length. [ 442.169824][T10531] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 442.330354][T10531] usb 3-1: Using ep0 maxpacket: 8 [ 442.347596][T10531] usb 3-1: config index 0 descriptor too short (expected 5924, got 36) [ 442.358119][T10531] usb 3-1: config 250 has an invalid interface number: 228 but max is -1 [ 442.391802][T10531] usb 3-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 442.409410][T10531] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 442.433817][T10531] usb 3-1: config 250 has no interface number 0 [ 442.459714][T10531] usb 3-1: config 250 interface 228 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 17 [ 442.599787][T10531] usb 3-1: config 250 interface 228 has no altsetting 0 [ 442.608825][T10531] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 442.621980][T10531] usb 3-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 442.639463][T10531] usb 3-1: Product: syz [ 442.644075][T10531] usb 3-1: SerialNumber: syz [ 442.694206][T10531] hub 3-1:250.228: bad descriptor, ignoring hub [ 442.736858][T10531] hub 3-1:250.228: probe with driver hub failed with error -5 [ 443.033560][ T971] usb 3-1: USB disconnect, device number 16 [ 444.657642][T10942] could not allocate digest TFM handle cbcmac-aes-neon [ 445.023863][T10957] netlink: 'syz.2.1445': attribute type 2 has an invalid length. [ 445.114959][T10962] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1447'. [ 446.139922][ T5861] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 446.302669][ T5861] usb 3-1: Using ep0 maxpacket: 8 [ 446.341740][ T5861] usb 3-1: config index 0 descriptor too short (expected 5924, got 36) [ 446.632124][ T5861] usb 3-1: config 250 has an invalid interface number: 228 but max is -1 [ 446.641993][ T5861] usb 3-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 446.653865][ T5861] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 446.664144][ T5861] usb 3-1: config 250 has no interface number 0 [ 446.670846][ T5861] usb 3-1: config 250 interface 228 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 17 [ 446.684632][ T5861] usb 3-1: config 250 interface 228 has no altsetting 0 [ 446.697235][ T5861] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 446.707576][ T5861] usb 3-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 446.716041][ T5861] usb 3-1: Product: syz [ 446.721414][ T5861] usb 3-1: SerialNumber: syz [ 446.768808][ T5861] hub 3-1:250.228: bad descriptor, ignoring hub [ 446.790890][ T5861] hub 3-1:250.228: probe with driver hub failed with error -5 [ 447.226313][T10989] could not allocate digest TFM handle cbcmac-aes-neon [ 447.353004][ T5861] usb 3-1: USB disconnect, device number 17 [ 448.860338][T11019] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 448.914893][T11019] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1461'. [ 449.990605][T11031] fuse: Bad value for 'user_id' [ 450.002965][T11031] fuse: Bad value for 'user_id' [ 452.462649][T11066] fuse: Bad value for 'fd' [ 453.576028][T11085] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 453.849513][T11085] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1486'. [ 458.828752][ T30] audit: type=1400 audit(1746422309.805:1065): avc: denied { ioctl } for pid=11156 comm="syz.3.1510" path="socket:[27481]" dev="sockfs" ino=27481 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 460.244004][ T30] audit: type=1400 audit(1746422310.805:1066): avc: denied { bind } for pid=11161 comm="syz.2.1511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 460.489400][ T30] audit: type=1400 audit(1746422311.465:1067): avc: denied { getopt } for pid=11179 comm="syz.3.1516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 460.663889][T11186] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 460.677762][T11186] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1518'. [ 460.687268][T10531] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 460.851621][T10531] usb 3-1: config 0 interface 0 altsetting 10 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 460.863184][T10531] usb 3-1: config 0 interface 0 altsetting 10 endpoint 0x81 has invalid wMaxPacketSize 0 [ 460.873275][T10531] usb 3-1: config 0 interface 0 has no altsetting 0 [ 460.880052][T10531] usb 3-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 460.889162][T10531] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.900379][T10531] usb 3-1: config 0 descriptor?? [ 461.471362][T11197] lo speed is unknown, defaulting to 1000 [ 462.053237][T10531] usbhid 3-1:0.0: can't add hid device: -71 [ 462.078569][T10531] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 462.176742][T10531] usb 3-1: USB disconnect, device number 18 [ 462.997917][ T30] audit: type=1400 audit(1746422313.975:1068): avc: denied { write } for pid=11210 comm="syz.2.1525" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 464.659322][T11233] overlayfs: failed to clone lowerpath [ 464.740209][T11235] lo speed is unknown, defaulting to 1000 [ 466.980920][ T30] audit: type=1400 audit(1746422317.965:1069): avc: denied { setopt } for pid=11265 comm="syz.0.1544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 468.735933][T11297] lo speed is unknown, defaulting to 1000 [ 470.980890][ T5861] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 471.027309][T11311] could not allocate digest TFM handle cbcmac-aes-neon [ 471.373573][ T5861] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 471.373610][ T5861] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 471.373650][ T5861] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 471.373671][ T5861] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.374842][T11330] Malformed UNC in devname [ 471.374842][T11330] [ 471.374858][T11330] CIFS: VFS: Malformed UNC in devname [ 471.376662][T11310] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 471.491596][ T5861] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 471.674752][ T5861] usb 5-1: USB disconnect, device number 22 [ 476.283263][ T30] audit: type=1400 audit(1746422327.255:1070): avc: denied { add_name } for pid=11365 comm="syz.3.1571" name="hugetlb.1GB.rsvd.usage_in_bytes" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 476.306299][ C1] vkms_vblank_simulate: vblank timer overrun [ 476.322427][ T30] audit: type=1400 audit(1746422327.295:1071): avc: denied { create } for pid=11365 comm="syz.3.1571" name="hugetlb.1GB.rsvd.usage_in_bytes" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 476.780687][ T30] audit: type=1400 audit(1746422327.335:1072): avc: denied { associate } for pid=11365 comm="syz.3.1571" name="hugetlb.1GB.rsvd.usage_in_bytes" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 476.809102][ T30] audit: type=1400 audit(1746422327.715:1073): avc: denied { unmount } for pid=5806 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 477.000028][ T9] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 477.153680][ T9] usb 3-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice=31.00 [ 477.178489][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.187401][ T9] usb 3-1: Product: syz [ 477.198722][T11388] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 477.207448][ T971] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 477.222105][ T9] usb 3-1: Manufacturer: syz [ 478.001892][T11388] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1575'. [ 478.084852][ T9] usb 3-1: SerialNumber: syz [ 478.091173][T11386] could not allocate digest TFM handle cbcmac-aes-neon [ 478.123886][ T9] usb 3-1: config 0 descriptor?? [ 478.130703][ T971] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 478.163265][ T9] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 478.392304][ T971] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 478.422703][ T971] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 478.432595][ T9] usb 3-1: Detected FT4232HP [ 478.452151][ T9] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 478.460125][ T971] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.483677][ T9] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 478.507569][T11381] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 478.530252][ T9] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 478.573540][ T971] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 478.584533][T11395] overlayfs: failed to clone lowerpath [ 478.588313][ T9] usb 3-1: USB disconnect, device number 19 [ 478.638053][ T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 478.806641][ T9] ftdi_sio 3-1:0.0: device disconnected [ 478.831095][ T971] usb 5-1: USB disconnect, device number 23 [ 479.740977][ T30] audit: type=1400 audit(1746422330.705:1074): avc: denied { setopt } for pid=11409 comm="syz.2.1582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 483.404263][T11454] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 483.569326][T11454] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1594'. [ 483.689304][T11455] could not allocate digest TFM handle cbcmac-aes-neon [ 484.015693][ T971] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 485.089887][ T971] usb 3-1: Using ep0 maxpacket: 16 [ 485.256826][ T971] usb 3-1: config 0 has an invalid interface number: 145 but max is 0 [ 485.296110][ T971] usb 3-1: config 0 has no interface number 0 [ 485.462860][ T971] usb 3-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 485.478249][ T971] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.772606][ T971] usb 3-1: Product: syz [ 485.791232][ T971] usb 3-1: Manufacturer: syz [ 485.803430][ T971] usb 3-1: SerialNumber: syz [ 485.854004][ T971] usb 3-1: config 0 descriptor?? [ 485.866918][ T971] hub 3-1:0.145: bad descriptor, ignoring hub [ 485.968871][ T971] hub 3-1:0.145: probe with driver hub failed with error -5 [ 486.053611][ T971] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.145/input/input17 [ 486.891064][ T971] usb 3-1: USB disconnect, device number 20 [ 487.093951][ T30] audit: type=1800 audit(1746422338.075:1075): pid=11501 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.1606" name="bus" dev="overlay" ino=1603 res=0 errno=0 [ 487.407204][T11510] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 488.562940][T11516] could not allocate digest TFM handle cbcmac-aes-neon [ 488.610400][ T5862] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 488.872252][ T5862] usb 4-1: no configurations [ 488.921146][ T5862] usb 4-1: can't read configurations, error -22 [ 489.059732][ T5862] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 489.240722][ T5862] usb 4-1: no configurations [ 489.253694][ T5862] usb 4-1: can't read configurations, error -22 [ 489.277258][ T5862] usb usb4-port1: attempt power cycle [ 489.722324][ T5862] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 489.787077][ T5862] usb 4-1: no configurations [ 489.801177][ T5862] usb 4-1: can't read configurations, error -22 [ 490.000903][ T5862] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 490.065390][ T5862] usb 4-1: no configurations [ 490.077950][ T5862] usb 4-1: can't read configurations, error -22 [ 490.191731][ T5862] usb usb4-port1: unable to enumerate USB device [ 490.839959][T11546] syz.4.1619: attempt to access beyond end of device [ 490.839959][T11546] nbd4: rw=0, sector=64, nr_sectors = 8 limit=0 [ 490.854269][T11546] syz.4.1619: attempt to access beyond end of device [ 490.854269][T11546] nbd4: rw=0, sector=120, nr_sectors = 8 limit=0 [ 490.867727][T11546] Mount JFS Failure: -5 [ 490.871966][T11546] jfs_mount failed w/return code = -5 [ 491.849977][ T5862] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 492.089801][ T5862] usb 2-1: Using ep0 maxpacket: 16 [ 492.109440][ T5862] usb 2-1: config 0 has an invalid interface number: 145 but max is 0 [ 492.139009][ T5862] usb 2-1: config 0 has no interface number 0 [ 492.213285][ T5862] usb 2-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 492.254564][ T5862] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.323404][ T5862] usb 2-1: Product: syz [ 492.358727][ T5862] usb 2-1: Manufacturer: syz [ 492.413867][ T5862] usb 2-1: SerialNumber: syz [ 492.512061][ T5862] usb 2-1: config 0 descriptor?? [ 492.551281][ T5862] hub 2-1:0.145: bad descriptor, ignoring hub [ 492.567568][ T5862] hub 2-1:0.145: probe with driver hub failed with error -5 [ 492.617870][ T5862] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.145/input/input18 [ 493.224945][ T5825] Bluetooth: hci3: command 0x0406 tx timeout [ 493.589788][T10531] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 494.502152][T10531] usb 4-1: Using ep0 maxpacket: 32 [ 494.576279][T11592] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 495.311100][T10531] usb 4-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 495.346280][T10531] usb 4-1: New USB device strings: Mfr=251, Product=2, SerialNumber=7 [ 495.354795][T10531] usb 4-1: Product: syz [ 495.358986][T10531] usb 4-1: Manufacturer: syz [ 495.367577][T10531] usb 4-1: SerialNumber: syz [ 495.367645][T11591] random: crng reseeded on system resumption [ 495.386005][T10531] usb 4-1: config 0 descriptor?? [ 495.525506][T11596] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 495.532058][T11596] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 495.543563][T11596] vhci_hcd vhci_hcd.0: Device attached [ 495.566194][T11598] vhci_hcd: connection closed [ 495.566483][ T12] vhci_hcd: stop threads [ 495.582463][ T12] vhci_hcd: release socket [ 495.602137][T10531] peak_usb 4-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 495.633349][ T12] vhci_hcd: disconnect device [ 495.643216][T10531] peak_usb 4-1:0.0: unable to read PCAN-USB Pro firmware info (err -71) [ 495.730443][T10531] peak_usb 4-1:0.0: probe with driver peak_usb failed with error -71 [ 495.767568][T10531] usb 4-1: USB disconnect, device number 24 [ 497.773905][T11627] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 497.806832][T11627] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1640'. [ 498.414203][ T971] usb 2-1: USB disconnect, device number 13 [ 499.148577][ T9] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 499.169925][ T30] audit: type=1400 audit(1746422349.765:1076): avc: denied { create } for pid=11639 comm="syz.2.1646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 499.203047][ T30] audit: type=1400 audit(1746422349.775:1077): avc: denied { read } for pid=11639 comm="syz.2.1646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 499.441324][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 499.525560][T11647] lo speed is unknown, defaulting to 1000 [ 499.735289][ T9] usb 5-1: config 0 has no interfaces? [ 499.782846][ T9] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 499.809724][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.846083][ T9] usb 5-1: config 0 descriptor?? [ 500.197189][ T5862] usb 5-1: USB disconnect, device number 24 [ 501.378757][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.385173][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.730123][T11694] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 502.767954][T11694] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1660'. [ 505.204439][T11714] netlink: 'syz.0.1670': attribute type 4 has an invalid length. [ 506.141196][T11721] netlink: 'syz.0.1670': attribute type 4 has an invalid length. [ 506.415246][T11726] fuse: Bad value for 'group_id' [ 506.689583][T11726] fuse: Bad value for 'group_id' [ 508.118490][T11762] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 508.189202][T11762] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1680'. [ 508.224063][ T5861] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 508.704872][ T5861] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 508.728906][ T5861] usb 5-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 508.843073][ T5861] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 508.882986][ T5861] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.187009][ T5861] usbtmc 5-1:16.0: bulk endpoints not found [ 510.394842][ T30] audit: type=1400 audit(1746422361.375:1078): avc: denied { write } for pid=11783 comm="syz.0.1683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 510.518043][T11788] fuse: Bad value for 'fd' [ 511.585741][ T971] usb 5-1: USB disconnect, device number 25 [ 514.411771][T11832] fuse: Unknown parameter '0x0000000000000004' [ 514.539750][ T971] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 515.496781][ T971] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 515.539924][ T5901] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 515.614773][ T971] usb 3-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 515.874863][ T971] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.886578][ T971] usb 3-1: config 0 descriptor?? [ 515.916009][T11828] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 515.951524][ T5901] usb 4-1: config 0 has an invalid interface number: 113 but max is 0 [ 515.964014][ T5901] usb 4-1: config 0 has no interface number 0 [ 515.972808][ T5901] usb 4-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 515.989237][ T5901] usb 4-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 516.012864][ T5901] usb 4-1: config 0 interface 113 has no altsetting 0 [ 516.022510][ T5901] usb 4-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 516.031830][ T5901] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.041479][ T5901] usb 4-1: Product: syz [ 516.049681][ T5901] usb 4-1: Manufacturer: syz [ 516.054448][ T5901] usb 4-1: SerialNumber: syz [ 516.065614][ T5901] usb 4-1: config 0 descriptor?? [ 516.075819][ T5901] pn533_usb 4-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint [ 516.284586][ T5901] usb 4-1: USB disconnect, device number 25 [ 517.018983][ T971] usbhid 3-1:0.0: can't add hid device: -71 [ 517.036245][ T971] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 517.068195][ T971] usb 3-1: USB disconnect, device number 21 [ 517.097651][T11872] fuse: Unknown parameter '0x0000000000000004' [ 517.405884][T11880] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1716'. [ 519.634024][T11912] fuse: Unknown parameter '0x0000000000000004' [ 521.836826][T11940] macsec0: entered promiscuous mode [ 521.842354][T11940] macsec0: entered allmulticast mode [ 521.847647][T11940] veth1_macvtap: entered allmulticast mode [ 522.566265][T11952] fuse: Unknown parameter '0x0000000000000004' [ 522.753333][T11958] netlink: 'syz.1.1744': attribute type 10 has an invalid length. [ 522.784062][T11958] team0: Device ipvlan1 failed to register rx_handler [ 523.506979][ T30] audit: type=1400 audit(1746422374.485:1079): avc: denied { ioctl } for pid=11964 comm="syz.2.1747" path="socket:[30900]" dev="sockfs" ino=30900 ioctlcmd=0x8b05 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 523.649578][T11966] could not allocate digest TFM handle cbcmac-aes-neon [ 524.719862][T10531] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 525.459718][T10531] usb 5-1: device descriptor read/64, error -71 [ 525.709727][T10531] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 525.882483][T10531] usb 5-1: device descriptor read/64, error -71 [ 526.040820][T10531] usb usb5-port1: attempt power cycle [ 526.849620][T10531] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 526.856737][T12002] fuse: Unknown parameter '0x0000000000000004' [ 526.905821][T10531] usb 5-1: device descriptor read/8, error -71 [ 527.169785][T10531] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 527.211968][T10531] usb 5-1: device descriptor read/8, error -71 [ 527.383125][T10531] usb usb5-port1: unable to enumerate USB device [ 528.816814][T12023] could not allocate digest TFM handle cbcmac-aes-neon [ 530.197085][ T30] audit: type=1804 audit(1746422380.475:1080): pid=12041 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.1766" name="/newroot/325/bus" dev="tmpfs" ino=1766 res=1 errno=0 [ 530.266596][T12042] fuse: Unknown parameter '0x0000000000000004' [ 531.429742][ T5861] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 532.330174][ T5861] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 532.341353][ T5861] usb 3-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 532.385206][ T5861] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 532.516770][ T5861] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.591672][ T5861] usbtmc 3-1:16.0: bulk endpoints not found [ 533.400823][T12086] fuse: Unknown parameter 'fd0x0000000000000004' [ 534.689065][ T9] usb 3-1: USB disconnect, device number 22 [ 535.926453][T12115] fuse: Unknown parameter 'fd0x0000000000000004' [ 538.662225][T12152] fuse: Unknown parameter 'fd0x0000000000000004' [ 539.089764][ T9] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 539.372882][ T9] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 539.395715][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 539.419815][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 539.450533][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 539.461371][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.492776][ T9] usbtmc 5-1:16.0: bulk endpoints not found [ 540.037669][T12176] overlayfs: missing 'lowerdir' [ 540.840354][ T30] audit: type=1400 audit(1746422391.785:1081): avc: denied { search } for pid=12182 comm="syz.2.1813" name="/" dev="configfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 541.299318][T12197] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1816'. [ 542.174285][ T5863] usb 5-1: USB disconnect, device number 30 [ 543.146315][T12221] siw: device registration error -23 [ 543.155599][T12221] IPVS: stopping master sync thread 12222 ... [ 544.494601][T12224] random: crng reseeded on system resumption [ 546.128675][T12279] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1843'. [ 546.536605][T12253] siw: device registration error -23 [ 546.570665][T12280] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 546.582866][T12253] IPVS: stopping master sync thread 12280 ... [ 546.890554][T12289] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1846'. [ 547.639743][T10531] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 547.840701][T10531] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 547.859010][T10531] usb 3-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 547.880530][T10531] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 548.002538][T10531] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 548.483962][T10531] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.507727][T10531] usbtmc 3-1:16.0: bulk endpoints not found [ 548.824271][T12315] random: crng reseeded on system resumption [ 549.137010][T12325] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1855'. [ 549.625191][T12329] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 549.834887][ T5861] usb 3-1: USB disconnect, device number 23 [ 552.587248][ T47] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 552.815126][ T47] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 552.855456][ T47] usb 4-1: config 0 interface 0 altsetting 10 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 552.890049][ T47] usb 4-1: config 0 interface 0 has no altsetting 0 [ 552.936809][T12369] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 552.980245][ T47] usb 4-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 552.997827][ T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.011427][ T47] usb 4-1: config 0 descriptor?? [ 553.020498][T12375] netlink: 'syz.1.1871': attribute type 2 has an invalid length. [ 553.042670][ T47] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 554.924567][T10531] usb 4-1: USB disconnect, device number 26 [ 554.938126][T12410] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 555.157522][T12419] netlink: 'syz.2.1884': attribute type 2 has an invalid length. [ 556.420349][T12429] overlayfs: failed to clone upperpath [ 556.787255][T12441] overlayfs: missing 'lowerdir' [ 557.163172][T12448] 9pnet_fd: Insufficient options for proto=fd [ 558.718158][ T30] audit: type=1400 audit(1746422409.305:1082): avc: denied { name_bind } for pid=12453 comm="syz.4.1896" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 559.986611][ T30] audit: type=1804 audit(1746422410.765:1083): pid=12472 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.1899" name="bus" dev="tmpfs" ino=2446 res=1 errno=0 [ 560.081332][ C1] vkms_vblank_simulate: vblank timer overrun [ 560.329926][T12484] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1902'. [ 561.472680][T12496] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1907'. [ 562.289768][T10531] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 562.519732][T10531] usb 2-1: Using ep0 maxpacket: 16 [ 562.607378][T10531] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 562.708153][T10531] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.762197][T10531] usb 2-1: Product: syz [ 562.813707][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.821765][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.940373][T10531] usb 2-1: Manufacturer: syz [ 563.046264][T10531] usb 2-1: SerialNumber: syz [ 563.163383][T10531] usb 2-1: config 0 descriptor?? [ 563.198888][T10531] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 563.242161][T10531] usb 2-1: Detected FT-X [ 564.437117][T10531] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 564.560140][T10531] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 564.569895][T10531] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 564.599946][T10531] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 564.612365][T10531] usb 2-1: USB disconnect, device number 14 [ 564.621859][T10531] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 564.633962][T10531] ftdi_sio 2-1:0.0: device disconnected [ 565.556785][T12547] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 565.563359][T12547] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 565.572579][T12547] vhci_hcd vhci_hcd.0: Device attached [ 565.584059][T12548] vhci_hcd: connection closed [ 565.609717][ T5976] vhci_hcd: stop threads [ 565.657391][ T5976] vhci_hcd: release socket [ 565.689499][ T5976] vhci_hcd: disconnect device [ 565.749782][ T5861] vhci_hcd: vhci_device speed not set [ 565.942691][ T47] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 566.112102][ T47] usb 3-1: Using ep0 maxpacket: 16 [ 566.120565][ T47] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 566.158923][ T47] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 566.193886][ T47] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 1.40 [ 566.203368][ T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.220072][ T47] usb 3-1: Product: syz [ 566.231665][ T47] usb 3-1: Manufacturer: syz [ 566.249306][ T47] usb 3-1: SerialNumber: syz [ 567.321234][T12568] Illegal XDP return value 4294967294 on prog (id 228) dev N/A, expect packet loss! [ 567.737050][ T47] usb 3-1: 0:2 : does not exist [ 567.907862][ T47] usb 3-1: USB disconnect, device number 24 [ 568.284768][T12501] udevd[12501]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 568.450908][T12589] lo speed is unknown, defaulting to 1000 [ 568.812243][T12593] autofs: Bad value for 'fd' [ 572.077058][T12637] syz.1.1952: attempt to access beyond end of device [ 572.077058][T12637] nbd1: rw=0, sector=64, nr_sectors = 8 limit=0 [ 572.093441][T12637] syz.1.1952: attempt to access beyond end of device [ 572.093441][T12637] nbd1: rw=0, sector=120, nr_sectors = 8 limit=0 [ 572.108720][T12637] Mount JFS Failure: -5 [ 572.138548][T12637] jfs_mount failed w/return code = -5 [ 573.652380][ T30] audit: type=1400 audit(1746422424.365:1084): avc: denied { getopt } for pid=12646 comm="syz.2.1956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 573.873146][ T47] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 574.181465][ T47] usb 2-1: Using ep0 maxpacket: 16 [ 574.195112][ T47] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 574.206724][ T47] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 574.245556][ T47] usb 2-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 574.267389][ T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.282550][T12668] bridge0: port 3(gretap0) entered blocking state [ 574.289818][T12668] bridge0: port 3(gretap0) entered disabled state [ 574.297494][T12668] gretap0: entered allmulticast mode [ 574.313093][T12668] gretap0: entered promiscuous mode [ 574.632882][ T47] usb 2-1: Product: syz [ 574.654422][ T47] usb 2-1: Manufacturer: syz [ 574.659179][ T47] usb 2-1: SerialNumber: syz [ 574.668300][ T47] usb 2-1: config 0 descriptor?? [ 574.922717][ T971] usb 2-1: USB disconnect, device number 15 [ 575.575156][T12678] 9pnet_fd: Insufficient options for proto=fd [ 576.099922][ T47] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 576.262012][ T47] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 576.274719][ T47] usb 2-1: config 0 interface 0 altsetting 10 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 576.319003][ T47] usb 2-1: config 0 interface 0 has no altsetting 0 [ 576.358638][ T47] usb 2-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 576.377270][ T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.442614][ T47] usb 2-1: config 0 descriptor?? [ 576.559582][ T47] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 576.658128][T12698] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1970'. [ 577.172898][T12703] overlayfs: failed to clone upperpath [ 578.888613][T10531] usb 2-1: USB disconnect, device number 16 [ 579.243256][T12740] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1985'. [ 580.354676][ T30] audit: type=1400 audit(1746422431.335:1085): avc: denied { read append } for pid=12743 comm="syz.4.1987" name="btrfs-control" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 580.399894][ T30] audit: type=1400 audit(1746422431.335:1086): avc: denied { open } for pid=12743 comm="syz.4.1987" path="/dev/btrfs-control" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 580.424177][ C0] vkms_vblank_simulate: vblank timer overrun [ 580.641517][T12755] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 580.648083][T12755] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 580.790961][T12755] vhci_hcd vhci_hcd.0: Device attached [ 580.809713][T12756] vhci_hcd: connection closed [ 580.827575][ T12] vhci_hcd: stop threads [ 580.827605][ T12] vhci_hcd: release socket [ 580.827617][ T12] vhci_hcd: disconnect device [ 582.469542][T12790] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1997'. [ 583.617147][T12804] syz.1.2002: attempt to access beyond end of device [ 583.617147][T12804] nbd1: rw=0, sector=64, nr_sectors = 8 limit=0 [ 583.631069][T12804] syz.1.2002: attempt to access beyond end of device [ 583.631069][T12804] nbd1: rw=0, sector=120, nr_sectors = 8 limit=0 [ 583.644173][T12804] Mount JFS Failure: -5 [ 583.648374][T12804] jfs_mount failed w/return code = -5 [ 584.107262][T12813] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 584.113929][T12813] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 584.162568][T12813] vhci_hcd vhci_hcd.0: Device attached [ 584.350687][T12815] vhci_hcd: connection closed [ 584.400663][ T47] usb 39-1: new low-speed USB device number 3 using vhci_hcd [ 584.552269][ T82] vhci_hcd: stop threads [ 584.559275][ T82] vhci_hcd: release socket [ 584.565917][ T82] vhci_hcd: disconnect device [ 587.880296][ T30] audit: type=1400 audit(1746422438.855:1087): avc: denied { write } for pid=12851 comm="syz.4.2017" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 588.672304][ T30] audit: type=1400 audit(1746422438.905:1088): avc: denied { open } for pid=12851 comm="syz.4.2017" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 589.539166][ T30] audit: type=1400 audit(1746422440.515:1089): avc: denied { setattr } for pid=12868 comm="syz.4.2021" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 589.616848][ T47] vhci_hcd: vhci_device speed not set [ 590.091633][ T5976] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000023: 0000 [#1] SMP KASAN NOPTI [ 590.104004][ T5976] KASAN: null-ptr-deref in range [0x0000000000000118-0x000000000000011f] [ 590.112413][ T5976] CPU: 1 UID: 0 PID: 5976 Comm: kworker/u8:9 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(full) [ 590.122822][ T5976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 590.132875][ T5976] Workqueue: events_unbound netfs_write_collection_worker [ 590.139988][ T5976] RIP: 0010:iov_iter_revert+0x2ec/0x5a0 [ 590.145536][ T5976] Code: ec 41 83 fd 1e 0f 87 3b 02 00 00 4b 8d bc 26 00 01 00 00 48 b9 00 00 00 00 00 fc ff df 48 89 f8 48 89 fa 48 c1 e8 03 83 e2 07 <0f> b6 04 08 38 d0 7f 08 84 c0 0f 85 02 02 00 00 47 0f b6 bc 26 00 [ 590.165157][ T5976] RSP: 0018:ffffc90004c27950 EFLAGS: 00010206 [ 590.171222][ T5976] RAX: 0000000000000023 RBX: 0000000000000001 RCX: dffffc0000000000 [ 590.179179][ T5976] RDX: 0000000000000006 RSI: ffffffff84ceb5d0 RDI: 000000000000011e [ 590.187135][ T5976] RBP: ffffc90004c27a78 R08: 0000000000000005 R09: 0000000000000000 [ 590.195089][ T5976] R10: 0000000000000000 R11: ffff88805b52422c R12: 000000000000001e [ 590.203042][ T5976] R13: 000000000000001e R14: 0000000000000000 R15: ffff88805b5240a8 [ 590.210996][ T5976] FS: 0000000000000000(0000) GS:ffff888124adf000(0000) knlGS:0000000000000000 [ 590.219909][ T5976] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 590.226477][ T5976] CR2: 000000110c2be541 CR3: 0000000036c9b000 CR4: 00000000003526f0 [ 590.234441][ T5976] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 590.242399][ T5976] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 590.250357][ T5976] Call Trace: [ 590.253621][ T5976] [ 590.256540][ T5976] netfs_retry_writes+0x166d/0x1a50 [ 590.261736][ T5976] ? irqentry_exit+0x3b/0x90 [ 590.266342][ T5976] ? __pfx_netfs_retry_writes+0x10/0x10 [ 590.271872][ T5976] ? netfs_write_collection_worker+0x530/0x3830 [ 590.278113][ T5976] netfs_write_collection_worker+0x23fd/0x3830 [ 590.284259][ T5976] process_one_work+0x9cc/0x1b70 [ 590.289181][ T5976] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 590.295321][ T5976] ? __pfx_process_one_work+0x10/0x10 [ 590.300692][ T5976] ? assign_work+0x1a0/0x250 [ 590.305265][ T5976] worker_thread+0x6c8/0xf10 [ 590.309843][ T5976] ? __kthread_parkme+0x19e/0x250 [ 590.314865][ T5976] ? __pfx_worker_thread+0x10/0x10 [ 590.319977][ T5976] kthread+0x3c2/0x780 [ 590.324057][ T5976] ? __pfx_kthread+0x10/0x10 [ 590.328636][ T5976] ? __pfx_kthread+0x10/0x10 [ 590.333210][ T5976] ? __pfx_kthread+0x10/0x10 [ 590.337817][ T5976] ? __pfx_kthread+0x10/0x10 [ 590.342404][ T5976] ? rcu_is_watching+0x12/0xc0 [ 590.347156][ T5976] ? __pfx_kthread+0x10/0x10 [ 590.351731][ T5976] ret_from_fork+0x45/0x80 [ 590.356128][ T5976] ? __pfx_kthread+0x10/0x10 [ 590.360697][ T5976] ret_from_fork_asm+0x1a/0x30 [ 590.365452][ T5976] [ 590.368452][ T5976] Modules linked in: [ 590.372632][ T5976] ---[ end trace 0000000000000000 ]--- [ 590.384070][ T5976] RIP: 0010:iov_iter_revert+0x2ec/0x5a0 [ 590.389729][ T5976] Code: ec 41 83 fd 1e 0f 87 3b 02 00 00 4b 8d bc 26 00 01 00 00 48 b9 00 00 00 00 00 fc ff df 48 89 f8 48 89 fa 48 c1 e8 03 83 e2 07 <0f> b6 04 08 38 d0 7f 08 84 c0 0f 85 02 02 00 00 47 0f b6 bc 26 00 [ 590.410498][ T5976] RSP: 0018:ffffc90004c27950 EFLAGS: 00010206 [ 590.419136][ T5976] RAX: 0000000000000023 RBX: 0000000000000001 RCX: dffffc0000000000 [ 590.429266][ T5976] RDX: 0000000000000006 RSI: ffffffff84ceb5d0 RDI: 000000000000011e [ 590.446020][ T5976] RBP: ffffc90004c27a78 R08: 0000000000000005 R09: 0000000000000000 [ 590.454420][ T5976] R10: 0000000000000000 R11: ffff88805b52422c R12: 000000000000001e [ 590.464705][ T5976] R13: 000000000000001e R14: 0000000000000000 R15: ffff88805b5240a8 [ 590.478405][ T5976] FS: 0000000000000000(0000) GS:ffff888124adf000(0000) knlGS:0000000000000000 [ 590.487541][ T5976] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 590.532990][ T5976] CR2: 00007f212ef20f98 CR3: 000000000e180000 CR4: 00000000003526f0 [ 590.549715][ T5976] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 590.557827][ T5976] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 590.568003][ T5976] Kernel panic - not syncing: Fatal exception [ 590.574307][ T5976] Kernel Offset: disabled [ 590.578614][ T5976] Rebooting in 86400 seconds..