last executing test programs: 2m36.02059581s ago: executing program 1 (id=210): syz_open_dev$vim2m(0x0, 0x2000000f5, 0x2) syz_open_dev$sndpcmc(0x0, 0x0, 0xa340658bc40d4f52) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, 0x0, 0x26}, 0x28) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000000)=0xffb) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000003680)=@filter={'filter\x00', 0x42, 0x4, 0x4a0, 0xffffffff, 0x210, 0x318, 0x318, 0xffffffff, 0xffffffff, 0x408, 0x408, 0x408, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @private, 0x0, 0x0, 'wg1\x00', 'nr0\x00'}, 0x74000002, 0xe8, 0x210, 0x1ba, {0x46010000, 0x2c000000000000}, [@common=@unspec=@limit={{0x48}, {0x0, 0xdf6, 0x0, 0x0, 0x0, 0x9}}, @common=@addrtype={{0x30}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:removable_device_t:s0\x00'}}}, {{@uncond, 0x287, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@cpu={{0x28}}, @common=@unspec=@limit={{0x48}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xb0, 0xf0, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x521) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001300), 0x2, 0x0) read$FUSE(r7, &(0x7f0000001340)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r7, &(0x7f0000003740)={0xb8, 0x0, r8, [{{0x7, 0x2, 0x2, 0x7, 0x3, 0x9, {0x2, 0xfffffffffffff430, 0x5, 0x7, 0x1, 0x66c, 0x4, 0x10000, 0x5, 0x4000, 0x8, 0x0, r9, 0xfffffffb, 0x4}}, {0x6, 0x1, 0xc, 0x9, '/dev/video#\x00'}}]}, 0xb8) ioctl$FS_IOC_SETFLAGS(r0, 0x40186f40, &(0x7f0000000440)=0x1f) 2m34.874179468s ago: executing program 1 (id=213): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f00000001c0)=0x1700) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = userfaultfd(0x80801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa08, &(0x7f0000000000)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x1}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x62081, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000040)={{0x0, 0x2, 0x0, 0x2}}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000000)={0x2, 0x0, 0xffffe000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xffffffffffffffff]}, 0x0, 0x8) r7 = memfd_secret(0x80000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, r7, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r8 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_RUN(r8, 0xae80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="b700000012edfffebfa30000000000000703000028feffff620af0fff8ffffff61a4f0ff000000001d04000000000000bf000000000000005504000001ed0a002500000017ff2000dd40000000000000730a00fe000000007704000000000000e5000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be361917adef6ee1c8a2b4f8ef1e50b91f32050e436fe275daf51efd601b6482a0800000098efefb202ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff0c710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9ec21ead2ed51b104d4d91af25b8123deda8a3658d42ecbf1dbf6d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800d9b3a69b37caa964e4b7000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040bef29b66e3858d051c096e37c4f46010400000000c3da29faf75ddd1aa96960bca97af13382cb881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f13792292cb949b3aab06b1e042ff2164d80c605532b18ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867b3acec439c163fcd7071b53ac29df826f8ae6d6e18c1eacf5bf870768d5217e9bb5a05d9e22ce67f1231bd236486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931485747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee63300000000000000000000000000000000000040000000000000000386000000b854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325a904514d8e90131bfc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885769754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8269b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8288e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347932a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87ddbd23834a50d7eb8e327fb5db12cbd6a9efe8e671c4f251fe3bf440cabdfe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb6c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa2c910fb8de24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f49e4dcc1b7af0b51b9cafeda067b6bbf3aa4371f5e76ab3f60afea80bb066aafb7517f787b090f419a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f8089322d84ac523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f626483632a2ab547f88dd6efec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe91c921ac1476027772c87d1767e38ba49e3e57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c828c02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007f00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d05d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cfe56557a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b530500d8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2ccb1decb15b5d7d3e37e8b7d28921c4b9280979521173f322df408d9818b6cc400098abb860600911480a876fbba698801937e8b4264eb6f5137bd9b075f1488d22230592a79000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b30e55ac1275e938706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb5237ea1694addebc14c3ae49f88c462aa2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399f055f2fa278783fefb0a5ef0b41e14a6fe6ba306206670b84894e901a523fcbadfeff0492df6b53002514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014f38fee012365f963b2a85e7d8075c333475b9f0284405e3127dde7e41285fbe0bdd37220e316f2297743dd4731614a50c16c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd6d6ab7e0e843591d2618e2d2cdc7081c8fafffe9c350a5c554a387de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa250bc93b233a2291b5b10eebc49b6882f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119dcf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8a9d3374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753446de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000010000009231feef3117197c7963c2ba910969f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a9201bc4b73b431df5aa29f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21d24fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696eb3f4b642f36c9006c0067e24a64aa8c53dd824a4ee271e35ed9eed636338f1835fc957729d63dc1bfc7b772cbe536c2d3aff27c22f9a2f876512616a5bdaf22a16e19d1b5f52abb40b433983d0cf50234de659c1a397ce901000000caae1bcfdce33dae6adc260321702f239c25ab181390e7dc8c1e5b1cf3b4fef1cd5c44a89b5e5d8314e02f4673ded90bce9a4025b0232eec970f7aa17f175a14e8dc8de9bac0006b98a8283eee5665f3aede28228e0468db"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) sched_setattr(0x0, 0x0, 0x0) 2m33.008418833s ago: executing program 1 (id=218): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f00000003c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x800, 0x0) mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000001a40)=""/102378, 0x18fea) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) getxattr(&(0x7f0000000300)='./cgroup\x00', &(0x7f0000000340)=@known='security.apparmor\x00', &(0x7f0000000380)=""/126, 0x7e) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80008) r4 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x1, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x80000000) write$tun(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x30, 0x0, @void}, 0x10) getdents64(r2, &(0x7f0000000300)=""/152, 0x98) 2m31.326624739s ago: executing program 1 (id=222): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getresgid(0x0, &(0x7f0000000180), &(0x7f00000016c0)) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1d, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f00000005c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xa0}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r2, 0x0, 0xe, 0x0, &(0x7f0000000000)="c1188c19b95d02ff4284860188a8", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) getpid() flistxattr(0xffffffffffffffff, &(0x7f0000001f40)=""/72, 0x48) shmget$private(0x0, 0x4000, 0x1, &(0x7f0000ffc000/0x4000)=nil) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r4}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) io_uring_enter(0xffffffffffffffff, 0x3516, 0xaddf, 0x2, 0x0, 0x1517f) r5 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_persistent(0x16, 0xffffffffffffffff, r5) 2m28.248198442s ago: executing program 1 (id=230): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) r1 = add_key$keyring(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) add_key(0x0, &(0x7f0000000300)={'syz', 0x1}, &(0x7f00000003c0), 0x0, r1) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) accept$inet(r3, &(0x7f0000000100)={0x2, 0x0, @private}, &(0x7f0000000200)=0x10) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2003, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x13, r2, 0x59967000) chdir(&(0x7f0000000080)='./file1\x00') r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r5, 0x40049366, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') ioctl$TCXONC(r0, 0x540a, 0x1) 2m26.15886719s ago: executing program 1 (id=235): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x4001, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x210020, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001aa40)=""/102400, 0x19000) openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) ioctl$SIOCAX25ADDUID(r1, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xee01}) ioctl$SIOCAX25GETUID(r1, 0x89e0, &(0x7f0000000480)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) ioctl$SIOCAX25DELUID(r1, 0x89e2, 0x0) r2 = gettid() ptrace$setregset(0x4205, r2, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)="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", 0xfc}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x2c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x2}, @NFTA_QUEUE_FLAGS={0x6}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x100}}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r4, 0x0) accept4$unix(r4, 0x0, 0x0, 0x80000) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, 0x0, 0x0) 2m10.033186899s ago: executing program 32 (id=235): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x4001, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x210020, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001aa40)=""/102400, 0x19000) openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) ioctl$SIOCAX25ADDUID(r1, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xee01}) ioctl$SIOCAX25GETUID(r1, 0x89e0, &(0x7f0000000480)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) ioctl$SIOCAX25DELUID(r1, 0x89e2, 0x0) r2 = gettid() ptrace$setregset(0x4205, r2, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)="47221ada7bad185b39ed6435c60c3a7092064e5ee740cd7332fc6c6f85f49ed432f73ccf4b1d5129b3ba8b68e30928bbd4887f44b3b28e096a26217004b9941ea08cb28f2cc277f263362d543065a75bbbf300dd09c44af918db0367774403edea1b51d8725aa842e464ea9f1288bae64c71925b1ef1ecb4469b0218986bf4cf081a9967fede220adc263aee5bd8bf343deff3bfbb24485eed970a3db44ff053d89ca217e4568c45a43dc448e2a401c72121f13b2a93bf54845754dae212b7089dbe2e363d550fb4f34ebb90509e10c89325af8fe99f33730d662c218f4478d6313d4a1e3e7aa5d987012076ec817b7aef6ccde382600d90cb9144b3", 0xfc}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x2c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x2}, @NFTA_QUEUE_FLAGS={0x6}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x100}}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r4, 0x0) accept4$unix(r4, 0x0, 0x0, 0x80000) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, 0x0, 0x0) 6.459949566s ago: executing program 5 (id=692): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0xe, {"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", 0x1040}}, 0x1006) 6.299825433s ago: executing program 5 (id=697): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201100100000040ac055b020000000000010902"], 0x0) fchdir(r2) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) set_mempolicy(0x4003, &(0x7f0000000200)=0x7, 0x3) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='freezer.self_freezing\x00', 0x275a, 0x0) mmap(&(0x7f0000fed000/0x11000)=nil, 0x11000, 0x2, 0x10, r3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000080)=0x0) waitid(0x0, r4, &(0x7f0000000240), 0x80000000, &(0x7f00000003c0)) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x18) r6 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000180), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000000)=0x1000) 6.299513031s ago: executing program 4 (id=699): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000600)={'aio_iiro_16\x00', [0x4f27, 0xb, 0x2, 0x10, 0x5, 0x6, 0x8, 0x7, 0xa, 0x100, 0x7, 0x1, 0x1, 0x20001, 0x6, 0x101, 0x3, 0x80000000, 0x3, 0x40000003, 0x89, 0xcaa7, 0x0, 0xffffffff, 0xb, 0xe69, 0x3c, 0xc, 0x10000006, 0x0, 0xfffffff8]}) read(r0, 0x0, 0x0) 6.299379422s ago: executing program 4 (id=700): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) mount(0x0, 0x0, &(0x7f0000000000)='bfs\x00', 0x10008, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x0) socket$xdp(0x2c, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ftruncate(0xffffffffffffffff, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x8000}) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000480)={0x1ff, 0x6, 0x2, {0x9, @pix={0x107, 0x3, 0x30364d54, 0x5, 0x3, 0xfffffff3, 0x5, 0x983e, 0x1, 0x3, 0x2}}, 0x9}) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0xffffffffffffffe1) nanosleep(&(0x7f0000000000)={0x0, 0x3938700}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r2) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x800) socket$l2tp(0x2, 0x2, 0x73) 5.183909659s ago: executing program 4 (id=710): mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYRESOCT]) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000010029bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="5cd2040000000000140003006e657464657673696d3000000000000034001680300001802c000c802300"], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x40) 5.14533547s ago: executing program 4 (id=712): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'geneve1\x00', 0x0}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x111200, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_NMI(r6, 0xae9a) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r5, 0x8008ae9d, &(0x7f0000000240)) sendto$packet(0xffffffffffffffff, &(0x7f0000000480)="86", 0x1, 0x404c880, &(0x7f00000000c0)={0x11, 0x15, r4, 0x1, 0x0, 0x6, @random="000000008000"}, 0x14) syz_open_procfs(0x0, &(0x7f0000000040)='children\x00') syz_pidfd_open(0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) preadv(r6, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/235, 0xeb}], 0x1, 0x2, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f0000001300)={0xc, {"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", 0x1000}}, 0x1006) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYRESOCT=r1], 0x58}}, 0x4000) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001100010027bd7000fddbdf2500000000", @ANYRES32=r10, @ANYBLOB="7a14"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) 5.104935126s ago: executing program 2 (id=713): capget(0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xd1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) syz_open_dev$swradio(&(0x7f0000000300), 0x1, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x800000000000001, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f000043b000/0x1000)=nil, 0xfffffffffffffdb5, &(0x7f0000000080)='\x00\xc9\xf5\x00\x00\x00\x00\x00\x00\x00+\x1ct\xc6\fr\xbaU\xc1\xb2\xd2\xde\xbfk\xc0\x18\x94\xc5&\xec\x03\xa0w\"E\xc9\xf2,K4\x10\xc8\x8cuj\xd3\xf0\xb3\xa9f\xf7\xb7\x17\xdf\xca\xac\x8b\x81K\t\x14^\xc3\xb7<\xa1\x15\v4\xd0\xbe\xa8\x01\x00<:-Y\n<\x1d\xb2\xe0kU\xc0\xc1\x14') read$msr(r0, &(0x7f0000019640)=""/102392, 0x18ff8) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x90) r2 = socket$inet(0x2, 0x2, 0x1) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x15, 0x3, &(0x7f0000000040)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x3, 0x71, 0x10, 0x1e}}, &(0x7f0000000480)='GPL\x00'}, 0x94) 4.497855168s ago: executing program 2 (id=716): capget(0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xd1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) syz_open_dev$swradio(&(0x7f0000000300), 0x1, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x800000000000001, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f000043b000/0x1000)=nil, 0xfffffffffffffdb5, &(0x7f0000000080)='\x00\xc9\xf5\x00\x00\x00\x00\x00\x00\x00+\x1ct\xc6\fr\xbaU\xc1\xb2\xd2\xde\xbfk\xc0\x18\x94\xc5&\xec\x03\xa0w\"E\xc9\xf2,K4\x10\xc8\x8cuj\xd3\xf0\xb3\xa9f\xf7\xb7\x17\xdf\xca\xac\x8b\x81K\t\x14^\xc3\xb7<\xa1\x15\v4\xd0\xbe\xa8\x01\x00<:-Y\n<\x1d\xb2\xe0kU\xc0\xc1\x14') read$msr(r0, &(0x7f0000019640)=""/102392, 0x18ff8) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000280)=ANY=[]) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000340)=ANY=[], 0x90) r2 = socket$inet(0x2, 0x2, 0x1) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x15, 0x3, &(0x7f0000000040)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x3, 0x71, 0x10, 0x1e}}, &(0x7f0000000480)='GPL\x00'}, 0x94) 4.106089471s ago: executing program 2 (id=717): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x6c, 0xeb, 0x85, 0x40, 0x249c, 0x9002, 0xdead, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x24, 0xdf, 0x6d}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 2.471774346s ago: executing program 0 (id=721): openat$rtc(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) syz_emit_ethernet(0x2f, &(0x7f0000000280)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, @void, {@arp={0x806, @generic={0x2, 0x1a, 0x6, 0x1, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}, "d5", @local, "91714673c45e42448a91b2bf"}}}}, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x1402, 0x300, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x1c}}, 0x4045) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0xd55, {0x4, 0x2, 0x0, 0x9, 0x20000009, 0x40, {0x200000000006, 0xfffffffffffffffb, 0x4, 0x100000001, 0x0, 0x10000000, 0x6, 0x3, 0x80000002, 0xc000, 0x3, 0x0, 0x0, 0x0, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006140)="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", 0x2000, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)={0x78, 0x0, 0x1, {0x0, 0x3, 0x0, {0x0, 0xffffffff, 0x177, 0x1a6, 0x7f, 0x7, 0x7, 0x3, 0x8, 0xc000, 0x2, 0x0, 0x0, 0x8, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$security_capability(r0, &(0x7f00000001c0), &(0x7f0000000200)=@v3={0x3000000, [{0x10, 0x10000}, {0x7fff, 0x3}]}, 0x18, 0x2) r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x4, 0x0) dup3(r2, 0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x402, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x30, 0x0, 0x1, 0xea, 0x25dfdbfd, {{}, {0x0, 0x3}, {0x14}}}, 0x30}, 0x1, 0x0, 0x0, 0x4004018}, 0x0) r5 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000040)) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) 1.873640401s ago: executing program 3 (id=728): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00') read(r0, &(0x7f00000028c0)=""/105, 0x69) preadv(r0, 0x0, 0x0, 0x5, 0x3) 1.836472651s ago: executing program 3 (id=729): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010427bd7000ffdbdf25010000800c00018008000100"], 0x3c}, 0x1, 0x0, 0x0, 0x24004040}, 0x0) 1.773387474s ago: executing program 3 (id=730): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1) ioctl$TCSETS(r0, 0x89f1, 0x0) 1.63577703s ago: executing program 3 (id=731): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x2, 0x90, 0x80000, {0x77359400}, {}, {}, 0x1, @can={{}, 0x40, 0x5, 0x0, 0x0, "ce2a4fa7a0aa108b"}}, 0x48}}, 0x40884) 1.626231215s ago: executing program 3 (id=732): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, r0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan1\x00'}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = syz_io_uring_setup(0x497, &(0x7f0000002180)={0x0, 0x787f, 0x100, 0x4, 0x1b0}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0x1f, 0x3}]}, 0x1, 0x1}, 0x1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000d00)={0x8, {"7894e6e62ce0f10fcdce74f21ad5b47c923d4dec90cefd599912070f341d59a8802e33af9869738f25b2f72093dd0ffa688e8e417c6e0e09b99649818d7caca39e142ef69d9101397854c3f51bde013686a626b2120c03d98c0ad981069188fbbddb88bf41a6b29ed43d1244e6025e1e4a2f40577619ccee39385bfc86461023a7906e5c07d16415140f4ab26db004362c885ef2c9ee82d3dd7e2ac42ca05d81ccea87dc0ec4a8f222013d6d4d0b0c828f3d2e3151dce87bfb335c1ad67bb3323564022ab23a6ba54ca117ca592c8d4227922347ea6f7c9d3dbdbc8d235f2d03e688d5ca7718d60e911534f964bf20359a0057847e7d7fd2cc463784aab2b06ba95512cfc427da44aa73634b0797b9baab391aa176d259c047ee9d346e63903860ab3c571d064509a715c5c4c6edffce9e1701e8291c2d937e3ff18691fe9a665b1a3b717a40205f8efa239b37e6b33f5c8ac28e616f788d0294c8d39ff4a63aaca7d4c578a935dd84850432201081bc1b00c5797847eaff8cecf8af8a60f075b5ff1c3dc9e62f9a3cfc4333a7501dd8badfdc691a9d35d3fc2c0e8f1b21a2c619201004a0d82bace1738ba9ca93e6fbf8ebaa78b5423efb19d3337ad050a7a1a634737a0169921911b277ab235f8b186efd60c3eff58e974a856ba460c5fbd91c1b5c999a7f6b4474560e0c5698085e1ff96381999bf7338dddab4499c6ae315245ecc98d3ca2ebc11214a4115e9205e7d1705591be4029a5e92ae06c02ba39ac70cf1ba082ccee070bf2feafa55ac6e863adb6f89a7475c2dc073058b0f8a52151d8c3ced025463656942bfd257ace6c54bd57985a44cef1c20777db47d12bd34371ef6f537e455b7787e3a853713877fa9465937602ceef8b9439507ab802ea4eaf5ee2ecd710b1840d8b8c995b5904434198abd8f0e830857ed1af53f3bcede9d57afb1cd7ad27bf222a6d1c58286c40d22211a3b2b7b7bbf5923a528fa4d781aaec1f67e013392b17197d2f6ff2d0e68bea94ce57cc516daffdf2348333a8dc596894540aa2a79437d95465fc27627b0e26871d5248c39e1a3badb319d449a7d67145418e1a35cb4bf950a5483d6e80763ea676b89d1f1e2cea20c590c76ae9fb228ffd638ccabdb3830cf944e1cccfb7ba8b1d1f0aabc498155ddda8404ebe2e25cfcfa9058af7d66bef79e592a579d556404ea3f28d6ddb3fdead9123247e23827f729eee41540d0f0e94027d65eee4e7c1c913c634f9abf546388cd2e4b351b16bd97faae3b54f5b2750495619ec36d97a1080564fa30a9f8a2700b77340b5bbd9cc377ee35420b5b762935047af7837e973a9da42ef93c11f145704d041054bcc4680363cbbee16a2bc0eaaa49cfa23330a666dff32daa17a6ea425f1ed2354d0c36893c895a0564e100d3e1385467405ca2706cfb62453faf72b1648727faeffb3c934bc4e48e4ce93af11bff3208cb3843da7ed68451b4af747ef72e2fb78a73990c95097c9504aacddffc5caadeb171e95ad113561144907d361fd28695239f6619360b9d0eead653cc83ab13fc7c0c60237e3363b6f319daa38d792426393e2396404a112ed9e70b378f494d4b540bf9b44d76b347a12c8cdaeed350a85698eb71bd126f75b9aa0ff7435926a4a4ce04e4187eae5a80b1ff56aa7f1b005a9a057b6ace4cf08c404f66c0b31974d151e9a2840ebcbfbfd898e6694b89fe78a68b90551c9d33c14914dceff64a699c1cf1570c2d1f53e905abef9f954fbdd100b1b18f10dbd673bd6c7a9693286cf2dc0ab9919466750aa42ccfa27e9ff4190dd784ec6f2e19270521f98561a959152b16a80f0b1e183375d3886936ae03ff4949777d30481c24bbae918d5fdcc8f46ff05e2370095bc85cde086dc1e32423f21c13c42490fb679462f35dd0c4ef06f8c3f24327af47ea2c73a856f112385094fe138022e308c157adb19b94ed0e8d94b805883318b33b22f371d62f0b764b2a44b65018bef417357aa997ea4ef95a2899963e06a3c553943e14d3364b73919f5e6d8395d56d522f1b19ae37d48f1534d92e4248824adb555281aea2fb317bfb30cdc7d4efada900006f45578a061b19e2eeefffdbf1974a1633182501611724079f926122c1c8fd9b1d8e6302d76ed90616abcfcac478e3b8d3be91eee5f9c653f8fed3afc1eb33d9314aaa021e8b53ab7ba3e59b301a6c757efd95c6661d7d3e8a73cdec7833f4608dc238d8e144a5b0196a9aea6fb30efdfdb05f9529c52af93cd78d857e3cc920bf30b2292380c662890f3679c09aea55c77a75dbb4da338c0fb737a5fc31252d9fa798f9dd70947f6cfa0474a7a835c694dfbb5c678216915d1f04c81d5df8f2efde80fdbce8248525d9b639f394847b9a8c2e7f7288b031df91db059eabb750c1bfe732b78001c2cca0f74cd8873cc2a892d26e1dbd48db297853775c21d68ce1daebee4f4d65bf8e448b1c80da35eaff3295ffe0aef68baff15f7585aba741699c3ed9a62f2c18200e40cbb383b844459ca9636d61645470d4f8b04704b84a7986d816c037d368d807ab936faa842a427cc4987ab506f3f08841195c893f39656547ff62730ec43aa78311d57defe4002301f6b9e1f6573f3a46715e2d1f899480e8bc97f5dfe48ad14df280126998d32dc0a63231584b5ee82d5f90d5ccd3eb3923cee0dfe0eb9b1ac54fd97214ad86c6459cf916ba0bfc9d4210a95346d753f4bc7440d78274c4cd1850907a2bf150a1c1b511bf0438494a6aa1a197f787c96b410d866b4cb284f74122ffbb2f5fa7c2c22f935c7e1542ff83f01e3024ee6e3d7fd0fba2754e635c8116a27f15586300d6522979822c1f97038f33c644ef82e9818f4a09388cb9a69514c929e9bc149fd7a26b458d89abb5e3ae1de29ed1f28d613878a24a9296c967339b9c6749f92c720982cb78a120bcf7593c6fbae36f9a06caa384a7e5d3f05442b0a69f72518a76a916968aae56abda54dac318fd726335e95592f80d030ef51aea41d5e348267fcea65e49d8e36e711fedb3fb9ad37d3fdf2185dcc3ff44736d6a0d4b4bd1810f89ec6e0e6b6f58f74d73ddd2a27fcfaf36d1aec6c3769787a1d3b8514487a399e6497bd0bf4c4242868d599aeb2202cae535e8118d478fc43b4c8bfdcf024f36f5d7c9f75c69bc9d4d5414e8bef740bcaf9027dbdb0f47643b984406c9ce1999d7631243c26d6824ae74ab71f536e40e934a5dfea7f5c5d10713c831df6ba168f4080a4b082e94bc23c0807aab7c0bc29f327d185a2a9302cc255aa54764c4eb8ef5b17d640afa30b36572294914d51ac146f87af6f5abd97823724aba25f589e769aa1047e72365e9ee67e7f90e80542cc842aebabc97679dd893075e8a1bd6934ac9e768e20bcf4c2fa29c5f7a103d3ff689c721e08ef1d0ca61ee3e07a815aa943879dd5c406dcff6a946b0a12980620cfb224912e27accbb63b1e2d571c65918c806060dcd08d5cef341e5c5705021ec19605b809a44d2a8f6f27e18f2b8fd268e23706564df5501096fd8f8261e27d5c8b582673f0c76bf78b27f754cddb5b64a33c87841681d8eef2b5abe8a8deabee587189f75b8b518909cd2a6f89910425e8647f25077829f1b400b3abcaeff6f54ccc00f6fb7abeeefe0226e4e2b55fba0925b49be8310fc5a490384e4a5e7216b0fd0c09c00e3327ada8c59eb37443ac9148a9df92b0d4e6851cd93b784d3e0a236d9fe7c483f03d813fc98e632cf6255dc4a70a0458570776509ebfb545f35956c7e32493f6ad886ec858bfc29bffb7f2ae7eed7d83e3075554dd81e72c93f4c2e4dcdb0832e76861b983b17c2a6f887a988e4fd47459fd45134560b5b1bec10c50914f2d7f327a4e68a0c453f067035f243ca01aa22969481d5fb48d1da82f35222c4e8d249625c454159f7b00a85d43414eb5e7c8044922b323f2473af648d1dba5ffff34bd5e023a2fe4860d7568fa4d35ad20c461eb38bced561edcef853dbcdd7b69bb40e9cda525a71a286c956a1268cacad0bc0c79ed7632aedbb8dc78ba1a2adea2b650314072d1ebc08f9753d6d38e53a758ea4700160588e819239711a506f004ec57037cd6efcbb9cee3bba556eaaa008bf8e8390085b85653c7aa006dd836c7ad025bed9dec77a4a00b309776862fca4dd01dff16aa6bd70a876662093b85ffbb07b2f8b4361f5dc635f940571239a71865e8f1a289f449ae9a74266205c8b1fe8a732db502c9ea5e5c379b704d43ef795b40450aa498535803767d2c2cbd2749474d2997e00f37612fcc0ae7322b8c8e2a90cf66ada69bd05b82d5707562b37e40674f0a3f58d9c776a931b8768d5c23f17c5f9135e7a4ce0c6eb356d9fb4a53d112194c19e6f045d2bd44132a70b9ccd7e65d2787899785f7ee9185589136c847347142440e0a405c18ff3f31acb791a805dd281aaf97aee708dcce2f1aa53161b7716fa0978c0d02871637ad7e1af5a158b727a1dfc2ae1aafbb9c516469ee89fa0f1de23a17115ded5e9c560a468c5192943be74aeaba51083ca0379563f1fa78e29eca1eaf849cd00f419ceb59e640248c332c845e68e9a398281b962ae59aa5b18006b6ea6e0c5f1b30665e1fb975da11ed6a47bd44b4241bbf0443f178e8249805cc3f980a4bb2f46baab0a12e9e9b2aaa7e0ca22b2314a9e5ef6412f4efe31381e3d716244af3112444eabbb0c353acafc0f1179ad4c63b81e5f5bfd771591d24e5254fa72e30aa53717c24b49cee71cdd9368e207af5e992a04f06de912cfcfca38732f5c8393d466d209680ebfa5764897f04531138beff3f65691593e334c2ae2825ffa9353e8aeef37b90691ea5c78d7c86124abf6491a068bf03c3467e5e42ca4b58192d17856722207568777141ccbef3f3891708897af9c196be92056527a8da820d28dccaf4dfed4d38fb8fe826b238d31bad751631a0d8b1eabdfa7bffe65241238ff982d21b2222cdd3a536385d0ab2180ccdf4672d0b21156377fe640ee8c8744b9ba1efce91c295e83a4271a34a1f70adbc2ff0aa6ba9e1965061cadcd3d824636bbc1f977c78dde1859d752c86b099705616edf6e94523f108af79ab5073d26f3788c4d56f1b17b764c1bc387e531dab5dd71198c56b02c68552dc1098beec85dc1bbe2dde316e6093a9a33f578d789da9b2a9209ed6e73a0597bc62467afc42f0348c9b885b92f37569a953f6316d5c8b188539474da3836abeae7ec259cf8fd28f02593597e9206e05e8da4f4346aab36f179deb68a9dab9b550d6fe4f0c88563935328a699b9cbb2015be57c28beaf60be499114f04a96a2f7fb3bf3b5b31e422954c96790aa1e49c5bc1946df0df2b4be63c0aac1ddcf187714f6e67a076a823feaeba5db4a99e5f494ec939d1b0ecd23752c08c3b788704612127e7f080ef581b4990accd6dca7ce52844bc7bbc8c8752497c171d8e628c53609a920fb5a1bc740cb05e2035de72f636ef0498ed2f3cccb64d5740afbc30015442ca0511160787b2c763072c70035f7f3bbbd3966bcc80d021ce1482e27681b963a28189c2ee9d64d0622a94eac689d3fc1a4137c4d62a4c73fab4b0175a8ff8fa256118affd94aaeee33b155043f53d9e3d4eb82173df0938c6c3e51c118c1acf187c84f12090ad1dd663013e433455290f87ca88959f9f481e4dd05e6a483abe00f7c974e5ff602a7a6eaa71f8ac06c50afac0c2858b554f59bf88002766a619ae9b0864926d07b273238e1ebd456543f77ea800231dbf4479f0b90fc607", 0x1000}}, 0x1006) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x2, r1, 0x0, 0x0, 0x0, 0x200, 0x1, {0x1}}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) openat$binderfs_ctrl(0xffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x802, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f000001aa40)=""/102400, 0x19000) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebb", 0x14}, {&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfb", 0x26}], 0x2) r6 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x65) connect$l2tp6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0x7c}, 0x20) getsockname$l2tp6(r6, 0x0, 0x0) 1.57918105s ago: executing program 2 (id=733): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@mask_cswp={0x58, 0x114, 0x9, {{0xe, 0x7}, 0x0, 0x0, 0x6, 0x2, 0x7ff, 0x4, 0x22, 0xfffffffffffffffa}}], 0x68, 0x41}, 0x0) 1.535927459s ago: executing program 5 (id=734): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8082, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000000040)={0x1, 0x3c0, 0xc0, 0x0}) 1.510240109s ago: executing program 0 (id=735): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1183, 0x5482a}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 1.169871311s ago: executing program 3 (id=736): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56e, 0x11c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x8, [{{0x9, 0x4, 0x0, 0x6d, 0x41, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x5, 0xfc, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x1, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) 1.127995406s ago: executing program 4 (id=737): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000080)="2e00000011008188040f46ec0800b9cca7480ef4210000fee3bd6efb440013030e001b000d000008ba800082da01", 0x2e}], 0x1}, 0x48d4) 1.09993645s ago: executing program 2 (id=738): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r0 = openat$random(0xffffffffffffff9c, &(0x7f000000fe80), 0x40800, 0x0) ioctl$RNDADDENTROPY(r0, 0x5207, 0x0) 1.084391922s ago: executing program 5 (id=739): capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x7, 0x0, 0x10040, 0x8f}) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_ACTIVATE(r0, 0x5606, 0x4) 988.004974ms ago: executing program 2 (id=740): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001517ee40f00a057a0000010203010902120001000000000904030000ff"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="203111"], 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6_sctp(0xa, 0x5, 0x84) 987.839577ms ago: executing program 4 (id=741): syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010007000009058dff86"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) fcntl$setstatus(r0, 0x4, 0x42400) 987.410487ms ago: executing program 5 (id=742): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000500)=@gcm_128={{0x303}, "a95972fc5ec50719", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) shutdown(r0, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() syz_emit_ethernet(0x99, &(0x7f0000000300)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @void, {@x25={0x805, {0x3, 0x6, 0x27, "fe228d513aa7818f7328853ef7b431fbaf01dd7832a00284814b6a21983ed561d10b035e3a1bb005cc677ef66de15f6d184711b97e69a17c0c3642874cf75118f8158452b95b048f73785136d5a1c83087693177af448b77c92b07dfa00c039a3af15434cce308eded7dc2a8a2e3f9d8e0df98302b650934698b03d36a2ddcd8809797e007358da3"}}}}, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendfile(r0, r1, 0x0, 0xffffffff004) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xc1200, 0x0, 0xfffffec8, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 971.810947ms ago: executing program 0 (id=743): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x60442, 0x0) r1 = dup(r0) ioctl$PTP_PEROUT_REQUEST2(r1, 0x40383d0c, &(0x7f0000000280)={{0xeb4, 0x6}, {0xeb4, 0x673ec22f}, 0x1001, 0x5}) 893.42068ms ago: executing program 0 (id=744): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54, 0x0, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) 708.488516ms ago: executing program 0 (id=745): io_setup(0x8, &(0x7f0000000000)=0x0) r1 = eventfd2(0x0, 0x80801) io_submit(r0, 0x1, &(0x7f00000008c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0x8, r1, &(0x7f0000000580), 0x0, 0x686, 0x0, 0x3, r1}]) 563.812739ms ago: executing program 0 (id=746): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0}, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r1, 0x11c, 0x3, &(0x7f0000000040)=""/175, &(0x7f0000000100)=0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r5, 0x0, 0x4c006) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000280)={'veth1_to_bridge\x00', 0x400}) getresuid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)=0x0) lsetxattr$security_capability(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f0000000200)=@v3={0x3000000, [{0x185f, 0x29b6}, {0xbe8, 0xddee}], r6}, 0x18, 0x2) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000280)={'veth1_to_bridge\x00', 0x600}) syz_clone(0xa04c280, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') socket$packet(0x11, 0x2, 0x300) 0s ago: executing program 5 (id=747): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x4f27, 0x5, 0x2, 0x401, 0x1, 0xcc7, 0xfff, 0x5c952399, 0x5, 0x3ff, 0x802, 0x1600, 0x1, 0x1, 0x9, 0xe1cb, 0x6, 0x4, 0x3, 0x395, 0x80000089, 0xfffffffd, 0x2f, 0xfffffff5, 0xffffeadb, 0x3, 0x3c, 0x8, 0x4, 0x8000000, 0xdffffffa]}) kernel console output (not intermixed with test programs): ][ T30] audit: type=1400 audit(1755467426.578:491): avc: denied { unmount } for pid=5845 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 143.392505][ T30] audit: type=1400 audit(1755467427.121:492): avc: denied { ioctl } for pid=7226 comm="syz.3.223" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0xf504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 144.133437][ T7268] netlink: 36 bytes leftover after parsing attributes in process `syz.3.228'. [ 144.177334][ T30] audit: type=1400 audit(1755467427.982:493): avc: denied { append } for pid=7266 comm="syz.3.228" name="sg0" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 145.504350][ T7281] overlayfs: failed to resolve './file1': -2 [ 145.925288][ T30] audit: type=1400 audit(1755467429.562:494): avc: denied { setopt } for pid=7288 comm="syz.2.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 146.695056][ T30] audit: type=1400 audit(1755467429.693:495): avc: denied { mount } for pid=7287 comm="syz.1.230" name="/" dev="autofs" ino=13748 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 146.823250][ T30] audit: type=1400 audit(1755467429.759:496): avc: denied { override_creds } for pid=7292 comm="syz.4.231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 147.407602][ T30] audit: type=1400 audit(1755467430.535:497): avc: denied { setopt } for pid=7299 comm="syz.0.233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 147.576513][ T30] audit: type=1400 audit(1755467431.153:498): avc: denied { map } for pid=7287 comm="syz.1.230" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 147.661712][ T30] audit: type=1400 audit(1755467431.153:499): avc: denied { execute } for pid=7287 comm="syz.1.230" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 147.705770][ T30] audit: type=1400 audit(1755467431.162:500): avc: denied { mounton } for pid=7287 comm="syz.1.230" path="/36/file1/file0" dev="autofs" ino=13058 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 148.167438][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 148.167466][ T30] audit: type=1400 audit(1755467431.714:502): avc: denied { connect } for pid=7326 comm="syz.4.236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 149.168479][ T30] audit: type=1400 audit(1755467432.649:503): avc: denied { getopt } for pid=7369 comm="syz.3.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 149.970664][ T30] audit: type=1400 audit(1755467433.201:504): avc: denied { ioctl } for pid=7386 comm="syz.4.240" path="socket:[13131]" dev="sockfs" ino=13131 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 149.996380][ T30] audit: type=1400 audit(1755467433.388:505): avc: denied { connect } for pid=7385 comm="syz.0.241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 150.039047][ T30] audit: type=1400 audit(1755467433.388:506): avc: denied { bind } for pid=7385 comm="syz.0.241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 150.137354][ T30] audit: type=1400 audit(1755467433.388:507): avc: denied { write } for pid=7385 comm="syz.0.241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 150.437889][ T7407] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 150.455487][ T7407] SELinux: Context system_u:object_r:semanage_exec_t:s0 is not valid (left unmapped). [ 150.623107][ T30] audit: type=1400 audit(1755467433.865:508): avc: denied { relabelto } for pid=7403 comm="syz.3.242" name="cgroup.procs" dev="cgroup" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:semanage_exec_t:s0" [ 150.650308][ C0] vkms_vblank_simulate: vblank timer overrun [ 150.674218][ T30] audit: type=1400 audit(1755467433.865:509): avc: denied { associate } for pid=7403 comm="syz.3.242" name="cgroup.procs" dev="cgroup" ino=120 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:semanage_exec_t:s0" [ 150.770569][ T7415] trusted_key: encrypted_key: insufficient parameters specified [ 151.227574][ T30] audit: type=1400 audit(1755467434.576:510): avc: denied { getopt } for pid=7416 comm="syz.2.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 151.561855][ T30] audit: type=1400 audit(1755467434.885:511): avc: denied { bind } for pid=7432 comm="syz.3.247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 152.195524][ T7445] trusted_key: encrypted_key: master key parameter 'def' is invalid [ 152.881519][ T7451] netlink: 16 bytes leftover after parsing attributes in process `syz.3.250'. [ 153.725920][ T5919] libceph: connect (1)[c::]:6789 error -101 [ 153.731847][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 153.731855][ T30] audit: type=1400 audit(1755467436.625:528): avc: denied { create } for pid=7457 comm="syz.0.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 153.760210][ T5919] libceph: mon0 (1)[c::]:6789 connect error [ 153.792285][ T30] audit: type=1400 audit(1755467436.625:529): avc: denied { setopt } for pid=7457 comm="syz.0.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 153.869503][ T43] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 153.878335][ T30] audit: type=1400 audit(1755467436.634:530): avc: denied { create } for pid=7457 comm="syz.0.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 153.898481][ T30] audit: type=1400 audit(1755467436.643:531): avc: denied { connect } for pid=7457 comm="syz.0.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 153.918661][ T30] audit: type=1400 audit(1755467436.643:532): avc: denied { write } for pid=7457 comm="syz.0.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 153.995243][ T7470] ceph: No mds server is up or the cluster is laggy [ 154.072456][ T30] audit: type=1400 audit(1755467437.233:533): avc: denied { create } for pid=7476 comm="syz.0.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 154.092913][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880786d7800: rx timeout, send abort [ 154.107401][ T43] usb 4-1: Using ep0 maxpacket: 32 [ 154.107400][ T30] audit: type=1400 audit(1755467437.270:534): avc: denied { read } for pid=5200 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 154.107434][ T30] audit: type=1400 audit(1755467437.270:535): avc: denied { search } for pid=5200 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 154.146305][ T43] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 154.201043][ T43] usb 4-1: config 0 has no interface number 0 [ 154.209762][ T30] audit: type=1400 audit(1755467437.270:536): avc: denied { append } for pid=5200 comm="syslogd" name="messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 154.232193][ T43] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 154.242002][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.251770][ T43] usb 4-1: Product: syz [ 154.256191][ T43] usb 4-1: Manufacturer: syz [ 154.260805][ T43] usb 4-1: SerialNumber: syz [ 154.267917][ T30] audit: type=1400 audit(1755467437.270:537): avc: denied { open } for pid=5200 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 154.290722][ T43] usb 4-1: config 0 descriptor?? [ 154.297058][ T43] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 154.305822][ T43] usb 4-1: selecting invalid altsetting 1 [ 154.312836][ T43] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 154.345997][ T7484] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 154.373018][ T7484] net_ratelimit: 11 callbacks suppressed [ 154.373031][ T7484] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 154.392640][ T7485] ksmbd: Unknown IPC event: 3, ignore. [ 154.415956][ T7485] usb usb8: usbfs: process 7485 (syz.0.264) did not claim interface 0 before use [ 154.550346][ T43] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 154.573734][ T43] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 154.595320][ T43] usb 4-1: media controller created [ 154.626868][ T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 154.635220][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880786d7800: abort rx timeout. Force session deactivation [ 154.812977][ T7499] ipvlan2: entered promiscuous mode [ 156.241723][ T5848] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 156.380861][ T43] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 156.387962][ T43] zl10353_read_register: readreg error (reg=127, ret==-110) [ 156.412772][ T5848] usb 5-1: Using ep0 maxpacket: 32 [ 156.422077][ T5848] usb 5-1: config 0 has no interfaces? [ 156.433460][ T5848] usb 5-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice=60.65 [ 156.444704][ T5848] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.454204][ T5848] usb 5-1: Product: syz [ 156.460178][ T5848] usb 5-1: Manufacturer: syz [ 156.466823][ T5848] usb 5-1: SerialNumber: syz [ 156.481636][ T5848] usb 5-1: config 0 descriptor?? [ 156.524989][ T43] usb 4-1: USB disconnect, device number 4 [ 156.963470][ T7543] netlink: 72 bytes leftover after parsing attributes in process `syz.3.258'. [ 157.853775][ T7556] SELinux: security_context_str_to_sid (5ýÆÉ] ÖS9q#“ë) failed with errno=-22 [ 158.084164][ T7564] netlink: 204 bytes leftover after parsing attributes in process `syz.3.261'. [ 158.778857][ T7584] mkiss: ax0: crc mode is auto. [ 158.946643][ T5848] usb 5-1: USB disconnect, device number 5 [ 159.386682][ T30] kauditd_printk_skb: 78 callbacks suppressed [ 159.386698][ T30] audit: type=1400 audit(1755467442.209:616): avc: denied { read } for pid=7606 comm="syz.3.266" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 159.416870][ T5848] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 159.484669][ T30] audit: type=1400 audit(1755467442.209:617): avc: denied { open } for pid=7606 comm="syz.3.266" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 159.511152][ T30] audit: type=1400 audit(1755467442.303:618): avc: denied { read } for pid=7606 comm="syz.3.266" dev="nsfs" ino=4026532931 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 159.608713][ T30] audit: type=1400 audit(1755467442.303:619): avc: denied { open } for pid=7606 comm="syz.3.266" path="net:[4026532931]" dev="nsfs" ino=4026532931 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 159.763670][ T30] audit: type=1400 audit(1755467442.303:620): avc: denied { create } for pid=7606 comm="syz.3.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 159.792392][ T30] audit: type=1400 audit(1755467442.303:621): avc: denied { bind } for pid=7606 comm="syz.3.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 159.836458][ T30] audit: type=1400 audit(1755467442.303:622): avc: denied { listen } for pid=7606 comm="syz.3.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 159.856416][ T30] audit: type=1400 audit(1755467442.415:623): avc: denied { read } for pid=5513 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 159.881000][ T5848] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 159.893194][ T5848] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.908003][ T5848] usb 5-1: Product: syz [ 159.912370][ T5848] usb 5-1: Manufacturer: syz [ 159.918994][ T5848] usb 5-1: SerialNumber: syz [ 159.976144][ T7619] tc_dump_action: action bad kind [ 159.989945][ T30] audit: type=1400 audit(1755467442.695:624): avc: denied { bpf } for pid=7614 comm="syz.3.267" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 160.047694][ T30] audit: type=1400 audit(1755467442.705:625): avc: denied { prog_load } for pid=7614 comm="syz.3.267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 160.082418][ T7619] netlink: 'syz.3.267': attribute type 10 has an invalid length. [ 160.090541][ T7619] netlink: 40 bytes leftover after parsing attributes in process `syz.3.267'. [ 160.100743][ T7619] dummy0: entered promiscuous mode [ 160.108565][ T5848] usb 5-1: config 0 descriptor?? [ 160.121773][ T7619] bridge0: port 3(dummy0) entered blocking state [ 160.129024][ T7619] bridge0: port 3(dummy0) entered disabled state [ 160.137040][ T7619] dummy0: entered allmulticast mode [ 160.162586][ T7619] bridge0: port 3(dummy0) entered blocking state [ 160.169082][ T7619] bridge0: port 3(dummy0) entered forwarding state [ 160.352003][ T5848] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 160.459445][ T7626] netlink: 'syz.2.269': attribute type 10 has an invalid length. [ 160.484370][ T7626] netlink: 4 bytes leftover after parsing attributes in process `syz.2.269'. [ 162.051304][ T7668] overlayfs: failed to resolve './file1': -2 [ 163.633854][ T5848] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 163.694795][ T5848] usb 5-1: USB disconnect, device number 6 [ 165.145059][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 165.145074][ T30] audit: type=1400 audit(1755467447.588:665): avc: denied { create } for pid=7697 comm="syz.2.276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 165.420379][ T30] audit: type=1400 audit(1755467447.849:666): avc: denied { create } for pid=7697 comm="syz.2.276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 165.569160][ T30] audit: type=1400 audit(1755467447.990:667): avc: denied { read write } for pid=7711 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 165.606320][ T5857] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 165.617685][ T30] audit: type=1400 audit(1755467447.990:668): avc: denied { open } for pid=7711 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 165.627469][ T5857] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 165.683844][ T5857] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 165.684377][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.701528][ T30] audit: type=1400 audit(1755467447.990:669): avc: denied { ioctl } for pid=7711 comm="syz-executor" path="socket:[14231]" dev="sockfs" ino=14231 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 165.756785][ T5857] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 165.790225][ T5857] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 165.811633][ T5169] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 165.835058][ T5169] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 165.843315][ T5169] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 165.850557][ T5169] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 165.857828][ T5169] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 165.989931][ T5848] libceph: connect (1)[c::]:6789 error -101 [ 165.990376][ T30] audit: type=1400 audit(1755467448.280:670): avc: denied { mounton } for pid=7711 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 166.045822][ T5848] libceph: mon0 (1)[c::]:6789 connect error [ 166.105444][ T7730] ceph: No mds server is up or the cluster is laggy [ 166.195744][ T30] audit: type=1400 audit(1755467448.327:671): avc: denied { prog_run } for pid=7714 comm="syz.4.280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 166.238543][ T30] audit: type=1400 audit(1755467448.626:672): avc: denied { create } for pid=7729 comm="syz.0.281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 166.239320][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.345990][ T30] audit: type=1400 audit(1755467448.719:673): avc: denied { getopt } for pid=7729 comm="syz.0.281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 166.491548][ T30] audit: type=1400 audit(1755467448.785:674): avc: denied { accept } for pid=7857 comm="syz.3.283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 166.752775][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.795012][ T7711] chnl_net:caif_netlink_parms(): no params data found [ 166.943666][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.073238][ T7877] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 167.349324][ T43] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 168.086949][ T5169] Bluetooth: hci2: command tx timeout [ 168.457051][ T7711] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.579188][ T7982] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 168.585804][ T7982] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 168.593517][ T7982] vhci_hcd vhci_hcd.0: Device attached [ 168.633192][ T7982] netlink: 32 bytes leftover after parsing attributes in process `syz.4.286'. [ 168.642146][ T7982] netlink: 12 bytes leftover after parsing attributes in process `syz.4.286'. [ 168.867498][ T5919] usb 41-1: new high-speed USB device number 2 using vhci_hcd [ 169.413267][ T43] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 169.473089][ T7711] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.481624][ T7711] bridge_slave_0: entered allmulticast mode [ 169.487535][ T7983] vhci_hcd: connection closed [ 169.491633][ T7711] bridge_slave_0: entered promiscuous mode [ 169.504724][ T1011] vhci_hcd: stop threads [ 169.505889][ T7711] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.516043][ T7711] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.523186][ T7711] bridge_slave_1: entered allmulticast mode [ 169.529497][ T7711] bridge_slave_1: entered promiscuous mode [ 169.536420][ T1011] vhci_hcd: release socket [ 169.540906][ T1011] vhci_hcd: disconnect device [ 169.549707][ T5919] usb 41-1: enqueue for inactive port 0 [ 169.555424][ T43] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 169.621820][ T43] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 169.649315][ T43] usb 3-1: string descriptor 0 read error: -71 [ 169.656819][ T43] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 169.667589][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.667890][ T13] bridge_slave_1: left allmulticast mode [ 169.682198][ T43] usb 3-1: can't set config #1, error -71 [ 169.690617][ T5919] vhci_hcd: vhci_device speed not set [ 169.692924][ T13] bridge_slave_1: left promiscuous mode [ 169.709598][ T43] usb 3-1: USB disconnect, device number 6 [ 169.841299][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.198080][ T13] bridge_slave_0: left allmulticast mode [ 170.260322][ T13] bridge_slave_0: left promiscuous mode [ 170.266837][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.363388][ T5169] Bluetooth: hci2: command tx timeout [ 170.559329][ T30] kauditd_printk_skb: 47 callbacks suppressed [ 170.559344][ T30] audit: type=1326 audit(1755467452.648:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8000 comm="syz.3.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc843f8ebe9 code=0x7ffc0000 [ 170.656971][ T30] audit: type=1326 audit(1755467452.648:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8000 comm="syz.3.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc843f8ebe9 code=0x7ffc0000 [ 170.913800][ T30] audit: type=1326 audit(1755467452.994:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8000 comm="syz.3.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc843f8ebe9 code=0x7ffc0000 [ 171.080517][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 171.257570][ T30] audit: type=1326 audit(1755467452.994:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8000 comm="syz.3.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc843f8ebe9 code=0x7ffc0000 [ 171.257756][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 171.674940][ T30] audit: type=1326 audit(1755467452.994:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8000 comm="syz.3.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7fc843f8ebe9 code=0x7ffc0000 [ 171.713530][ T13] bond0 (unregistering): Released all slaves [ 171.734802][ T7711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.895571][ T7711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.916968][ T30] audit: type=1326 audit(1755467452.994:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8000 comm="syz.3.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc843f8ebe9 code=0x7ffc0000 [ 172.160886][ T30] audit: type=1326 audit(1755467452.994:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8000 comm="syz.3.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fc843f8ebe9 code=0x7ffc0000 [ 172.253623][ T30] audit: type=1326 audit(1755467452.994:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8000 comm="syz.3.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc843f8ebe9 code=0x7ffc0000 [ 172.277022][ T30] audit: type=1326 audit(1755467453.022:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8000 comm="syz.3.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc843f8ebe9 code=0x7ffc0000 [ 172.396496][ T30] audit: type=1326 audit(1755467453.022:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8000 comm="syz.3.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc843f8ebe9 code=0x7ffc0000 [ 172.533231][ T7711] team0: Port device team_slave_0 added [ 172.538940][ T5169] Bluetooth: hci2: command tx timeout [ 172.578312][ T7711] team0: Port device team_slave_1 added [ 172.925007][ T8105] netlink: 'syz.2.296': attribute type 5 has an invalid length. [ 173.352017][ T8106] netlink: 2384 bytes leftover after parsing attributes in process `syz.2.296'. [ 173.763436][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 174.044951][ T7711] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 174.051891][ T7711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.107388][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 174.117672][ T9] usb 5-1: config 0 has no interfaces? [ 174.127276][ T9] usb 5-1: New USB device found, idVendor=0757, idProduct=0900, bcdDevice= 0.00 [ 174.144287][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.154159][ T7711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 174.234741][ T9] usb 5-1: config 0 descriptor?? [ 174.517529][ T7711] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 174.533327][ T7711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.559199][ C0] vkms_vblank_simulate: vblank timer overrun [ 174.569586][ T7711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 174.617947][ T13] hsr_slave_0: left promiscuous mode [ 174.635055][ T13] hsr_slave_1: left promiscuous mode [ 174.768722][ T5169] Bluetooth: hci2: command tx timeout [ 174.777741][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 174.785916][ T13] batadv0: mtu less than device minimum [ 174.791974][ T13] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 174.802766][ T13] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 174.813530][ T13] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 174.824053][ T13] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 174.834756][ T13] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 174.845293][ T13] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 174.855824][ T13] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 174.866552][ T13] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 174.877079][ T13] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 174.899230][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 174.928323][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 174.943926][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 174.951576][ T13] batman_adv: batadv0: Interface deactivated: dummy0 [ 174.958258][ T13] batman_adv: batadv0: Removing interface: dummy0 [ 174.969791][ T13] veth1_macvtap: left promiscuous mode [ 174.980950][ T13] veth0_macvtap: left promiscuous mode [ 174.986893][ T13] veth1_vlan: left promiscuous mode [ 174.992185][ T13] veth0_vlan: left promiscuous mode [ 175.198191][ T13] team0 (unregistering): Port device team_slave_1 removed [ 175.209876][ T13] team0 (unregistering): Port device team_slave_0 removed [ 175.269339][ T7711] hsr_slave_0: entered promiscuous mode [ 175.311948][ T7711] hsr_slave_1: entered promiscuous mode [ 175.322345][ T7711] debugfs: 'hsr0' already exists in 'hsr' [ 175.330627][ T7711] Cannot create hsr debugfs directory [ 176.080261][ T13] IPVS: stop unused estimator thread 0... [ 176.124872][ T7711] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 176.142647][ T7711] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 176.159795][ T9] usb 5-1: USB disconnect, device number 7 [ 176.193744][ T7711] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 176.249517][ T7711] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 176.575230][ T30] kauditd_printk_skb: 45 callbacks suppressed [ 176.575247][ T30] audit: type=1400 audit(1755467458.260:777): avc: denied { mount } for pid=8315 comm="syz.4.303" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 176.692069][ T30] audit: type=1400 audit(1755467458.391:778): avc: denied { bind } for pid=8315 comm="syz.4.303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 176.790443][ T8318] Bluetooth: MGMT ver 1.23 [ 176.815233][ T30] audit: type=1400 audit(1755467458.494:779): avc: denied { write } for pid=8315 comm="syz.4.303" path="socket:[14733]" dev="sockfs" ino=14733 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 177.112949][ T8319] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.120251][ T8319] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.180646][ T8319] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 177.215347][ T8319] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 177.824808][ T30] audit: type=1400 audit(1755467459.448:780): avc: denied { unmount } for pid=5843 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 177.860295][ T2259] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.869769][ T2259] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.911315][ T2259] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.915975][ T30] audit: type=1400 audit(1755467459.542:781): avc: denied { create } for pid=8363 comm="syz.4.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 178.113537][ T30] audit: type=1400 audit(1755467459.692:782): avc: denied { shutdown } for pid=8366 comm="syz.0.307" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 178.133769][ C0] vkms_vblank_simulate: vblank timer overrun [ 178.179366][ T30] audit: type=1400 audit(1755467459.692:783): avc: denied { read } for pid=8366 comm="syz.0.307" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 178.249979][ T2259] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.357456][ T30] audit: type=1400 audit(1755467459.944:784): avc: denied { write } for pid=8366 comm="syz.0.307" name="001" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 178.504892][ T7711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.516231][ T7711] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.524991][ T2259] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.532032][ T2259] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.908972][ T7711] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 178.919409][ T7711] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 178.950180][ T30] audit: type=1400 audit(1755467460.234:785): avc: denied { name_bind } for pid=8376 comm="syz.3.308" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 178.987047][ T2259] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.994120][ T2259] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.140007][ T30] audit: type=1400 audit(1755467460.234:786): avc: denied { node_bind } for pid=8376 comm="syz.3.308" saddr=224.0.0.1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 180.356658][ T7711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.421801][ T8386] team0: No ports can be present during mode change [ 180.440840][ T8386] netlink: 'syz.2.309': attribute type 10 has an invalid length. [ 180.551629][ T8411] netlink: 4 bytes leftover after parsing attributes in process `syz.2.309'. [ 180.686488][ T8419] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 180.783743][ T8419] net_ratelimit: 31 callbacks suppressed [ 180.783774][ T8419] netlink: ct family unspecified [ 180.794465][ T8419] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 180.900236][ T8386] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.907826][ T8386] team0: Port device bond0 added [ 180.950260][ T8411] team0 (unregistering): Port device team_slave_0 removed [ 180.993205][ T8411] team0 (unregistering): Port device team_slave_1 removed [ 181.352510][ T8411] team0 (unregistering): Port device bond0 removed [ 181.673397][ T7711] veth0_vlan: entered promiscuous mode [ 181.753659][ T7711] veth1_vlan: entered promiscuous mode [ 181.815789][ T7711] veth0_macvtap: entered promiscuous mode [ 181.832307][ T7711] veth1_macvtap: entered promiscuous mode [ 181.939976][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 181.939995][ T30] audit: type=1400 audit(1755467463.302:804): avc: denied { listen } for pid=8480 comm="syz.4.315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 182.746294][ T7711] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 182.844768][ T7711] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.855901][ T50] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.867799][ T78] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.885270][ T78] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.896089][ T78] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.970469][ T8485] ieee80211 phy20: Failed to add default virtual iface [ 183.131344][ T30] audit: type=1400 audit(1755467464.415:805): avc: denied { append } for pid=8528 comm="syz.0.317" name="ocfs2_control" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 183.165773][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.214926][ T43] usb 3-1: new low-speed USB device number 7 using dummy_hcd [ 183.223719][ T8535] process 'syz.0.317' launched './file0' with NULL argv: empty string added [ 183.237583][ T30] audit: type=1400 audit(1755467464.500:806): avc: denied { execute } for pid=8528 comm="syz.0.317" name="file0" dev="tmpfs" ino=390 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 183.291987][ T8535] netlink: 44 bytes leftover after parsing attributes in process `syz.0.317'. [ 183.300945][ T8535] netlink: 59 bytes leftover after parsing attributes in process `syz.0.317'. [ 183.309828][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.345940][ T30] audit: type=1400 audit(1755467464.518:807): avc: denied { execute_no_trans } for pid=8528 comm="syz.0.317" path="/67/file0" dev="tmpfs" ino=390 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 183.370697][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.379468][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.415487][ T43] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 183.431968][ T43] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 183.449296][ T30] audit: type=1400 audit(1755467464.668:808): avc: denied { mounton } for pid=7711 comm="syz-executor" path="/root/syzkaller.LChI76/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 183.450216][ T43] usb 3-1: config 0 has no interface number 0 [ 183.481958][ T43] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 183.495143][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.613134][ T43] usb 3-1: config 0 descriptor?? [ 183.631066][ T30] audit: type=1400 audit(1755467464.668:809): avc: denied { mounton } for pid=7711 comm="syz-executor" path="/root/syzkaller.LChI76/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 183.667786][ T30] audit: type=1400 audit(1755467464.668:810): avc: denied { mounton } for pid=7711 comm="syz-executor" path="/root/syzkaller.LChI76/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=16486 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 183.696406][ T30] audit: type=1400 audit(1755467464.705:811): avc: denied { mounton } for pid=7711 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 183.763181][ T30] audit: type=1400 audit(1755467464.705:812): avc: denied { mount } for pid=7711 comm="syz-executor" name="/" dev="gadgetfs" ino=7554 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 183.829945][ T43] iowarrior 3-1:0.1: no interrupt-in endpoint found [ 183.888127][ T30] audit: type=1400 audit(1755467464.705:813): avc: denied { mount } for pid=7711 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 185.939241][ T8618] netlink: 4 bytes leftover after parsing attributes in process `syz.3.324'. [ 186.270422][ T5919] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 186.304415][ T8618] loop8: detected capacity change from 0 to 7 [ 186.318357][ T8618] Dev loop8: unable to read RDB block 7 [ 186.340631][ T43] usb 3-1: USB disconnect, device number 7 [ 186.368097][ T8618] loop8: unable to read partition table [ 186.374172][ T8618] loop8: partition table beyond EOD, truncated [ 186.380462][ T8618] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 186.700385][ T5919] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 186.710744][ T5919] usb 6-1: config 0 has no interfaces? [ 186.828645][ T5919] usb 6-1: New USB device found, idVendor=0757, idProduct=0900, bcdDevice= 0.00 [ 187.145418][ T5919] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.172849][ T5919] usb 6-1: config 0 descriptor?? [ 187.630487][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 187.630502][ T30] audit: type=1400 audit(1755467468.634:828): avc: denied { mounton } for pid=8637 comm="syz.4.326" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 187.662838][ T8642] syz.4.326: attempt to access beyond end of device [ 187.662838][ T8642] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 189.150407][ T8658] /dev/nullb0: Can't open blockdev [ 189.580084][ T10] usb 6-1: USB disconnect, device number 2 [ 189.741093][ T8654] netlink: 'syz.0.337': attribute type 10 has an invalid length. [ 189.748910][ T8654] bridge_slave_1: left allmulticast mode [ 190.047940][ T8654] bridge_slave_1: left promiscuous mode [ 190.053620][ T8654] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.068769][ T8654] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 190.156198][ T8685] QAT: failed to copy from user. [ 190.632235][ T30] audit: type=1400 audit(1755467471.188:829): avc: denied { create } for pid=8684 comm="syz.0.333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 190.663020][ T30] audit: type=1400 audit(1755467471.393:830): avc: denied { create } for pid=8684 comm="syz.0.333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 190.763234][ T8694] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 190.769746][ T8694] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 190.794108][ T8700] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(12) [ 190.800708][ T8700] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 190.829797][ T8700] vhci_hcd vhci_hcd.0: Device attached [ 190.924282][ T8704] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 190.944802][ T8694] vhci_hcd vhci_hcd.0: Device attached [ 191.093131][ T10] usb 41-2: new low-speed USB device number 3 using vhci_hcd [ 191.410454][ T8708] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 191.417065][ T8708] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 191.516436][ T8708] vhci_hcd vhci_hcd.0: Device attached [ 191.542986][ T8715] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(13) [ 191.549588][ T8715] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 191.565833][ T8694] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(14) [ 191.572423][ T8694] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 191.671838][ T8694] vhci_hcd vhci_hcd.0: Device attached [ 191.677483][ T8715] vhci_hcd vhci_hcd.0: Device attached [ 191.722205][ T8708] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 191.739696][ T8694] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(18) [ 191.746275][ T8694] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 191.768354][ T5919] vhci_hcd: vhci_device speed not set [ 191.780794][ T8694] vhci_hcd vhci_hcd.0: Device attached [ 191.786666][ T8700] vhci_hcd vhci_hcd.0: pdev(4) rhport(5) sockfd(21) [ 191.793257][ T8700] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 191.824408][ T8708] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(17) [ 191.831046][ T8708] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 191.841435][ T5919] usb 33-1: new full-speed USB device number 2 using vhci_hcd [ 191.871042][ T8700] vhci_hcd vhci_hcd.0: Device attached [ 191.878169][ T8715] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(20) [ 191.884760][ T8715] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 191.913856][ T8708] vhci_hcd vhci_hcd.0: Device attached [ 191.979320][ T8715] vhci_hcd vhci_hcd.0: Device attached [ 191.990243][ T8694] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 191.999191][ T8708] vhci_hcd vhci_hcd.0: pdev(0) rhport(5) sockfd(19) [ 192.005768][ T8708] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 192.030782][ T8694] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 192.055306][ T8708] vhci_hcd vhci_hcd.0: Device attached [ 192.077359][ T8700] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 192.134674][ T8738] overlayfs: failed to resolve './file1': -2 [ 192.179611][ T8708] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 192.253120][ T8740] netlink: 'syz.5.339': attribute type 5 has an invalid length. [ 192.351045][ T8715] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 192.372656][ T8715] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 192.387179][ T8718] vhci_hcd: connection closed [ 192.387667][ T8723] vhci_hcd: connection closed [ 192.392639][ T8696] vhci_hcd: connection closed [ 192.402870][ T8721] vhci_hcd: connection closed [ 192.408769][ T13] vhci_hcd: stop threads [ 192.417661][ T13] vhci_hcd: release socket [ 192.584140][ T13] vhci_hcd: disconnect device [ 192.585117][ T8701] vhci_hcd: connection reset by peer [ 192.594638][ T13] vhci_hcd: stop threads [ 192.624480][ T13] vhci_hcd: release socket [ 192.628988][ T13] vhci_hcd: disconnect device [ 192.634918][ T13] vhci_hcd: stop threads [ 192.639149][ T13] vhci_hcd: release socket [ 192.644450][ T13] vhci_hcd: disconnect device [ 192.696777][ T5848] usb 3-1: new low-speed USB device number 8 using dummy_hcd [ 192.709453][ T30] audit: type=1400 audit(1755467473.386:831): avc: denied { read write } for pid=8736 comm="syz.5.339" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 192.732821][ T13] vhci_hcd: stop threads [ 192.737047][ T13] vhci_hcd: release socket [ 193.039318][ T13] vhci_hcd: disconnect device [ 193.044093][ T8710] vhci_hcd: connection reset by peer [ 193.050157][ T8725] vhci_hcd: connection closed [ 193.050324][ T8716] vhci_hcd: connection closed [ 193.050582][ T13] vhci_hcd: stop threads [ 193.064376][ T8732] vhci_hcd: connection closed [ 193.064556][ T8727] vhci_hcd: connection closed [ 193.064582][ T30] audit: type=1400 audit(1755467473.386:832): avc: denied { open } for pid=8736 comm="syz.5.339" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 193.103071][ T13] vhci_hcd: release socket [ 193.150657][ T5848] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 193.158757][ T13] vhci_hcd: disconnect device [ 193.167266][ T5848] usb 3-1: config 0 has no interface number 0 [ 193.173351][ T5848] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 193.184288][ T13] vhci_hcd: stop threads [ 193.188779][ T13] vhci_hcd: release socket [ 193.197885][ T13] vhci_hcd: disconnect device [ 193.203718][ T5848] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 193.213687][ T30] audit: type=1400 audit(1755467473.414:833): avc: denied { ioctl } for pid=8736 comm="syz.5.339" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 193.213715][ T13] vhci_hcd: stop threads [ 193.568147][ T5848] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.580246][ T5848] usb 3-1: config 0 descriptor?? [ 193.587135][ T5848] iowarrior 3-1:0.1: no interrupt-in endpoint found [ 193.596977][ T13] vhci_hcd: release socket [ 193.604435][ T13] vhci_hcd: disconnect device [ 193.622675][ T13] vhci_hcd: stop threads [ 193.645088][ T13] vhci_hcd: release socket [ 193.724316][ T13] vhci_hcd: disconnect device [ 193.729953][ T13] vhci_hcd: stop threads [ 193.736549][ T13] vhci_hcd: release socket [ 193.741016][ T13] vhci_hcd: disconnect device [ 193.756678][ T13] vhci_hcd: stop threads [ 193.768480][ T13] vhci_hcd: release socket [ 193.775004][ T13] vhci_hcd: disconnect device [ 193.881639][ T8787] ======================================================= [ 193.881639][ T8787] WARNING: The mand mount option has been deprecated and [ 193.881639][ T8787] and is ignored by this kernel. Remove the mand [ 193.881639][ T8787] option from the mount to silence this warning. [ 193.881639][ T8787] ======================================================= [ 193.950191][ T8787] ptrace attach of "./syz-executor exec"[5843] was attempted by "./syz-executor exec"[8787] [ 194.032213][ T30] audit: type=1400 audit(1755467474.471:834): avc: denied { remount } for pid=8776 comm="syz.4.343" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 194.267269][ T24] usb 3-1: USB disconnect, device number 8 [ 194.698390][ T30] audit: type=1800 audit(1755467475.060:835): pid=8782 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.342" name="bus" dev="overlay" ino=432 res=0 errno=0 [ 195.281765][ T8802] bpq0: left allmulticast mode [ 195.312510][ T30] audit: type=1400 audit(1755467475.799:836): avc: denied { setopt } for pid=8801 comm="syz.4.345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 195.957278][ T5848] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 196.201365][ T8822] sctp: [Deprecated]: syz.5.348 (pid 8822) Use of struct sctp_assoc_value in delayed_ack socket option. [ 196.201365][ T8822] Use struct sctp_sack_info instead [ 196.236492][ T5848] usb 5-1: config 0 has an invalid interface number: 52 but max is 0 [ 196.244683][ T5848] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 196.254871][ T5848] usb 5-1: config 0 has no interface number 0 [ 196.261382][ T5848] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 196.274732][ T5848] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 196.289191][ T5848] usb 5-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 196.425085][ T5848] usb 5-1: config 0 interface 52 has no altsetting 0 [ 196.435749][ T5848] usb 5-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 196.446162][ T5848] usb 5-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 196.463209][ T5848] usb 5-1: Product: syz [ 196.840996][ T5848] usb 5-1: Manufacturer: syz [ 196.846519][ T5848] usb 5-1: SerialNumber: syz [ 196.856990][ T5848] usb 5-1: config 0 descriptor?? [ 196.876768][ T10] vhci_hcd: vhci_device speed not set [ 197.095233][ T30] audit: type=1400 audit(1755467477.352:837): avc: denied { mount } for pid=8832 comm="syz.3.350" name="/" dev="ramfs" ino=16912 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 197.117732][ T5848] synaptics_usb 5-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 197.136243][ T5848] synaptics_usb 5-1:0.52: probe with driver synaptics_usb failed with error -5 [ 197.300140][ T30] audit: type=1400 audit(1755467477.576:838): avc: denied { write } for pid=8832 comm="syz.3.350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 197.392279][ T5919] vhci_hcd: vhci_device speed not set [ 197.682586][ T30] audit: type=1400 audit(1755467477.670:839): avc: denied { map } for pid=8832 comm="syz.3.350" path="socket:[16905]" dev="sockfs" ino=16905 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 197.708438][ T30] audit: type=1400 audit(1755467477.698:840): avc: denied { bind } for pid=8865 comm="syz.5.351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 197.734220][ T5926] usb 5-1: USB disconnect, device number 8 [ 197.771020][ T30] audit: type=1400 audit(1755467477.698:841): avc: denied { node_bind } for pid=8865 comm="syz.5.351" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 197.894123][ T8886] netlink: 'syz.5.353': attribute type 10 has an invalid length. [ 197.907218][ T8886] batman_adv: batadv0: Adding interface: team0 [ 197.913454][ T8886] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.033027][ T8886] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 198.437019][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 198.437035][ T30] audit: type=1400 audit(1755467478.736:844): avc: denied { ioctl } for pid=8874 comm="syz.5.353" path="socket:[16922]" dev="sockfs" ino=16922 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 199.035877][ T8917] trusted_key: syz.3.355 sent an empty control message without MSG_MORE. [ 199.745628][ T8925] pim6reg: entered allmulticast mode [ 199.895515][ T8942] bpq0: entered allmulticast mode [ 200.009133][ T5919] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 200.549459][ T30] audit: type=1400 audit(1755467480.055:845): avc: denied { create } for pid=8938 comm="syz.0.360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 200.569444][ C1] vkms_vblank_simulate: vblank timer overrun [ 200.926141][ T8950] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 200.928400][ T5919] usb 3-1: Using ep0 maxpacket: 32 [ 200.979044][ T8950] netlink: 'syz.4.361': attribute type 10 has an invalid length. [ 200.988257][ T8950] bridge_slave_1: left allmulticast mode [ 200.993980][ T8950] bridge_slave_1: left promiscuous mode [ 201.000345][ T8950] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.302314][ T30] audit: type=1400 audit(1755467480.102:846): avc: denied { create } for pid=8938 comm="syz.0.360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 201.624884][ T8950] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 201.656200][ T5919] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 201.671543][ T30] audit: type=1400 audit(1755467480.102:847): avc: denied { ioctl } for pid=8938 comm="syz.0.360" path="socket:[17442]" dev="sockfs" ino=17442 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 201.696029][ C1] vkms_vblank_simulate: vblank timer overrun [ 201.968102][ T5919] usb 3-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=d4.09 [ 201.982108][ T5919] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.990131][ T5919] usb 3-1: Product: syz [ 202.001124][ T5919] usb 3-1: Manufacturer: syz [ 202.005697][ T5919] usb 3-1: SerialNumber: syz [ 202.040899][ T5919] usb 3-1: config 0 descriptor?? [ 202.079224][ T5919] peak_usb 3-1:0.0 can0: sending cmd f=0x6 n=0x1 failure: -22 [ 202.097159][ T30] audit: type=1400 audit(1755467480.111:848): avc: denied { connect } for pid=8938 comm="syz.0.360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 202.374592][ T5919] peak_usb 3-1:0.0: unable to read PCAN-USB serial number (err -22) [ 202.386218][ T30] audit: type=1400 audit(1755467480.158:849): avc: denied { write } for pid=8938 comm="syz.0.360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 202.406093][ C1] vkms_vblank_simulate: vblank timer overrun [ 202.469943][ T5919] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -22 [ 202.743311][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 202.749613][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 203.393111][ T8922] pim6reg: left allmulticast mode [ 203.499789][ T9024] No buffer was provided with the request [ 204.163327][ T30] audit: type=1400 audit(1755467484.096:850): avc: denied { getopt } for pid=9058 comm="syz.4.369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 204.361731][ T9066] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.369159][ T9066] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.427328][ T5919] libceph: connect (1)[c::]:6789 error -101 [ 204.478384][ T5848] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 204.514686][ T9066] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 204.522233][ T5919] libceph: mon0 (1)[c::]:6789 connect error [ 204.522391][ T9055] ceph: No mds server is up or the cluster is laggy [ 204.552045][ T9066] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 204.579436][ T5919] usb 3-1: USB disconnect, device number 9 [ 204.642026][ T5848] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 204.651719][ T5848] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.660664][ T5848] usb 5-1: Product: syz [ 204.670888][ T5848] usb 5-1: Manufacturer: syz [ 204.683554][ T5848] usb 5-1: SerialNumber: syz [ 204.699658][ T5848] usb 5-1: config 0 descriptor?? [ 204.707586][ T5848] ch341 5-1:0.0: ch341-uart converter detected [ 204.771074][ T13] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.079247][ T8960] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 205.091444][ T13] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.129841][ T13] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.200531][ T13] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.246401][ T9084] netlink: 12 bytes leftover after parsing attributes in process `syz.3.370'. [ 206.388174][ T30] audit: type=1400 audit(1755467486.154:851): avc: denied { ioctl } for pid=9109 comm="syz.3.374" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 206.628210][ T30] audit: type=1400 audit(1755467486.407:852): avc: denied { write } for pid=9117 comm="syz.3.375" name="sg0" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 206.669492][ T30] audit: type=1400 audit(1755467486.407:853): avc: denied { open } for pid=9117 comm="syz.3.375" path="/dev/sg0" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 206.737093][ T5848] ch341-uart ttyUSB0: break control not supported, using simulated break [ 206.753169][ T5848] usb 5-1: ch341-uart converter now attached to ttyUSB0 [ 206.757308][ T30] audit: type=1400 audit(1755467486.444:854): avc: denied { ioctl } for pid=9117 comm="syz.3.375" path="/dev/sg0" dev="devtmpfs" ino=717 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 206.931033][ T9131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.017622][ T9134] netlink: 8 bytes leftover after parsing attributes in process `syz.3.377'. [ 207.261998][ T30] audit: type=1400 audit(1755467486.500:855): avc: denied { shutdown } for pid=9058 comm="syz.4.369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 207.290498][ T30] audit: type=1400 audit(1755467486.510:856): avc: denied { listen } for pid=9058 comm="syz.4.369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 207.311215][ T9131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.427136][ T30] audit: type=1400 audit(1755467486.510:857): avc: denied { accept } for pid=9058 comm="syz.4.369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 207.749512][ T30] audit: type=1400 audit(1755467487.436:858): avc: denied { unmount } for pid=5841 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 208.066859][ T30] audit: type=1400 audit(1755467487.744:859): avc: denied { create } for pid=9144 comm="syz.3.378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 209.117450][ T10] usb 5-1: USB disconnect, device number 9 [ 209.163462][ T10] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 209.208375][ T10] ch341 5-1:0.0: device disconnected [ 209.732235][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 209.732251][ T30] audit: type=1400 audit(1755467489.288:863): avc: denied { write } for pid=9182 comm="syz.0.383" name="binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 211.362589][ T30] audit: type=1400 audit(1755467489.596:864): avc: denied { write } for pid=9166 comm="syz.3.382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 211.428271][ T9188] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 211.436671][ T9188] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 211.530245][ T3622] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.547408][ T3622] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.580450][ T3622] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.595012][ T50] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.608331][ T30] audit: type=1400 audit(1755467489.606:865): avc: denied { nlmsg_read } for pid=9166 comm="syz.3.382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 211.791641][ T9210] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3940219855 (504348141440 ns) > initial count (172531652224 ns). Using initial count to start timer. [ 211.928875][ T30] audit: type=1400 audit(1755467489.905:866): avc: denied { read write } for pid=9154 comm="syz.5.379" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 212.060824][ T30] audit: type=1400 audit(1755467489.905:867): avc: denied { open } for pid=9154 comm="syz.5.379" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 212.084851][ T30] audit: type=1400 audit(1755467489.914:868): avc: denied { ioctl } for pid=9154 comm="syz.5.379" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 212.117462][ T30] audit: type=1400 audit(1755467489.914:869): avc: denied { create } for pid=9154 comm="syz.5.379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 212.248467][ T9210] netlink: 'syz.0.385': attribute type 39 has an invalid length. [ 212.312257][ T30] audit: type=1400 audit(1755467489.914:870): avc: denied { write } for pid=9154 comm="syz.5.379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 212.581100][ T30] audit: type=1400 audit(1755467489.961:871): avc: denied { read } for pid=9154 comm="syz.5.379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 212.841153][ T30] audit: type=1400 audit(1755467492.215:872): avc: denied { name_connect } for pid=9229 comm="syz.5.389" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 213.343249][ T9238] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 213.520814][ T9254] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 213.520814][ T9254] The task syz.0.390 (9254) triggered the difference, watch for misbehavior. [ 214.820834][ T10] libceph: connect (1)[c::]:6789 error -101 [ 214.826843][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 214.870055][ T9276] bridge0: port 3(dummy0) entered disabled state [ 214.876422][ T9276] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.883559][ T9276] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.904046][ T9276] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.912493][ T9276] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 215.012556][ T3622] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.085121][ T3622] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.099729][ T3622] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.108954][ T10] libceph: connect (1)[c::]:6789 error -101 [ 215.114950][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 215.190968][ T9288] netlink: 24 bytes leftover after parsing attributes in process `syz.2.399'. [ 215.246953][ T3622] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.660334][ T10] libceph: connect (1)[c::]:6789 error -101 [ 215.666294][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 215.700838][ T9269] ceph: No mds server is up or the cluster is laggy [ 215.844900][ T9329] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3940219855 (504348141440 ns) > initial count (172531652224 ns). Using initial count to start timer. [ 216.300629][ T9329] netlink: 'syz.4.401': attribute type 39 has an invalid length. [ 216.631122][ T9377] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9377 comm=syz.0.402 [ 216.821055][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 216.821072][ T30] audit: type=1400 audit(1755467495.779:876): avc: denied { getopt } for pid=9368 comm="syz.5.403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 216.905221][ T9384] fuse: Unknown parameter '0xffffffffffffffff017777777777777777777770000000000000000000000000000000000000000' [ 217.209390][ T30] audit: type=1326 audit(1755467496.200:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9383 comm="syz.2.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5db338ebe9 code=0x7ffc0000 [ 217.440446][ T30] audit: type=1326 audit(1755467496.200:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9383 comm="syz.2.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f5db338ebe9 code=0x7ffc0000 [ 217.585329][ T30] audit: type=1326 audit(1755467496.200:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9383 comm="syz.2.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5db338ebe9 code=0x7ffc0000 [ 217.706925][ T30] audit: type=1326 audit(1755467496.200:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9383 comm="syz.2.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f5db338ebe9 code=0x7ffc0000 [ 218.029722][ T30] audit: type=1326 audit(1755467496.210:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9383 comm="syz.2.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5db338ebe9 code=0x7ffc0000 [ 218.053174][ T30] audit: type=1326 audit(1755467496.219:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9383 comm="syz.2.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f5db338ebe9 code=0x7ffc0000 [ 218.076623][ T30] audit: type=1326 audit(1755467496.219:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9383 comm="syz.2.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5db338ebe9 code=0x7ffc0000 [ 218.106480][ T30] audit: type=1326 audit(1755467496.219:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9383 comm="syz.2.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f5db338ebe9 code=0x7ffc0000 [ 218.135983][ T30] audit: type=1326 audit(1755467496.219:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9383 comm="syz.2.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5db338ebe9 code=0x7ffc0000 [ 220.029149][ T9480] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.353998][ T9503] netlink: 8 bytes leftover after parsing attributes in process `syz.5.410'. [ 220.381702][ T9480] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 221.831010][ T9547] ÿ: renamed from bond_slave_0 [ 222.734653][ T30] kauditd_printk_skb: 49 callbacks suppressed [ 222.734667][ T30] audit: type=1326 audit(1755467501.467:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9501 comm="syz.0.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23fe38ebe9 code=0x7ffc0000 [ 222.764066][ T30] audit: type=1326 audit(1755467501.467:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9501 comm="syz.0.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23fe38ebe9 code=0x7ffc0000 [ 223.259458][ T30] audit: type=1326 audit(1755467501.944:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9501 comm="syz.0.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f23fe38ebe9 code=0x7ffc0000 [ 223.628939][ T30] audit: type=1326 audit(1755467501.944:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9501 comm="syz.0.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23fe38ebe9 code=0x7ffc0000 [ 223.652478][ T30] audit: type=1326 audit(1755467501.944:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9501 comm="syz.0.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f23fe38ebe9 code=0x7ffc0000 [ 223.675761][ T30] audit: type=1326 audit(1755467501.953:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9501 comm="syz.0.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23fe38ebe9 code=0x7ffc0000 [ 224.139273][ T9585] netlink: 24 bytes leftover after parsing attributes in process `syz.5.418'. [ 224.197815][ T9585] netlink: 24 bytes leftover after parsing attributes in process `syz.5.418'. [ 224.286884][ T30] audit: type=1326 audit(1755467502.898:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9501 comm="syz.0.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f23fe38ebe9 code=0x7ffc0000 [ 224.424173][ T30] audit: type=1326 audit(1755467502.898:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9501 comm="syz.0.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23fe38ebe9 code=0x7ffc0000 [ 224.449053][ T30] audit: type=1326 audit(1755467502.898:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9501 comm="syz.0.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23fe38ebe9 code=0x7ffc0000 [ 225.058896][ T9609] netlink: 5 bytes leftover after parsing attributes in process `syz.0.425'. [ 225.068118][ T9609] 0ªî{X¹¦: renamed from gretap0 [ 225.084363][ T9609] 0ªî{X¹¦: entered allmulticast mode [ 225.110137][ T9609] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 226.090165][ T9622] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 227.028759][ T9637] netlink: 'syz.3.431': attribute type 21 has an invalid length. [ 227.036591][ T9637] netlink: 156 bytes leftover after parsing attributes in process `syz.3.431'. [ 227.629050][ T30] audit: type=1326 audit(1755467506.041:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9639 comm="syz.4.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2345b8ebe9 code=0x7ffc0000 [ 228.410522][ T5169] Bluetooth: Frame is too long (len 18, expected len 4) [ 228.607761][ T5919] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 228.880646][ T5919] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 228.908002][ T5919] usb 4-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 228.944763][ T9675] 9pnet_fd: Insufficient options for proto=fd [ 228.961832][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 228.961844][ T30] audit: type=1400 audit(1755467507.275:959): avc: denied { mounton } for pid=9668 comm="syz.2.437" path="/94/file0" dev="tmpfs" ino=512 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 228.969754][ T5919] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 229.018907][ T5919] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.431690][ T30] audit: type=1400 audit(1755467507.818:960): avc: denied { sqpoll } for pid=9664 comm="syz.0.436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 230.456031][ T30] audit: type=1326 audit(1755467507.846:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9664 comm="syz.0.436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23fe38ebe9 code=0x7ffc0000 [ 230.458824][ T5919] usb 4-1: USB disconnect, device number 5 [ 230.479233][ C1] vkms_vblank_simulate: vblank timer overrun [ 230.479360][ T30] audit: type=1326 audit(1755467507.855:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9664 comm="syz.0.436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f23fe38ebe9 code=0x7ffc0000 [ 230.479392][ T30] audit: type=1326 audit(1755467508.127:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9664 comm="syz.0.436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23fe38ebe9 code=0x7ffc0000 [ 230.479422][ T30] audit: type=1326 audit(1755467508.127:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9664 comm="syz.0.436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23fe38ebe9 code=0x7ffc0000 [ 231.144636][ T30] audit: type=1400 audit(1755467509.333:965): avc: denied { create } for pid=9705 comm="syz.0.440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 231.258595][ T9707] netlink: 28 bytes leftover after parsing attributes in process `syz.0.440'. [ 231.258632][ T9707] netlink: 28 bytes leftover after parsing attributes in process `syz.0.440'. [ 231.259831][ T9707] netlink: 28 bytes leftover after parsing attributes in process `syz.0.440'. [ 231.259859][ T9707] netlink: 28 bytes leftover after parsing attributes in process `syz.0.440'. [ 231.505874][ T30] audit: type=1400 audit(1755467509.333:966): avc: denied { bind } for pid=9705 comm="syz.0.440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 231.505910][ T30] audit: type=1400 audit(1755467509.333:967): avc: denied { write } for pid=9705 comm="syz.0.440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 232.053755][ T30] audit: type=1400 audit(1755467510.185:968): avc: denied { unmount } for pid=5843 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 233.303988][ T9747] overlayfs: failed to resolve './file1': -2 [ 234.439871][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 234.439882][ T30] audit: type=1400 audit(1755467512.308:972): avc: denied { read } for pid=9765 comm="syz.3.448" name="sg0" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 234.578039][ T30] audit: type=1400 audit(1755467512.345:973): avc: denied { setopt } for pid=9765 comm="syz.3.448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 234.732112][ T24] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 235.289673][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 235.307511][ T24] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 235.528134][ T24] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 235.604884][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.615582][ T24] usb 3-1: config 0 descriptor?? [ 235.803390][ T24] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 235.810009][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 236.016675][ T24] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 236.026454][ T24] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 236.036389][ T24] usb 3-1: media controller created [ 236.045812][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 236.058951][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 236.067853][ T24] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 236.077636][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input9 [ 236.102788][ T9772] dibusb: i2c wr: len=61 is too big! [ 236.102788][ T9772] [ 236.102821][ T24] dvb-usb: schedule remote query interval to 150 msecs. [ 236.120333][ T24] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 236.130209][ T9772] netlink: 'syz.2.449': attribute type 7 has an invalid length. [ 236.143797][ T30] audit: type=1400 audit(1755467513.982:974): avc: denied { read } for pid=5203 comm="acpid" name="event4" dev="devtmpfs" ino=3040 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 236.190656][ T9772] netlink: 'syz.2.449': attribute type 8 has an invalid length. [ 236.200388][ T30] audit: type=1400 audit(1755467513.982:975): avc: denied { open } for pid=5203 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3040 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 236.225900][ T30] audit: type=1400 audit(1755467513.982:976): avc: denied { ioctl } for pid=5203 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3040 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 236.282346][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 236.288178][ T24] dvb-usb: error while querying for an remote control event. [ 236.774981][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 236.801973][ T30] audit: type=1400 audit(1755467514.572:977): avc: denied { setopt } for pid=9828 comm="syz.0.455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 236.837995][ T24] dvb-usb: error while querying for an remote control event. [ 237.052078][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 237.059341][ T24] dvb-usb: error while querying for an remote control event. [ 237.089698][ T30] audit: type=1400 audit(1755467514.787:978): avc: denied { ioctl } for pid=9831 comm="syz.4.454" path="socket:[19011]" dev="sockfs" ino=19011 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 237.177812][ T9843] mkiss: ax0: crc mode is auto. [ 237.186393][ T30] audit: type=1400 audit(1755467514.983:979): avc: denied { bind } for pid=9833 comm="syz.3.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 237.187160][ T30] audit: type=1400 audit(1755467514.983:980): avc: denied { listen } for pid=9833 comm="syz.3.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 237.187800][ T30] audit: type=1400 audit(1755467514.983:981): avc: denied { write } for pid=9833 comm="syz.3.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 237.319273][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 237.319290][ T24] dvb-usb: error while querying for an remote control event. [ 237.490831][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 237.763123][ T5919] usb 3-1: USB disconnect, device number 10 [ 237.848907][ T24] dvb-usb: error while querying for an remote control event. [ 237.908726][ T5919] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 238.260366][ T5919] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 238.527295][ T5919] usb 3-1: Using ep0 maxpacket: 8 [ 238.533578][ T5919] usb 3-1: config 0 has an invalid interface number: 143 but max is 0 [ 238.617008][ T5919] usb 3-1: config 0 has no interface number 0 [ 238.720248][ T5919] usb 3-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 238.729419][ T5919] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.747533][ T5919] usb 3-1: config 0 descriptor?? [ 238.869953][ T5919] viperboard 3-1:0.143: version 0.00 found at bus 003 address 011 [ 238.898673][ T5919] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 238.932003][ T5919] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 239.005674][ T9860] comedi comedi0: c6xdigio: I/O port conflict (0xb011,3) [ 239.392503][ T5919] usb 3-1: USB disconnect, device number 11 [ 239.414603][ T5857] Bluetooth: hci2: command 0x0405 tx timeout [ 240.654888][T10000] netlink: 28 bytes leftover after parsing attributes in process `syz.3.464'. [ 240.663934][T10000] netlink: 28 bytes leftover after parsing attributes in process `syz.3.464'. [ 240.676877][T10000] netlink: 28 bytes leftover after parsing attributes in process `syz.3.464'. [ 240.685901][T10000] netlink: 28 bytes leftover after parsing attributes in process `syz.3.464'. [ 241.327968][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 241.327979][ T30] audit: type=1400 audit(1755467518.856:986): avc: denied { ioctl } for pid=10006 comm="syz.3.468" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 241.445340][ T30] audit: type=1400 audit(1755467518.940:987): avc: denied { ioctl } for pid=10014 comm="syz.5.470" path="socket:[19117]" dev="sockfs" ino=19117 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 241.603898][ T30] audit: type=1400 audit(1755467518.959:988): avc: denied { block_suspend } for pid=10014 comm="syz.5.470" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 241.809306][ T30] audit: type=1400 audit(1755467518.987:989): avc: denied { accept } for pid=10014 comm="syz.5.470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 241.909807][T10034] netlink: 24 bytes leftover after parsing attributes in process `syz.0.469'. [ 241.931831][T10034] netlink: 24 bytes leftover after parsing attributes in process `syz.0.469'. [ 243.936863][ T30] audit: type=1400 audit(1755467521.288:990): avc: denied { read } for pid=10096 comm="syz.5.488" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 244.029383][ T30] audit: type=1400 audit(1755467521.288:991): avc: denied { open } for pid=10096 comm="syz.5.488" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 244.268128][ T5919] usb 4-1: new low-speed USB device number 6 using dummy_hcd [ 244.429613][ T5919] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 244.901124][ T5919] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 244.920268][ T5919] usb 4-1: config 0 has no interface number 0 [ 244.926831][ T5919] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 244.936194][ T5919] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.947836][ T5919] usb 4-1: config 0 descriptor?? [ 244.955109][ T5919] iowarrior 4-1:0.1: no interrupt-in endpoint found [ 245.071283][ T30] audit: type=1400 audit(1755467522.354:992): avc: denied { read } for pid=10096 comm="syz.5.488" name="usbmon4" dev="devtmpfs" ino=733 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 245.127860][ T30] audit: type=1400 audit(1755467522.354:993): avc: denied { open } for pid=10096 comm="syz.5.488" path="/dev/usbmon4" dev="devtmpfs" ino=733 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 245.851157][ T30] audit: type=1326 audit(1755467523.065:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10130 comm="syz.4.481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2345b8ebe9 code=0x7ffc0000 [ 245.960321][ T30] audit: type=1326 audit(1755467523.065:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10130 comm="syz.4.481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f2345b8ebe9 code=0x7ffc0000 [ 245.987362][T10140] netlink: 8 bytes leftover after parsing attributes in process `syz.5.482'. [ 246.178236][T10126] netlink: 24 bytes leftover after parsing attributes in process `syz.0.479'. [ 247.120516][ T30] kauditd_printk_skb: 51 callbacks suppressed [ 247.120531][ T30] audit: type=1400 audit(1755467524.272:1047): avc: denied { write } for pid=10157 comm="syz.4.485" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 247.396661][ T9] usb 4-1: USB disconnect, device number 6 [ 247.520112][ T30] audit: type=1400 audit(1755467524.272:1048): avc: denied { open } for pid=10157 comm="syz.4.485" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 247.748371][ T30] audit: type=1400 audit(1755467524.310:1049): avc: denied { read append } for pid=10157 comm="syz.4.485" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 247.868189][ T30] audit: type=1800 audit(1755467524.310:1050): pid=10159 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.485" name="/" dev="9p" ino=2 res=0 errno=0 [ 248.293811][T10195] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 248.302524][T10195] bridge1: entered allmulticast mode [ 248.389984][ T30] audit: type=1400 audit(1755467525.395:1051): avc: denied { ioctl } for pid=10189 comm="syz.0.489" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 248.415885][ T30] audit: type=1400 audit(1755467525.460:1052): avc: denied { unmount } for pid=5843 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 248.567454][T10204] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 249.558244][T10204] syz.2.490 (10204): drop_caches: 2 [ 249.770085][T10235] trusted_key: encrypted_key: insufficient parameters specified [ 249.862635][T10241] trusted_key: encrypted_key: insufficient parameters specified [ 250.159244][ T30] audit: type=1400 audit(1755467527.079:1053): avc: denied { connect } for pid=10189 comm="syz.0.489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 250.704598][ T30] audit: type=1400 audit(1755467527.079:1054): avc: denied { write } for pid=10189 comm="syz.0.489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 250.739404][T10254] netlink: 96 bytes leftover after parsing attributes in process `syz.3.494'. [ 251.307249][ T30] audit: type=1400 audit(1755467528.192:1055): avc: denied { nlmsg_write } for pid=10257 comm="syz.0.497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 252.168108][ T30] audit: type=1326 audit(1755467528.996:1056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10266 comm="syz.5.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c45b8ebe9 code=0x7ffc0000 [ 252.681133][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 252.687711][ T30] audit: type=1326 audit(1755467529.473:1080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10266 comm="syz.5.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c45b8ebe9 code=0x7ffc0000 [ 252.741926][T10295] overlayfs: failed to resolve './file1': -2 [ 252.749261][T10290] syz.0.504: attempt to access beyond end of device [ 252.749261][T10290] nbd0: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 252.806995][ T30] audit: type=1326 audit(1755467529.473:1081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10266 comm="syz.5.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c45b8ebe9 code=0x7ffc0000 [ 252.864782][T10290] gfs2: error -5 reading superblock [ 253.022669][ T30] audit: type=1326 audit(1755467529.726:1082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10266 comm="syz.5.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f8c45b8ebe9 code=0x7ffc0000 [ 253.051759][ T30] audit: type=1326 audit(1755467529.819:1083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10266 comm="syz.5.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c45b8ebe9 code=0x7ffc0000 [ 253.075139][ C1] vkms_vblank_simulate: vblank timer overrun [ 253.084166][ T30] audit: type=1326 audit(1755467529.819:1084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10266 comm="syz.5.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c45b8ebe9 code=0x7ffc0000 [ 253.151465][T10310] syz.2.506: attempt to access beyond end of device [ 253.151465][T10310] nbd2: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 253.164621][ T5919] usb 4-1: new low-speed USB device number 7 using dummy_hcd [ 253.277777][T10310] gfs2: error -5 reading superblock [ 253.433189][ T30] audit: type=1400 audit(1755467530.072:1085): avc: denied { append } for pid=10319 comm="syz.0.508" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 253.456700][ T30] audit: type=1400 audit(1755467530.072:1086): avc: denied { map } for pid=10319 comm="syz.0.508" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 253.483723][T10321] sctp: [Deprecated]: syz.4.505 (pid 10321) Use of struct sctp_assoc_value in delayed_ack socket option. [ 253.483723][T10321] Use struct sctp_sack_info instead [ 253.492905][ T30] audit: type=1400 audit(1755467530.072:1087): avc: denied { write execute } for pid=10319 comm="syz.0.508" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 253.524556][ T5919] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 253.546999][ T5919] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 253.605730][ T5919] usb 4-1: config 0 has no interface number 0 [ 253.665877][ T30] audit: type=1400 audit(1755467530.380:1088): avc: denied { ioctl } for pid=10319 comm="syz.0.508" path="socket:[20372]" dev="sockfs" ino=20372 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 253.694776][ T5919] usb 4-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 253.903273][ T5919] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 254.119724][ T5919] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.185671][ T5919] usb 4-1: config 0 descriptor?? [ 254.211015][ T5919] iowarrior 4-1:0.1: no interrupt-in endpoint found [ 254.466796][ T5919] usb 4-1: USB disconnect, device number 7 [ 254.490101][T10350] trusted_key: encrypted_key: insufficient parameters specified [ 255.619680][T10313] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 255.625861][ T5857] Bluetooth: hci2: command 0x0405 tx timeout [ 256.268814][T10313] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 256.275505][T10313] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 256.653939][T10390] Invalid ELF header magic: != ELF [ 256.667603][ T30] audit: type=1400 audit(1755467533.196:1089): avc: denied { module_load } for pid=10373 comm="syz.4.515" path="/sys/kernel/notes" dev="sysfs" ino=1406 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 256.909779][T10399] netlink: 20 bytes leftover after parsing attributes in process `syz.5.514'. [ 256.923103][T10399] netlink: 4 bytes leftover after parsing attributes in process `syz.5.514'. [ 256.970626][T10400] trusted_key: encrypted_key: insufficient parameters specified [ 257.803273][ T5169] Bluetooth: hci2: command 0x0405 tx timeout [ 258.283580][ T30] audit: type=1326 audit(1755467534.580:1090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10410 comm="syz.4.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2345b8ebe9 code=0x7ffc0000 [ 258.857504][ T30] audit: type=1326 audit(1755467534.580:1091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10410 comm="syz.4.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2345b8ebe9 code=0x7ffc0000 [ 259.209661][ T30] audit: type=1326 audit(1755467535.535:1092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10437 comm="syz.0.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23fe38ebe9 code=0x7ffc0000 [ 259.314762][ T30] audit: type=1326 audit(1755467535.535:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10437 comm="syz.0.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23fe38ebe9 code=0x7ffc0000 [ 259.867208][ T30] audit: type=1326 audit(1755467535.544:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10437 comm="syz.0.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f23fe38ebe9 code=0x7ffc0000 [ 259.989685][ T30] audit: type=1326 audit(1755467535.544:1095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10437 comm="syz.0.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23fe38ebe9 code=0x7ffc0000 [ 260.092468][ T5169] Bluetooth: hci2: command 0x0405 tx timeout [ 260.098511][ T30] audit: type=1326 audit(1755467535.544:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10437 comm="syz.0.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23fe38ebe9 code=0x7ffc0000 [ 260.122687][ T30] audit: type=1326 audit(1755467535.544:1097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10437 comm="syz.0.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f23fe38ebe9 code=0x7ffc0000 [ 260.147126][ T30] audit: type=1326 audit(1755467535.544:1098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10437 comm="syz.0.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23fe38ebe9 code=0x7ffc0000 [ 260.175759][ T30] audit: type=1326 audit(1755467535.544:1099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10437 comm="syz.0.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f23fe38ebe9 code=0x7ffc0000 [ 260.817207][ T24] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 261.207569][ T24] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD6, changing to 0x86 [ 261.224488][T10491] netlink: 4 bytes leftover after parsing attributes in process `syz.2.532'. [ 261.243550][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 261.270453][ T24] usb 5-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 261.304881][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.329301][ T24] usb 5-1: Product: syz [ 261.356823][ T24] usb 5-1: Manufacturer: syz [ 261.400448][ T24] usb 5-1: SerialNumber: syz [ 261.436945][ T24] usb 5-1: config 0 descriptor?? [ 261.995099][ T24] powermate 5-1:0.0: probe with driver powermate failed with error -5 [ 262.342563][ T5169] Bluetooth: hci2: command 0x0405 tx timeout [ 262.489866][ T24] usb 5-1: USB disconnect, device number 10 [ 263.526727][T10556] sctp: [Deprecated]: syz.2.537 (pid 10556) Use of struct sctp_assoc_value in delayed_ack socket option. [ 263.526727][T10556] Use struct sctp_sack_info instead [ 263.581329][T10549] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 263.928166][ T10] usb 5-1: new low-speed USB device number 11 using dummy_hcd [ 264.089955][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 264.100231][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 200, setting to 8 [ 264.111552][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 264.200242][ T10] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 264.224755][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.364087][ T10] usb 5-1: config 0 descriptor?? [ 264.373302][T10562] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 264.390890][T10576] trusted_key: encrypted_key: insufficient parameters specified [ 264.619633][ T10] usb 5-1: USB disconnect, device number 11 [ 265.441809][T10602] netlink: 8 bytes leftover after parsing attributes in process `syz.0.545'. [ 265.798771][ T5169] Bluetooth: hci2: command 0x0405 tx timeout [ 265.854828][T10610] netlink: 24 bytes leftover after parsing attributes in process `syz.3.546'. [ 267.053626][ T10] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 267.576058][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 267.583116][ T10] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 267.598748][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.608644][ T10] usb 3-1: config 0 descriptor?? [ 267.622648][ T10] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 268.068221][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 268.068236][ T30] audit: type=1400 audit(1755467543.872:1142): avc: denied { getopt } for pid=10657 comm="syz.5.553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 268.256939][ T10] gspca_vc032x: reg_w err -71 [ 268.322941][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 268.329265][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 268.354627][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 268.365620][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 268.377931][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 268.383416][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 268.389039][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 268.394531][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 268.400394][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 268.405710][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 268.412166][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 268.417922][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 268.424904][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 268.431148][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 268.436479][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 268.441811][ T24] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 268.449554][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 268.455781][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 268.461908][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 268.468016][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 268.473823][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 268.479149][ T10] gspca_vc032x: Unknown sensor... [ 268.484764][ T10] vc032x 3-1:0.0: probe with driver vc032x failed with error -22 [ 268.496487][ T10] usb 3-1: USB disconnect, device number 12 [ 268.553620][T10673] trusted_key: encrypted_key: insufficient parameters specified [ 268.804146][ T24] usb 6-1: config 0 has an invalid interface number: 69 but max is 0 [ 268.819702][ T24] usb 6-1: config 0 has no interface number 0 [ 268.827410][ T24] usb 6-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 268.837734][ T24] usb 6-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 268.882974][ T24] usb 6-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 268.892033][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.911418][ T24] usb 6-1: Product: syz [ 268.915650][ T24] usb 6-1: Manufacturer: syz [ 268.922123][ T24] usb 6-1: SerialNumber: syz [ 268.938752][ T24] usb 6-1: config 0 descriptor?? [ 268.986266][T10661] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 269.039244][ T24] cyberjack 6-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 269.376220][ C1] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22 [ 269.392134][ T24] usb 6-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 269.433450][T10711] Scaler: ================= START STATUS ================= [ 269.444629][T10711] Scaler: ================== END STATUS ================== [ 269.504524][ T5919] usb 6-1: USB disconnect, device number 3 [ 269.516332][ T5919] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 269.611672][ T30] audit: type=1400 audit(1755467545.312:1143): avc: denied { bind } for pid=10724 comm="syz.4.563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 269.634967][ T5919] cyberjack 6-1:0.69: device disconnected [ 269.990436][ T10] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 270.160769][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 270.167031][ T10] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 270.210336][ T10] usb 5-1: config 179 has no interface number 0 [ 270.771844][ T10] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 270.796017][T10767] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10767 comm=syz.3.567 [ 270.812718][T10767] fuse: Unknown parameter '0xffffffffffffffff017777777777777777777770000000000000000000000000000000000000000' [ 270.880666][ T10] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 271.146521][ T10] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 271.159141][ T10] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 271.171940][ T10] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 271.234322][ T10] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 271.654512][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.682716][T10737] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 272.126861][ T30] audit: type=1400 audit(1755467547.651:1144): avc: denied { getopt } for pid=10805 comm="syz.5.574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 272.259639][ T24] usb 5-1: USB disconnect, device number 12 [ 272.259752][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 272.274023][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 272.363078][ T10] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 272.547874][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 272.571217][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 272.591329][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 272.809679][ T30] audit: type=1400 audit(1755467548.230:1145): avc: denied { mount } for pid=10831 comm="syz.3.580" name="/" dev="configfs" ino=126 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 272.838200][T10836] block device autoloading is deprecated and will be removed. [ 272.845863][T10836] syz.3.580: attempt to access beyond end of device [ 272.845863][T10836] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 272.893838][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 272.922304][T10843] dlm: no local IP address has been set [ 272.968081][T10843] dlm: cannot start dlm midcomms -107 [ 273.169152][ T30] audit: type=1400 audit(1755467548.230:1146): avc: denied { search } for pid=10831 comm="syz.3.580" name="/" dev="configfs" ino=126 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 273.169182][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 273.314724][ T30] audit: type=1400 audit(1755467548.240:1147): avc: denied { search } for pid=10831 comm="syz.3.580" name="/" dev="configfs" ino=126 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 273.500834][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 273.513709][ T10] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 273.524495][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.537551][ T10] usb 3-1: config 0 descriptor?? [ 273.548404][T10801] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 273.874882][T10863] netlink: 4268 bytes leftover after parsing attributes in process `syz.3.585'. [ 273.884476][T10863] netlink: 4268 bytes leftover after parsing attributes in process `syz.3.585'. [ 274.142115][T10879] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 274.679742][T10879] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 274.695844][T10879] batman_adv: batadv0: Removing interface: team0 [ 274.841160][ T5169] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 274.848014][ T5919] usb 3-1: USB disconnect, device number 13 [ 275.379521][ T10] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 275.561460][ T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 275.572865][ T10] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 275.585370][ T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 275.598470][ T10] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 275.608959][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.623045][ T10] usb 5-1: Product: syz [ 275.630605][ T10] usb 5-1: Manufacturer: syz [ 275.638412][ T10] usb 5-1: SerialNumber: syz [ 275.648701][ T10] usb 5-1: config 0 descriptor?? [ 275.654249][T10890] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 275.661501][T10890] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 275.671733][ T10] usb 5-1: ucan: probing device on interface #0 [ 276.073850][T10922] sctp: [Deprecated]: syz.2.593 (pid 10922) Use of struct sctp_assoc_value in delayed_ack socket option. [ 276.073850][T10922] Use struct sctp_sack_info instead [ 276.122723][ T10] usb 5-1: ucan: failed to retrieve device info [ 276.129237][ T10] usb 5-1: ucan: probe failed; try to update the device firmware [ 276.138959][ T10] usb 5-1: USB disconnect, device number 13 [ 276.357294][T10918] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 278.268449][ T5169] Bluetooth: hci2: command 0x0405 tx timeout [ 278.459096][ T30] audit: type=1400 audit(1755467553.590:1148): avc: denied { append } for pid=10980 comm="syz.0.606" name="video8" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 278.624574][ T30] audit: type=1400 audit(1755467553.740:1149): avc: denied { setopt } for pid=10991 comm="syz.5.609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 278.780255][ T30] audit: type=1400 audit(1755467553.890:1150): avc: denied { ioctl } for pid=10995 comm="syz.5.610" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 279.444341][T11027] netlink: 12 bytes leftover after parsing attributes in process `syz.2.617'. [ 280.208224][T11058] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 280.281804][T11058] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 280.351231][T11070] netlink: 256 bytes leftover after parsing attributes in process `syz.5.627'. [ 280.818720][T11058] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 280.826501][ T30] audit: type=1400 audit(1755467555.789:1151): avc: denied { firmware_load } for pid=11057 comm="syz.0.625" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 280.846835][ C1] vkms_vblank_simulate: vblank timer overrun [ 281.968104][T11143] overlayfs: failed to resolve './file1': -2 [ 282.338216][ T24] usb 4-1: new low-speed USB device number 8 using dummy_hcd [ 282.618785][ T24] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 282.674639][ T24] usb 4-1: config 0 has no interface number 0 [ 282.682666][ T24] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 282.698602][ T24] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 282.709822][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.721648][ T24] usb 4-1: config 0 descriptor?? [ 282.730766][ T24] iowarrior 4-1:0.1: no interrupt-in endpoint found [ 283.007012][T11185] overlayfs: failed to resolve './file1': -2 [ 283.030366][ T10] usb 4-1: USB disconnect, device number 8 [ 283.305821][T11206] vlan1: entered allmulticast mode [ 283.312456][T11206] veth0_vlan: entered allmulticast mode [ 283.318059][T11206] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 283.417222][ T9] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 283.519257][ T30] audit: type=1400 audit(1755467558.323:1152): avc: denied { write } for pid=11218 comm="syz.0.664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 283.580963][ T9] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 283.589118][ T9] usb 6-1: config 0 has no interface number 0 [ 283.595357][ T9] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 283.611913][ T30] audit: type=1326 audit(1755467558.370:1153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11221 comm="syz.0.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23fe38ebe9 code=0x7ffc0000 [ 283.637050][ T9] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 283.674782][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.682841][ T30] audit: type=1326 audit(1755467558.370:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11221 comm="syz.0.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23fe38ebe9 code=0x7ffc0000 [ 283.711717][T11227] netlink: 60 bytes leftover after parsing attributes in process `syz.2.667'. [ 283.730292][ T9] usb 6-1: config 0 descriptor?? [ 283.734326][ T30] audit: type=1326 audit(1755467558.370:1155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11221 comm="syz.0.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7f23fe38ebe9 code=0x7ffc0000 [ 283.776630][ T9] iowarrior 6-1:0.1: no interrupt-in endpoint found [ 283.786433][ T30] audit: type=1326 audit(1755467558.370:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11221 comm="syz.0.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23fe38ebe9 code=0x7ffc0000 [ 283.818346][T11238] geneve2: entered promiscuous mode [ 283.825547][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.835488][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.844556][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.854304][ T30] audit: type=1326 audit(1755467558.370:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11221 comm="syz.0.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23fe38ebe9 code=0x7ffc0000 [ 283.877660][ C1] vkms_vblank_simulate: vblank timer overrun [ 283.884617][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.907109][ T30] audit: type=1400 audit(1755467558.679:1158): avc: denied { write } for pid=11243 comm="syz.0.671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 284.233847][ T9] usb 6-1: USB disconnect, device number 4 [ 284.246239][T11266] overlayfs: failed to resolve './file1': -2 [ 284.518268][ T10] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 284.690772][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 284.698858][ T10] usb 5-1: not running at top speed; connect to a high speed hub [ 284.707404][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 284.717551][ T10] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 284.728385][ T10] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 284.740667][ T10] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 284.749794][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.757893][ T10] usb 5-1: Product: syz [ 284.762027][ T10] usb 5-1: Manufacturer: syz [ 284.766614][ T10] usb 5-1: SerialNumber: syz [ 284.965775][T11283] overlayfs: failed to resolve './file1': -2 [ 285.087125][ T10] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 285.094102][ T10] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 285.102897][ T10] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 285.127509][ T10] usb 5-1: USB disconnect, device number 14 [ 285.218737][ T30] audit: type=1400 audit(1755467559.914:1159): avc: denied { read } for pid=11317 comm="syz.3.678" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 285.248814][ T30] audit: type=1400 audit(1755467559.914:1160): avc: denied { open } for pid=11317 comm="syz.3.678" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 285.352184][ T9] usb 3-1: new low-speed USB device number 14 using dummy_hcd [ 285.513677][ T9] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 285.521690][ T9] usb 3-1: config 0 has no interface number 0 [ 285.528215][ T9] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 285.538940][ T9] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 285.548022][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.557193][ T9] usb 3-1: config 0 descriptor?? [ 285.563434][ T9] iowarrior 3-1:0.1: no interrupt-in endpoint found [ 285.791794][ T9] usb 3-1: USB disconnect, device number 14 [ 288.250515][T11442] netlink: 'syz.0.704': attribute type 8 has an invalid length. [ 288.266959][ T30] audit: type=1400 audit(1755467562.748:1161): avc: denied { read write } for pid=11444 comm="syz.2.705" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 288.291213][ T30] audit: type=1400 audit(1755467562.748:1162): avc: denied { open } for pid=11444 comm="syz.2.705" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 288.431457][ T24] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 288.532626][ T5919] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 288.692610][ T24] usb 6-1: config 0 has no interfaces? [ 288.698098][ T24] usb 6-1: New USB device found, idVendor=05ac, idProduct=025b, bcdDevice= 0.00 [ 288.711756][T11460] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 288.726998][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.773890][ T24] usb 6-1: config 0 descriptor?? [ 288.837474][ T5919] usb 4-1: Using ep0 maxpacket: 8 [ 288.858028][ T5919] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 289.212975][ T5919] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 289.289026][ T30] audit: type=1400 audit(1755467563.665:1163): avc: denied { associate } for pid=11408 comm="syz.5.697" name="freezer.self_freezing" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 289.410599][ T5919] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 289.470605][ T5919] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 289.692738][ T5919] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.735721][ T5919] usb 4-1: Product: syz [ 289.746568][ T5919] usb 4-1: Manufacturer: syz [ 289.757427][ T5919] usb 4-1: SerialNumber: syz [ 290.078213][ T24] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 291.185803][ T30] audit: type=1400 audit(1755467565.489:1164): avc: denied { write } for pid=11505 comm="syz.0.718" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 291.199980][ T5919] usb 4-1: 0:2 : does not exist [ 291.232114][ T24] usb 3-1: New USB device found, idVendor=249c, idProduct=9002, bcdDevice=de.ad [ 291.251529][ T5919] usb 4-1: USB disconnect, device number 9 [ 291.257427][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.280420][ T24] usb 3-1: config 0 descriptor?? [ 291.310897][ T30] audit: type=1400 audit(1755467565.610:1165): avc: denied { create } for pid=11523 comm="syz.0.720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 291.327554][ T5842] udevd[5842]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 291.354305][ T30] audit: type=1400 audit(1755467565.648:1166): avc: denied { ioctl } for pid=11523 comm="syz.0.720" path="socket:[23105]" dev="sockfs" ino=23105 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 291.378966][ C1] vkms_vblank_simulate: vblank timer overrun [ 291.524342][ T24] snd-usb-hiface 3-1:0.0: probe with driver snd-usb-hiface failed with error -22 [ 291.735477][T11535] netlink: 24 bytes leftover after parsing attributes in process `syz.3.722'. [ 291.740722][ T9] usb 3-1: USB disconnect, device number 15 [ 292.081777][T11563] netlink: 'syz.3.729': attribute type 1 has an invalid length. [ 292.089772][T11563] netlink: 28 bytes leftover after parsing attributes in process `syz.3.729'. [ 292.100086][T11563] nbd: illegal input index 65544 [ 292.355315][ T9] usb 6-1: USB disconnect, device number 5 [ 292.554020][ T30] audit: type=1400 audit(1755467566.723:1168): avc: denied { write } for pid=11598 comm="syz.2.733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 292.739110][ T30] audit: type=1400 audit(1755467566.658:1167): avc: denied { bind } for pid=11598 comm="syz.2.733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 292.765285][T11602] bond0: (slave macsec2): Error -34 calling dev_set_mtu [ 292.810233][T11611] netlink: 'syz.4.737': attribute type 27 has an invalid length. [ 292.970793][ T30] audit: type=1400 audit(1755467567.163:1169): avc: denied { append } for pid=11640 comm="syz.0.743" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 293.049385][ T24] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 293.156368][ T30] audit: type=1400 audit(1755467567.313:1170): avc: denied { setopt } for pid=11656 comm="syz.0.744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 293.175746][ C1] vkms_vblank_simulate: vblank timer overrun [ 293.186589][ T5919] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 293.209793][ T5926] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 293.217412][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 293.227272][ T24] usb 4-1: too many endpoints for config 0 interface 0 altsetting 109: 65, using maximum allowed: 30 [ 293.239046][ T24] usb 4-1: config 0 interface 0 altsetting 109 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 293.255797][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 293.263260][ T24] usb 4-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00 [ 293.277942][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.315455][ T24] usb 4-1: config 0 descriptor?? [ 293.478581][ T5926] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 293.487726][ T5919] usb 3-1: config 0 has an invalid interface number: 3 but max is 0 [ 293.496173][ T5926] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 293.505133][ T5919] usb 3-1: config 0 has no interface number 0 [ 293.511759][ T5926] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 293.523545][ T5926] usb 5-1: config 0 interface 0 has no altsetting 0 [ 293.532977][ T5919] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 293.562618][ T5926] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 293.605050][ T5926] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 293.616351][ T5919] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.624557][ T5919] usb 3-1: Product: syz [ 293.630043][ T5919] usb 3-1: Manufacturer: syz [ 293.634696][ T5919] usb 3-1: SerialNumber: syz [ 293.649367][ T5926] usb 5-1: config 0 interface 0 has no altsetting 0 [ 293.656790][ T5926] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 293.672428][ T5919] usb 3-1: config 0 descriptor?? [ 293.691099][ T5926] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 293.703311][ T5926] usb 5-1: config 0 interface 0 has no altsetting 0 [ 293.711568][ T5926] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 293.722292][ T5926] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 293.733245][ T5926] usb 5-1: config 0 interface 0 has no altsetting 0 [ 293.740845][ T5926] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 293.749883][ T5926] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 293.761248][ T5926] usb 5-1: config 0 interface 0 has no altsetting 0 [ 293.769221][ T5926] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 293.778650][ T5926] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 293.789609][ T5926] usb 5-1: config 0 interface 0 has no altsetting 0 [ 293.797994][ T5926] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 293.808788][ T5926] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 293.819753][ T5926] usb 5-1: config 0 interface 0 has no altsetting 0 [ 293.834094][ T24] hid_parser_main: 33 callbacks suppressed [ 293.834111][ T24] elecom 0003:056E:011C.0004: unknown main item tag 0x0 [ 293.847182][ T24] elecom 0003:056E:011C.0004: unknown main item tag 0x0 [ 293.854411][ T24] elecom 0003:056E:011C.0004: unknown main item tag 0x0 [ 293.861546][ T24] elecom 0003:056E:011C.0004: unknown main item tag 0x0 [ 293.868638][ T24] elecom 0003:056E:011C.0004: unknown main item tag 0x0 [ 293.876151][ T5926] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 293.885055][ T5926] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 293.897457][ T24] elecom 0003:056E:011C.0004: hidraw0: USB HID v0.05 Device [HID 056e:011c] on usb-dummy_hcd.3-1/input0 [ 293.908657][ T5926] usb 5-1: config 0 interface 0 has no altsetting 0 [ 293.917043][ T5926] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 293.933851][ T5926] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 293.942451][ T5926] usb 5-1: Product: syz [ 293.946916][ T5919] usb-storage 3-1:0.3: USB Mass Storage device detected [ 293.953900][ T5926] usb 5-1: Manufacturer: syz [ 293.958663][ T5926] usb 5-1: SerialNumber: syz [ 293.964779][ T5926] usb 5-1: config 0 descriptor?? [ 293.972599][ T5926] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 294.016599][T11696] ================================================================== [ 294.024655][T11696] BUG: KASAN: slab-use-after-free in sysfs_remove_file_ns+0x63/0x70 [ 294.032624][T11696] Read of size 8 at addr ffff88802ff93030 by task syz.5.747/11696 [ 294.040405][T11696] [ 294.042705][T11696] CPU: 0 UID: 0 PID: 11696 Comm: syz.5.747 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 294.042726][T11696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 294.042737][T11696] Call Trace: [ 294.042743][T11696] [ 294.042749][T11696] dump_stack_lvl+0x116/0x1f0 [ 294.042771][T11696] print_report+0xcd/0x630 [ 294.042786][T11696] ? __virt_addr_valid+0x81/0x610 [ 294.042801][T11696] ? __phys_addr+0xe8/0x180 [ 294.042816][T11696] ? sysfs_remove_file_ns+0x63/0x70 [ 294.042828][T11696] kasan_report+0xe0/0x110 [ 294.042840][T11696] ? sysfs_remove_file_ns+0x63/0x70 [ 294.042860][T11696] sysfs_remove_file_ns+0x63/0x70 [ 294.042879][T11696] driver_remove_file+0x4a/0x60 [ 294.042899][T11696] bus_remove_driver+0x224/0x2c0 [ 294.042916][T11696] driver_unregister+0x76/0xb0 [ 294.042929][T11696] comedi_device_detach_locked+0x12f/0xa50 [ 294.042942][T11696] ? bpf_lsm_capable+0x9/0x10 [ 294.042957][T11696] ? security_capable+0x7e/0x260 [ 294.042971][T11696] do_devconfig_ioctl+0x555/0x710 [ 294.042987][T11696] ? __mutex_lock+0x1c5/0x1060 [ 294.043006][T11696] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 294.043036][T11696] comedi_unlocked_ioctl+0x165d/0x2f00 [ 294.043062][T11696] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 294.043079][T11696] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 294.043092][T11696] ? do_vfs_ioctl+0x128/0x14f0 [ 294.043108][T11696] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 294.043124][T11696] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 294.043151][T11696] ? rcu_is_watching+0x12/0xc0 [ 294.043172][T11696] ? __fget_files+0x204/0x3c0 [ 294.043189][T11696] ? hook_file_ioctl_common+0x145/0x410 [ 294.043205][T11696] ? selinux_file_ioctl+0x180/0x270 [ 294.043221][T11696] ? selinux_file_ioctl+0xb4/0x270 [ 294.043235][T11696] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 294.043251][T11696] __x64_sys_ioctl+0x18e/0x210 [ 294.043270][T11696] do_syscall_64+0xcd/0x4c0 [ 294.043289][T11696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.043306][T11696] RIP: 0033:0x7f8c45b8ebe9 [ 294.043319][T11696] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 294.043335][T11696] RSP: 002b:00007f8c4698d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 294.043347][T11696] RAX: ffffffffffffffda RBX: 00007f8c45db5fa0 RCX: 00007f8c45b8ebe9 [ 294.043354][T11696] RDX: 0000000000000000 RSI: 0000000040946400 RDI: 0000000000000003 [ 294.043360][T11696] RBP: 00007f8c45c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 294.043367][T11696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 294.043373][T11696] R13: 00007f8c45db6038 R14: 00007f8c45db5fa0 R15: 00007ffc027599c8 [ 294.043382][T11696] [ 294.043386][T11696] [ 294.311458][T11696] Allocated by task 5842: [ 294.315763][T11696] kasan_save_stack+0x33/0x60 [ 294.320425][T11696] kasan_save_track+0x14/0x30 [ 294.325091][T11696] __kasan_kmalloc+0xaa/0xb0 [ 294.329655][T11696] __kmalloc_noprof+0x223/0x510 [ 294.334483][T11696] security_inode_init_security+0x13f/0x390 [ 294.340354][T11696] shmem_mknod+0x22e/0x450 [ 294.344751][T11696] lookup_open.isra.0+0x11d0/0x1580 [ 294.349931][T11696] path_openat+0x893/0x2cb0 [ 294.354409][T11696] do_filp_open+0x20b/0x470 [ 294.358891][T11696] do_sys_openat2+0x11b/0x1d0 [ 294.363547][T11696] __x64_sys_openat+0x174/0x210 [ 294.368377][T11696] do_syscall_64+0xcd/0x4c0 [ 294.372859][T11696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.378742][T11696] [ 294.381044][T11696] Freed by task 5842: [ 294.384995][T11696] kasan_save_stack+0x33/0x60 [ 294.389647][T11696] kasan_save_track+0x14/0x30 [ 294.394298][T11696] kasan_save_free_info+0x3b/0x60 [ 294.399304][T11696] __kasan_slab_free+0x60/0x70 [ 294.404042][T11696] kfree+0x2b4/0x4d0 [ 294.407922][T11696] security_inode_init_security+0x2eb/0x390 [ 294.413790][T11696] shmem_mknod+0x22e/0x450 [ 294.418186][T11696] lookup_open.isra.0+0x11d0/0x1580 [ 294.423367][T11696] path_openat+0x893/0x2cb0 [ 294.427847][T11696] do_filp_open+0x20b/0x470 [ 294.432326][T11696] do_sys_openat2+0x11b/0x1d0 [ 294.436982][T11696] __x64_sys_openat+0x174/0x210 [ 294.441810][T11696] do_syscall_64+0xcd/0x4c0 [ 294.446288][T11696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.452173][T11696] [ 294.454474][T11696] The buggy address belongs to the object at ffff88802ff93000 [ 294.454474][T11696] which belongs to the cache kmalloc-256 of size 256 [ 294.468499][T11696] The buggy address is located 48 bytes inside of [ 294.468499][T11696] freed 256-byte region [ffff88802ff93000, ffff88802ff93100) [ 294.482183][T11696] [ 294.484485][T11696] The buggy address belongs to the physical page: [ 294.490868][T11696] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802ff93000 pfn:0x2ff92 [ 294.500902][T11696] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 294.509373][T11696] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 294.517859][T11696] page_type: f5(slab) [ 294.521817][T11696] raw: 00fff00000000240 ffff88801b841b40 ffffea0000c5dd90 ffffea0000c87a90 [ 294.530377][T11696] raw: ffff88802ff93000 000000000010000f 00000000f5000000 0000000000000000 [ 294.538938][T11696] head: 00fff00000000240 ffff88801b841b40 ffffea0000c5dd90 ffffea0000c87a90 [ 294.547584][T11696] head: ffff88802ff93000 000000000010000f 00000000f5000000 0000000000000000 [ 294.556230][T11696] head: 00fff00000000001 ffffea0000bfe481 00000000ffffffff 00000000ffffffff [ 294.564874][T11696] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 294.573527][T11696] page dumped because: kasan: bad access detected [ 294.579911][T11696] page_owner tracks the page as allocated [ 294.585595][T11696] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6081, tgid 6081 (syz-executor), ts 66939168068, free_ts 66914602878 [ 294.606152][T11696] post_alloc_hook+0x1c0/0x230 [ 294.610914][T11696] get_page_from_freelist+0x132b/0x38e0 [ 294.616461][T11696] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 294.622331][T11696] alloc_pages_mpol+0x1fb/0x550 [ 294.627162][T11696] new_slab+0x247/0x330 [ 294.631302][T11696] ___slab_alloc+0xcf2/0x1740 [ 294.635958][T11696] __slab_alloc.constprop.0+0x56/0xb0 [ 294.641310][T11696] __kmalloc_noprof+0x2f2/0x510 [ 294.646135][T11696] security_inode_init_security+0x13f/0x390 [ 294.652009][T11696] shmem_symlink+0x135/0x9f0 [ 294.656583][T11696] vfs_symlink+0x403/0x680 [ 294.660985][T11696] do_symlinkat+0x261/0x310 [ 294.665468][T11696] __x64_sys_symlinkat+0x93/0xc0 [ 294.670398][T11696] do_syscall_64+0xcd/0x4c0 [ 294.674881][T11696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.680762][T11696] page last free pid 6077 tgid 6066 stack trace: [ 294.687062][T11696] __free_frozen_pages+0x7d5/0x10f0 [ 294.692246][T11696] rcu_core+0x79c/0x1530 [ 294.696469][T11696] handle_softirqs+0x216/0x8e0 [ 294.701214][T11696] __irq_exit_rcu+0x109/0x170 [ 294.705872][T11696] irq_exit_rcu+0x9/0x30 [ 294.710096][T11696] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 294.715718][T11696] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 294.721684][T11696] [ 294.723989][T11696] Memory state around the buggy address: [ 294.729608][T11696] ffff88802ff92f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 294.737653][T11696] ffff88802ff92f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 294.745692][T11696] >ffff88802ff93000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 294.753726][T11696] ^ [ 294.759328][T11696] ffff88802ff93080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 294.767362][T11696] ffff88802ff93100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 294.775401][T11696] ================================================================== [ 294.792818][ T5919] usb 3-1: USB disconnect, device number 16 [ 294.795494][ T9] usb 4-1: USB disconnect, device number 10 [ 294.809083][T11696] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 294.816285][T11696] CPU: 1 UID: 0 PID: 11696 Comm: syz.5.747 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 294.828255][T11696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 294.838300][T11696] Call Trace: [ 294.841571][T11696] [ 294.844487][T11696] dump_stack_lvl+0x3d/0x1f0 [ 294.849054][T11696] vpanic+0x6e8/0x7a0 [ 294.853015][T11696] ? __pfx_vpanic+0x10/0x10 [ 294.857493][T11696] ? __pfx_vprintk_emit+0x10/0x10 [ 294.862516][T11696] ? sysfs_remove_file_ns+0x63/0x70 [ 294.867691][T11696] panic+0xca/0xd0 [ 294.871393][T11696] ? __pfx_panic+0x10/0x10 [ 294.875792][T11696] ? sysfs_remove_file_ns+0x63/0x70 [ 294.880967][T11696] ? preempt_schedule_common+0x44/0xc0 [ 294.886398][T11696] ? preempt_schedule_thunk+0x16/0x30 [ 294.891758][T11696] check_panic_on_warn+0xab/0xb0 [ 294.896678][T11696] end_report+0x107/0x170 [ 294.900991][T11696] kasan_report+0xee/0x110 [ 294.905381][T11696] ? sysfs_remove_file_ns+0x63/0x70 [ 294.910553][T11696] sysfs_remove_file_ns+0x63/0x70 [ 294.915549][T11696] driver_remove_file+0x4a/0x60 [ 294.920379][T11696] bus_remove_driver+0x224/0x2c0 [ 294.925296][T11696] driver_unregister+0x76/0xb0 [ 294.930041][T11696] comedi_device_detach_locked+0x12f/0xa50 [ 294.935826][T11696] ? bpf_lsm_capable+0x9/0x10 [ 294.940487][T11696] ? security_capable+0x7e/0x260 [ 294.945404][T11696] do_devconfig_ioctl+0x555/0x710 [ 294.950410][T11696] ? __mutex_lock+0x1c5/0x1060 [ 294.955153][T11696] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 294.960686][T11696] comedi_unlocked_ioctl+0x165d/0x2f00 [ 294.966136][T11696] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 294.971937][T11696] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 294.977819][T11696] ? do_vfs_ioctl+0x128/0x14f0 [ 294.982566][T11696] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 294.987574][T11696] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 294.994409][T11696] ? rcu_is_watching+0x12/0xc0 [ 294.999153][T11696] ? __fget_files+0x204/0x3c0 [ 295.003812][T11696] ? hook_file_ioctl_common+0x145/0x410 [ 295.009336][T11696] ? selinux_file_ioctl+0x180/0x270 [ 295.014517][T11696] ? selinux_file_ioctl+0xb4/0x270 [ 295.019610][T11696] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 295.025399][T11696] __x64_sys_ioctl+0x18e/0x210 [ 295.030147][T11696] do_syscall_64+0xcd/0x4c0 [ 295.034630][T11696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.040512][T11696] RIP: 0033:0x7f8c45b8ebe9 [ 295.044901][T11696] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 295.064490][T11696] RSP: 002b:00007f8c4698d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 295.072890][T11696] RAX: ffffffffffffffda RBX: 00007f8c45db5fa0 RCX: 00007f8c45b8ebe9 [ 295.080841][T11696] RDX: 0000000000000000 RSI: 0000000040946400 RDI: 0000000000000003 [ 295.088803][T11696] RBP: 00007f8c45c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 295.096750][T11696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 295.104696][T11696] R13: 00007f8c45db6038 R14: 00007f8c45db5fa0 R15: 00007ffc027599c8 [ 295.112651][T11696] [ 295.115827][T11696] Kernel Offset: disabled [ 295.120134][T11696] Rebooting in 86400 seconds..