last executing test programs: 39.208571117s ago: executing program 1 (id=869): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x20, 0x70bd2b, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x20, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x80000000}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x1, 0x0, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x7, 0x3}}}}]}]}, 0x70}}, 0x20040000) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0) 38.291592905s ago: executing program 1 (id=873): syz_init_net_socket$ax25(0x3, 0x5, 0xcb) r0 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x818f, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r0, 0x47b6, 0x800000, 0x0, 0x0, 0x0) 38.212713458s ago: executing program 1 (id=874): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d40)=@newqdisc={0x3a8, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x378, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x64, 0x2, 0x3, 0x17, 0xd, 0x8, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x1f, 0x0, 0x0, 0x0, 0xff}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x3a8}}, 0x0) 37.5570895s ago: executing program 1 (id=878): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000180)='./file0\x00') mount$bind(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x5200, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') 37.476978063s ago: executing program 1 (id=879): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x403, 0x6030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="002202"], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f0000000280)=ANY=[@ANYBLOB="00140d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffd, 0x8) 37.156054208s ago: executing program 1 (id=883): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000080)={0xe0003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x83, 0xffffffffefffff15, 0x3, 0x4, 0x4, 0x4]}}) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000180)={0x110001, 0x0, {[0x5, 0x4, 0x8, 0x2, 0x7, 0x3, 0x6, 0x10001]}}) 36.806406415s ago: executing program 32 (id=883): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000080)={0xe0003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x83, 0xffffffffefffff15, 0x3, 0x4, 0x4, 0x4]}}) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000180)={0x110001, 0x0, {[0x5, 0x4, 0x8, 0x2, 0x7, 0x3, 0x6, 0x10001]}}) 13.454521922s ago: executing program 4 (id=1012): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x1000, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) syz_open_dev$vbi(0x0, 0x3, 0x2) mq_notify(0xffffffffffffffff, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) unshare(0x2c060000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="318325bd700000000000190000000c0001800800030005"], 0x20}, 0x1, 0x0, 0x0, 0x2000}, 0x0) unshare(0x22020600) r4 = socket$unix(0x1, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x4001, 0x3, 0x3d8, 0x230, 0x700001b, 0x148, 0x0, 0x148, 0x340, 0x206, 0x240, 0x340, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @rand_addr, 0x0, 0x0, 'tunl0\x00', 'bond_slave_1\x00', {0xff}}, 0x1ea, 0x1e8, 0x230, 0x0, {0x390, 0x8f00}, [@common=@inet=@hashlimit2={{0x150}, {'pim6reg1\x00', {0x5, 0x1ff, 0x1, 0x1, 0x1, 0x100, 0x1, 0x8, 0x20}, {0x8}}}, @common=@inet=@socket2={{0x28}, 0x4}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x8, 0x9, 'snmp\x00', {0xc000}}}}, {{@uncond, 0x0, 0xb0, 0x110, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x6275dd3c01ecbf44, 0x2, 0x4, 0x4], 0x4, 0x2}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x3, 0x6, 0x2, 0xa, 0x6], 0x2, 0x2}, {0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x1], 0x5, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x438) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r6 = socket$unix(0x1, 0x1, 0x0) connect$unix(r6, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept$unix(r4, 0x0, 0x0) add_key$user(0x0, &(0x7f0000000280)={'syz', 0x2}, &(0x7f0000000380)="218768b0ec8fa62c25d0cb36b873f5d52df069b4c7ceafb1be8f1e3b4b76bf0dc197c97e883e6b60a6cf93c3510ea23ed7571f6786f5b099d6cd49bdd58d187a8f52417405d6b822c3ac5691570c4454e1a87f13c42b180e60ab78b369e76db1d7a41632b9b8ef70b96321e9ebc1602fec62988223e95cb3c51f43d0874fc39881a0ee2ddcd011d1309350057480b728223b4c98d0628d9d9ee420142e72e1fe845624973797759a5abffb75b839b205499384c3e46830819154685dc79b555a067dd5f0b163183977d2f7d6c3", 0xcd, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}) 11.427891415s ago: executing program 4 (id=1021): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000580)={@void, @void, @eth={@broadcast, @link_local, @val, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x17c1, 0x18, 0x0, @wg=@data}}}}}}, 0x6c) 11.232369371s ago: executing program 4 (id=1022): syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000240)="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", 0x2000, 0x0) r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x3, @local}}, 0x1e) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x1) ioctl$PPPIOCGFLAGS1(r1, 0x8004745a, &(0x7f0000001f40)) 11.104402078s ago: executing program 4 (id=1024): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) umount2(&(0x7f00000002c0)='./file0/../file0\x00', 0x8) 10.821523593s ago: executing program 4 (id=1028): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x439, 0x70bd23, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, 0xb881}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00'}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x26}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x24008007}, 0x4040844) sendto$packet(r0, &(0x7f0000000640)="e8b77052a9", 0x28, 0x40, &(0x7f0000000200)={0x11, 0x86dd, r3, 0x1, 0x0, 0x6, @local}, 0x14) 10.491457492s ago: executing program 4 (id=1031): mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000500)={0x8, 0xfffffffffffffffd}) 10.270426731s ago: executing program 33 (id=1031): mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000500)={0x8, 0xfffffffffffffffd}) 5.227921935s ago: executing program 5 (id=1065): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x5, r2, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}}, 0x14) getsockname$packet(r1, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000540001000000000000c4000007008209", @ANYRES32=r3, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="00000001e000030000000000000000000000000008"], 0x38}, 0x1, 0x0, 0x0, 0x881}, 0x801) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 5.04341231s ago: executing program 5 (id=1069): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket$inet(0x2, 0x1, 0x100) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000001c0)=0x0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, 0x0, &(0x7f0000000400)) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000000440)={0x4, 0x200, {r3}, {}, 0xfffffffc, 0x80000001}) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x0, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(r2, 0x1) r7 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r8 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=@can_newroute={0x14c, 0x18, 0x1, 0x70bd29, 0x25dfdbfd, {0x1d, 0x1, 0x4}, [@CGW_CS_CRC8={0x11e, 0x6, {0x1, 0xe, 0x3, 0x0, 0xff, "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", 0x0, "5c8d586b2a88d818b56d2a5e15c8a95d29e5b2ea"}}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x1, 0x0, 0x1}, 0x0, 0x5, 0x0, 0x0, '\t\x00'}, 0x1}}]}, 0x14c}}, 0x4c0c8) tkill(r8, 0xb) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x55fdb4595c3d8036) openat$cuse(0xffffffffffffff9c, &(0x7f0000001f80), 0x2, 0x0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0x101, 0x200}}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 4.847646187s ago: executing program 0 (id=1071): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x800448d2, &(0x7f0000000100)) 4.765868015s ago: executing program 3 (id=1073): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef23d430f6296b32a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d6ece1ccb0cd2b6d3cffd962867a3a2f624f992daa94a0c556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff730d00000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409eaa988dbc2fee9d313d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7a36b26a4e70f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf37704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eede0068ca1457870eb30d211e23ccc8e06dddeb61799257ab5000013c86ba9affb12ec757c7234c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad0e0e2b45d14ee446b840edaa1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff75067d2a214f8c9d9b2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb862822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c50ce6a8e9f65de13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae20bf279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522f7dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87915ed063f608dddb03a95b51cb6febd5f24a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be42827dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2ddf4c4d26f1cdd8c3c9736cf5e5082de3b484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b0033f8dfe0fd9bb2a70801f763524e1d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cfcb9066668627820d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67736ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e942e35c4baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000c3d51d9a161446b4373e06a9e07f8a000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b5b1dfa9fd31df213c88b4047979379dc15c9056fd3baa8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221f05e6ca8c705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f12fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab77847ce05c89411277ec69c409b7ec50a3337a78675f38a568612aa25d61ce4e2c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008435f39381c2a77c001caae53db7316fa6d48d032ab6831ebb813c85855c7a9ad8140a4b29422fc20d4e75c848984a2e217ec9c2833b8fa9106ee1be2c05103a36fc1126f1aa5284ba7179843b08ecadc199b9038cf6b9ee4e1f321a6a32e03bd987ddfada1f69756651b73a7ed0f7e467081193b2844869"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) sendmsg(r0, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002b80)="b2", 0x1}], 0x1}, 0x4000) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) sendmmsg$inet(r0, &(0x7f000000c3c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x80) 4.321403405s ago: executing program 0 (id=1075): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000100)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f0000000780)=""/4108, 0x437aba2}], 0x1, 0x0, 0xfffffdee, 0x407006}, 0x104) 4.224010072s ago: executing program 3 (id=1076): openat$hwrng(0xffffffffffffff9c, 0x0, 0x202140, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, 0x0, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00'}) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000108006300"], 0x0) syz_emit_ethernet(0x82, 0x0, 0x0) 4.137241765s ago: executing program 3 (id=1077): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000009, 0x15031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x18}, 0x20000000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="0c000280060001"], 0x24}}, 0x0) 4.062896536s ago: executing program 5 (id=1078): r0 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r1, &(0x7f0000006800)="10", 0x1) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_disconnect(r0) 3.987432659s ago: executing program 3 (id=1079): openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) 2.919569871s ago: executing program 0 (id=1083): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f0000000000), &(0x7f0000000b40), 0xfe1c, 0x0) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.366107287s ago: executing program 2 (id=1086): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000d00), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) r1 = syz_open_pts(r0, 0x900) r2 = dup3(r1, r0, 0x80000) read(r2, &(0x7f00000000c0)=""/226, 0xe2) read$watch_queue(r2, 0x0, 0x0) 2.257017463s ago: executing program 3 (id=1087): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket$inet(0x2, 0x1, 0x100) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000001c0)=0x0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, 0x0, &(0x7f0000000400)) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000000440)={0x4, 0x200, {r3}, {}, 0xfffffffc, 0x80000001}) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x0, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(r2, 0x1) r7 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r8 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=@can_newroute={0x14c, 0x18, 0x1, 0x70bd29, 0x25dfdbfd, {0x1d, 0x1, 0x4}, [@CGW_CS_CRC8={0x11e, 0x6, {0x1, 0xe, 0x3, 0x0, 0xff, "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", 0x0, "5c8d586b2a88d818b56d2a5e15c8a95d29e5b2ea"}}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x1, 0x0, 0x1}, 0x0, 0x5, 0x0, 0x0, '\t\x00'}, 0x1}}]}, 0x14c}}, 0x4c0c8) tkill(r8, 0xb) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x55fdb4595c3d8036) openat$cuse(0xffffffffffffff9c, &(0x7f0000001f80), 0x2, 0x0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0x101, 0x200}}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 1.495830502s ago: executing program 0 (id=1088): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0x3}, {0xd, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0x67}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x40090) 1.409788324s ago: executing program 2 (id=1089): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x8, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x7, 0xa, 0xfffffff3}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@newtfilter={0x44, 0x2c, 0xd2b, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x6}, {}, {0x7, 0xf}}, [@filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x32}, @TCA_ROUTE4_IIF={0x8, 0x4, r3}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2404c044}, 0x240440d4) 1.29740746s ago: executing program 3 (id=1090): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/igmp\x00') read$FUSE(r1, &(0x7f0000000640)={0x2020}, 0x2020) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000ac0)={0x24, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x8, "d2f751d3"}]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") 1.236393218s ago: executing program 0 (id=1091): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000000)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x1c, r2, 0x5, 0x8, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20000080) write$nci(r0, &(0x7f0000001800)=ANY=[@ANYBLOB="7240082b0102020681055a03997713fa06070202267a"], 0x16) 1.171794349s ago: executing program 2 (id=1092): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0x42f, 0x870bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x8, 0x7}, {}, {0xc, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x1}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 1.156610918s ago: executing program 5 (id=1093): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0x3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x805}, 0x0) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r4) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000003c0)={0x0}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) ioctl$DRM_IOCTL_MODE_ADDFB2(r4, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [], [0x2b8], [], [0x3]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000440)={&(0x7f0000000180), 0x0, 0x0, 0x0, 0x1, 0x5b, 0x0, 0xfffffffffffffca2}) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0x42, 0x4, 0x370, 0xffffffff, 0xf8, 0xf8, 0x1b8, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0xd0, 0xf8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x7000000, 0x2, 0x0, 0xf}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast2, @private=0xa010102, 0x0, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0x0, 0x1}, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x9}}, @common=@socket0={{0x20}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, &(0x7f0000000140)={0x0, 0x12, 0x1, 0x3, 0x0, 0x4, 0x0}) r7 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000a00)="d8000000210081044e81f782db44b9040a00000000fe0500002015000600142603600e1209000a0000b94dcf5c0468c1d67f6f94007134cfeee0800089e408e8d8ef52f40800de00e06bbace8017cbec4c2ee5a7cef4090000001fb79164075ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5035ccb29e00230db70100000040fad95667e006dcdf969b3ef35ce3bb9ad809d50400ce81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a83100043370e9701008400002d3bc75dc0bb9dd33e438c0000000000000000", 0xd8}, {&(0x7f0000000000)="53f644cf223e37a1896b2be827acea323fc6d2f53a7b396111b8b8ac9e8a929ba5f5db3c900af0a74771bcf9a29d97115e0c28cee70818c04809fe15724f4cf12c81838562e2940e9d4291b45662a0d2d28cf02d3ce2c4e6f2b7bba371bc7653663d4c1611333522381e52f084ef4bf1d81e5038f001267844d52535bc7ab66999f78502763671ee5a84130640a38af21074c65190fea4a72dffce5bb7e9fbdd11dfaf6dc7e0", 0xa6}, {&(0x7f0000000100)="f6813a04e4d37c2dcdd0f297caa97056a9b7e20802ed8631c86c01c1b05ce791d04df31254", 0x25}], 0x3}, 0x80080) 966.342746ms ago: executing program 2 (id=1094): r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000080)={0x84, @local, 0x15, 0x3, 'sh\x00', 0x28, 0x5, 0x72}, 0x2c) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e24, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xc, 0x2}}, 0x44) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0}, 0x0) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)={0x20, 0x1a, 0x1, 0x0, 0x0, "", [@typed={0xa, 0x3ffc, 0x0, 0x0, @str=':*^${\x00'}, @nested={0x4, 0x1b}]}, 0x20}], 0x1}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, 0xfffffffffffffe25) r8 = socket$inet_sctp(0x2, 0x1, 0x84) r9 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r8, 0x84, 0x19, &(0x7f0000000000)={r10, 0x4}, 0x8) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) 352.834298ms ago: executing program 2 (id=1095): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbbd, {0x0, 0x0, 0x0, r3, {0xb, 0xfff3}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0x4044000) 214.736305ms ago: executing program 5 (id=1096): io_setup(0x101, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) 209.478743ms ago: executing program 0 (id=1097): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x80) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xe}, {}, {0x6, 0xc}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_EMATCHES={0x54, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x48, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x7, 0x3, 0x101}, {0xb, 0x3, 0xf3c, 0x9}}}, @TCF_EM_NBYTE={0x10, 0x2, 0x0, 0x0, {{0xffff}, {0x7d, 0x0, 0x2}}}, @TCF_EM_CMP={0x7b, 0x3, 0x0, 0x0, {{0x6, 0x1, 0x9}, {0x2, 0x5f5b, 0x4372, 0x4, 0x8, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}]}]}}]}, 0x88}}, 0x0) 91.671422ms ago: executing program 2 (id=1098): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x800) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0xfffffbff}}, './file0\x00'}) getdents64(r5, &(0x7f0000000300)=""/239, 0xef) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000040)={0x190, 0x80, 0xa0, 0x320, 0x32, 0x1c0, 0x0, 0x0, {}, {}, {0x0, 0x0, 0xffffffff}, {}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, 0x7, 0x4, 0x0, 0x0, 0xa}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000048000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000210c0009800800014000000005600000000c0a010300000000000000000700fffe0900020073797a31000000000900010073797a300000000034000380300000802c000180250001002130404c6bfef3a31e2587ebd76200eb3ea056f39e3ab8a93c358099bf8cf3007d00000014000000110001"], 0xf0}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0x7, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000000000000a00000000", @ANYRES8=r6], 0x20}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 0s ago: executing program 5 (id=1099): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, 0x0, &(0x7f00000000c0)) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_emit_ethernet(0xda, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}}, 0x24}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYBLOB="010000000000000000000100000008000100040000002c00048005000300010000000500030080ffffff05000300016900000500030080ffffff05000300050000000800020003"], 0x50}}, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r3, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f0000000340)=0x18) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r4, &(0x7f00000005c0)=ANY=[@ANYBLOB="7f454c4604070003040000000000000002000300030000000903000038000000ce0000000e0000000b0020000100050005000000000000000300000008000000f30000007f0000000402"], 0x258) close(r4) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd604dd31800180600fc000000000000000000000000000010fe8000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="60020000e9c61caca340be"], 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8082, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) kernel console output (not intermixed with test programs): 904][ T7366] IPVS: sh: FWM 3 0x00000003 - no destination available [ 138.422499][ T7366] IPVS: sh: FWM 3 0x00000003 - no destination available [ 138.430289][ T7366] netlink: 'syz.1.516': attribute type 27 has an invalid length. [ 138.465666][ T5896] usb 1-1: config 0 descriptor?? [ 138.472231][ T7368] vim2m vim2m.0: vidioc_s_fmt queue busy [ 138.482203][ T7350] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 138.678975][ T7378] IPVS: sh: FWM 3 0x00000003 - no destination available [ 138.686061][ C1] IPVS: sh: FWM 3 0x00000003 - no destination available [ 138.694043][ T7378] IPVS: sh: FWM 3 0x00000003 - no destination available [ 138.701057][ C1] IPVS: sh: FWM 3 0x00000003 - no destination available [ 138.715089][ T30] audit: type=1400 audit(1766374399.903:284): avc: denied { write } for pid=7379 comm="syz.1.523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 138.716434][ T7378] netlink: 'syz.2.522': attribute type 27 has an invalid length. [ 138.946182][ T5896] ipheth 1-1:0.196: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes [ 138.955627][ T5896] ipheth 1-1:0.196: probe with driver ipheth failed with error -22 [ 139.650171][ T7404] ceph: No mds server is up or the cluster is laggy [ 139.656990][ T5896] libceph: connect (1)[c::]:6789 error -101 [ 139.680548][ T7405] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 139.698544][ T5896] libceph: mon0 (1)[c::]:6789 connect error [ 139.706966][ T5937] usb 1-1: USB disconnect, device number 4 [ 140.031387][ T7412] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 140.210163][ T7420] IPVS: sh: FWM 3 0x00000003 - no destination available [ 140.217195][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 140.225448][ T7420] netlink: 'syz.3.539': attribute type 27 has an invalid length. [ 140.509851][ T5937] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 140.763965][ T7438] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.777588][ T7438] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.944676][ T7437] ceph: No mds server is up or the cluster is laggy [ 140.954592][ T7441] netlink: 'syz.2.542': attribute type 13 has an invalid length. [ 140.963127][ T938] libceph: connect (1)[c::]:6789 error -101 [ 140.971220][ T938] libceph: mon0 (1)[c::]:6789 connect error [ 140.981984][ T5937] usb 5-1: unable to get BOS descriptor or descriptor too short [ 140.990895][ T5937] usb 5-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 141.045282][ T5937] usb 5-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 141.055309][ T5937] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.099046][ T5937] usb 5-1: Product: syz [ 141.106915][ T5937] usb 5-1: Manufacturer: syz [ 141.117900][ T5937] usb 5-1: SerialNumber: syz [ 141.263048][ T30] audit: type=1400 audit(1766374402.453:285): avc: denied { read write } for pid=7442 comm="syz.1.546" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 141.328453][ T30] audit: type=1400 audit(1766374402.453:286): avc: denied { open } for pid=7442 comm="syz.1.546" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 141.361751][ T30] audit: type=1400 audit(1766374402.493:287): avc: denied { ioctl } for pid=7442 comm="syz.1.546" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 141.447998][ T7447] tipc: Enabling of bearer rejected, failed to enable media [ 141.619901][ T5862] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 141.788305][ T7455] xt_socket: unknown flags 0x4 [ 141.929863][ T5862] usb 2-1: Using ep0 maxpacket: 8 [ 141.936920][ T5862] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 141.951244][ T5862] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 142.005544][ T7459] xt_l2tp: v2 sid > 0xffff: 117440512 [ 142.012949][ T7459] netlink: 'syz.3.552': attribute type 10 has an invalid length. [ 142.020756][ T7459] netlink: 168 bytes leftover after parsing attributes in process `syz.3.552'. [ 142.346317][ T5937] usb 5-1: reset high-speed USB device number 7 using dummy_hcd [ 142.372959][ T5862] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.389178][ T5862] usb 2-1: Product: syz [ 142.397725][ T5862] usb 2-1: Manufacturer: syz [ 142.404505][ T5862] usb 2-1: SerialNumber: syz [ 142.413709][ T5862] usb 2-1: config 0 descriptor?? [ 142.427889][ T5862] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 142.439377][ T5862] usb 2-1: setting power ON [ 142.448342][ T5862] dvb-usb: bulk message failed: -22 (2/0) [ 142.465555][ T5862] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 142.489565][ T5862] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 142.505703][ T5862] usb 2-1: media controller created [ 142.515028][ T5937] usb 5-1: unable to get BOS descriptor or descriptor too short [ 142.524470][ T5937] usb 5-1: device firmware changed [ 142.537853][ T5862] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 142.561858][ T5937] usb 5-1: USB disconnect, device number 7 [ 142.598801][ T5862] usb 2-1: selecting invalid altsetting 6 [ 142.611510][ T5862] usb 2-1: digital interface selection failed (-22) [ 142.637100][ T7445] dvb-usb: bulk message failed: -22 (3/0) [ 142.645806][ T5862] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 142.649907][ T7445] dvb-usb: bulk message failed: -22 (3/0) [ 142.716285][ T5862] usb 2-1: setting power OFF [ 142.723839][ T5862] dvb-usb: bulk message failed: -22 (2/0) [ 142.730075][ T5937] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 142.759544][ T5862] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 142.890568][ T7465] netlink: 'syz.3.554': attribute type 27 has an invalid length. [ 142.920026][ T5862] (NULL device *): no alternate interface [ 143.062885][ T5937] usb 5-1: unable to get BOS descriptor or descriptor too short [ 143.079914][ T5937] usb 5-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 143.094045][ T5937] usb 5-1: string descriptor 0 read error: -22 [ 143.120147][ T5937] usb 5-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 143.140937][ T5937] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.153952][ T5862] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 143.350067][ T5862] usb 2-1: USB disconnect, device number 5 [ 143.814078][ T7474] ceph: No mds server is up or the cluster is laggy [ 143.821052][ T5896] libceph: connect (1)[c::]:6789 error -101 [ 143.848156][ T7476] net_ratelimit: 7 callbacks suppressed [ 143.848164][ T7476] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 143.875218][ T5896] libceph: mon0 (1)[c::]:6789 connect error [ 143.987288][ T30] audit: type=1400 audit(1766374405.173:288): avc: denied { read } for pid=7483 comm="syz.2.561" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 144.078558][ T5937] usb 5-1: USB disconnect, device number 8 [ 144.119482][ T30] audit: type=1400 audit(1766374405.203:289): avc: denied { open } for pid=7483 comm="syz.2.561" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 144.165020][ T7492] netlink: 'syz.3.559': attribute type 2 has an invalid length. [ 144.619375][ T7499] xt_socket: unknown flags 0x4 [ 144.736576][ T30] audit: type=1400 audit(1766374405.923:290): avc: denied { getopt } for pid=7502 comm="syz.0.565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 145.776525][ T7526] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 146.063007][ T7525] ceph: No mds server is up or the cluster is laggy [ 146.070258][ T5937] libceph: connect (1)[c::]:6789 error -101 [ 146.079627][ T5937] libceph: mon0 (1)[c::]:6789 connect error [ 146.099976][ T5862] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 146.249849][ T5862] usb 2-1: Using ep0 maxpacket: 32 [ 146.258247][ T5862] usb 2-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 146.267552][ T5862] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.276216][ T5862] usb 2-1: Product: syz [ 146.280574][ T5862] usb 2-1: Manufacturer: syz [ 146.285572][ T5862] usb 2-1: SerialNumber: syz [ 146.300178][ T5862] usb 2-1: config 0 descriptor?? [ 146.352637][ T5937] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 146.427127][ T7534] netlink: 12 bytes leftover after parsing attributes in process `syz.2.577'. [ 146.449571][ T5862] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 146.462260][ T5862] dvb-usb: bulk message failed: -22 (2/0) [ 146.481395][ T5862] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 146.555276][ T5862] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 146.563699][ T5862] usb 2-1: media controller created [ 146.569629][ T7536] IPVS: sh: FWM 3 0x00000003 - no destination available [ 146.577530][ T7536] IPVS: sh: FWM 3 0x00000003 - no destination available [ 146.586213][ T7536] netlink: 'syz.4.578': attribute type 27 has an invalid length. [ 146.615852][ T5937] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 146.651904][ T7520] dvb-usb: bulk message failed: -22 (3/0) [ 146.666609][ T5937] usb 1-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00 [ 146.669383][ T5862] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 146.778505][ T5937] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.799124][ T5862] usb 2-1: selecting invalid altsetting 7 [ 146.806639][ T5937] usb 1-1: config 0 descriptor?? [ 146.809836][ T5862] cxusb: set interface failed [ 146.818789][ T5862] dvb-usb: bulk message failed: -22 (1/0) [ 146.852276][ T7542] IPVS: sh: FWM 3 0x00000003 - no destination available [ 146.863528][ T5862] DVB: Unable to find symbol lgdt330x_attach() [ 146.870452][ T5862] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 146.882331][ T7542] IPVS: sh: FWM 3 0x00000003 - no destination available [ 146.899865][ T6079] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 146.920967][ T7542] netlink: 'syz.4.580': attribute type 27 has an invalid length. [ 146.939877][ T5862] rc_core: IR keymap rc-dvico-portable not found [ 146.946293][ T5862] Registered IR keymap rc-empty [ 146.953725][ T5862] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 146.965044][ T5862] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input10 [ 146.985138][ T5862] dvb-usb: schedule remote query interval to 100 msecs. [ 146.993011][ T5862] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 147.007971][ T5862] usb 2-1: USB disconnect, device number 6 [ 147.050151][ T6079] usb 3-1: Using ep0 maxpacket: 32 [ 147.056876][ T6079] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.068023][ T6079] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.081997][ T5862] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 147.095805][ T6079] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 147.108047][ T6079] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.122508][ T6079] usb 3-1: config 0 descriptor?? [ 147.256169][ T5937] pantherlord 0003:0810:0001.0001: hidraw0: USB HID v0.00 Device [HID 0810:0001] on usb-dummy_hcd.0-1/input0 [ 147.286791][ T5937] pantherlord 0003:0810:0001.0001: no output reports found [ 147.500531][ T7548] netlink: 12 bytes leftover after parsing attributes in process `syz.1.581'. [ 147.518532][ T7548] xt_socket: unknown flags 0x4 [ 147.543041][ T5862] usb 1-1: USB disconnect, device number 5 [ 147.562174][ T6079] ft260 0003:0403:6030.0002: collection stack underflow [ 147.569914][ T6079] ft260 0003:0403:6030.0002: item 0 1 0 12 parsing failed [ 147.577291][ T6079] ft260 0003:0403:6030.0002: failed to parse HID [ 147.583973][ T6079] ft260 0003:0403:6030.0002: probe with driver ft260 failed with error -22 [ 147.762934][ T5862] usb 3-1: USB disconnect, device number 7 [ 148.612530][ T7556] IPVS: sh: FWM 3 0x00000003 - no destination available [ 148.624263][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 148.639363][ T7556] IPVS: sh: FWM 3 0x00000003 - no destination available [ 148.646680][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 148.708754][ T7555] netlink: 'syz.2.583': attribute type 27 has an invalid length. [ 148.946374][ T30] audit: type=1400 audit(1766374410.133:291): avc: denied { create } for pid=7565 comm="syz.3.588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 149.069303][ T30] audit: type=1400 audit(1766374410.163:292): avc: denied { getopt } for pid=7565 comm="syz.3.588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 149.189936][ T5937] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 149.237609][ T7573] ceph: No mds server is up or the cluster is laggy [ 149.251864][ T5896] libceph: connect (1)[c::]:6789 error -101 [ 149.261374][ T5896] libceph: mon0 (1)[c::]:6789 connect error [ 149.296621][ T30] audit: type=1400 audit(1766374410.343:293): avc: denied { shutdown } for pid=7565 comm="syz.3.588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 149.456502][ T5937] usb 5-1: Using ep0 maxpacket: 32 [ 149.540422][ T7578] IPVS: sh: FWM 3 0x00000003 - no destination available [ 149.547432][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 149.555237][ T7578] IPVS: sh: FWM 3 0x00000003 - no destination available [ 149.562224][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 149.570749][ T7578] netlink: 'syz.1.590': attribute type 27 has an invalid length. [ 149.601896][ T5937] usb 5-1: config 0 has an invalid interface number: 4 but max is 0 [ 149.627514][ T5937] usb 5-1: config 0 has no interface number 0 [ 149.647482][ T5937] usb 5-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.666737][ T5937] usb 5-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.685167][ T5937] usb 5-1: config 0 interface 4 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 149.698200][ T7584] usb usb8: usbfs: process 7584 (syz.2.592) did not claim interface 0 before use [ 149.717918][ T5937] usb 5-1: New USB device found, idVendor=28bd, idProduct=0905, bcdDevice= 0.00 [ 149.727753][ T5937] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.753535][ T5937] usb 5-1: config 0 descriptor?? [ 150.116773][ T7604] xt_l2tp: v2 sid > 0xffff: 117440512 [ 150.124469][ T7604] netlink: 'syz.2.596': attribute type 10 has an invalid length. [ 150.132255][ T7604] netlink: 168 bytes leftover after parsing attributes in process `syz.2.596'. [ 150.391877][ T30] audit: type=1400 audit(1766374411.583:294): avc: denied { create } for pid=7605 comm="syz.1.601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 150.415997][ T30] audit: type=1400 audit(1766374411.603:295): avc: denied { setopt } for pid=7605 comm="syz.1.601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 150.532826][ T5937] uclogic 0003:28BD:0905.0003: interface is invalid, ignoring [ 150.574385][ T7610] IPVS: sh: FWM 3 0x00000003 - no destination available [ 150.587963][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 150.601311][ T7609] IPVS: sh: FWM 3 0x00000003 - no destination available [ 150.608491][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 150.616628][ T7609] netlink: 'syz.3.602': attribute type 27 has an invalid length. [ 150.751178][ T5862] usb 5-1: USB disconnect, device number 9 [ 151.041412][ T30] audit: type=1400 audit(1766374412.233:296): avc: denied { setopt } for pid=7613 comm="syz.0.606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 151.946303][ T30] audit: type=1400 audit(1766374413.133:297): avc: denied { setopt } for pid=7631 comm="syz.2.607" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 151.969859][ T5937] usb 2-1: new low-speed USB device number 7 using dummy_hcd [ 152.077294][ T30] audit: type=1400 audit(1766374413.263:298): avc: denied { append } for pid=7636 comm="syz.0.609" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 152.142215][ T5937] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 152.154404][ T5937] usb 2-1: config 0 has no interface number 0 [ 152.165491][ T5937] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 152.178955][ T7643] netlink: 'syz.0.612': attribute type 8 has an invalid length. [ 152.187205][ T5937] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 152.198277][ T5937] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 152.225404][ T5937] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 152.246685][ T5937] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 152.269124][ T5937] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 152.299884][ T5937] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 152.317103][ T5937] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.339902][ T5896] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 152.358862][ T5937] usb 2-1: config 0 descriptor?? [ 152.374724][ T7618] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 152.386127][ T7618] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 152.467059][ T7650] xt_l2tp: v2 sid > 0xffff: 117440512 [ 152.474335][ T7650] netlink: 'syz.4.613': attribute type 10 has an invalid length. [ 152.482123][ T7650] netlink: 168 bytes leftover after parsing attributes in process `syz.4.613'. [ 152.509867][ T5896] usb 4-1: Using ep0 maxpacket: 32 [ 152.520875][ T5896] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.579973][ T5937] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 152.795365][ T5896] usb 4-1: config 0 interface 0 altsetting 16 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 152.829622][ T5937] usb 2-1: USB disconnect, device number 7 [ 152.836030][ T5896] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 152.862814][ T5937] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 152.869197][ T7653] IPVS: sh: FWM 3 0x00000003 - no destination available [ 152.875734][ T5896] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 152.879919][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 152.910512][ T5896] usb 4-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 152.911280][ T7653] netlink: 'syz.0.615': attribute type 27 has an invalid length. [ 152.933253][ T7640] delete_channel: no stack [ 152.948803][ T5896] usb 4-1: config 0 interface 0 has no altsetting 0 [ 152.957834][ T5896] usb 4-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 152.967131][ T5896] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.016350][ T5896] usb 4-1: config 0 descriptor?? [ 153.039137][ T7639] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 153.272111][ T7661] netlink: 'syz.4.618': attribute type 27 has an invalid length. [ 153.528411][ T5862] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 153.628410][ T30] audit: type=1400 audit(1766374414.813:299): avc: denied { block_suspend } for pid=7664 comm="syz.4.620" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 153.689844][ T5862] usb 3-1: Using ep0 maxpacket: 8 [ 153.706416][ T5862] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 153.725290][ T5862] usb 3-1: config 0 has no interface number 0 [ 153.727052][ T5896] hid-thrustmaster 0003:044F:B65D.0004: unknown main item tag 0x0 [ 153.736110][ T5862] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 153.756551][ T5862] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 153.757693][ T5896] hid-thrustmaster 0003:044F:B65D.0004: unknown main item tag 0x0 [ 153.779557][ T5896] hid-thrustmaster 0003:044F:B65D.0004: unknown main item tag 0x0 [ 153.787346][ T5862] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 153.787881][ T5896] hid-thrustmaster 0003:044F:B65D.0004: unknown main item tag 0x0 [ 153.807307][ T5896] hid-thrustmaster 0003:044F:B65D.0004: unknown main item tag 0x0 [ 153.809121][ T5862] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 153.877674][ T5896] hid-thrustmaster 0003:044F:B65D.0004: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.3-1/input0 [ 153.905083][ T5862] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 153.914486][ T5896] hid-thrustmaster 0003:044F:B65D.0004: setup data couldn't be sent [ 153.914743][ T5862] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.936653][ C1] hid-thrustmaster 0003:044F:B65D.0004: URB to get model id failed with error -71 [ 153.945162][ T5862] usb 3-1: config 0 descriptor?? [ 153.964565][ T5862] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 153.979968][ T938] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 153.988751][ T5896] usb 4-1: USB disconnect, device number 7 [ 154.131240][ T938] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 154.139415][ T938] usb 2-1: config 0 has no interface number 0 [ 154.157730][ T938] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 154.167558][ T938] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.190247][ T938] usb 2-1: Product: syz [ 154.194428][ T938] usb 2-1: Manufacturer: syz [ 154.219243][ T938] usb 2-1: SerialNumber: syz [ 154.228301][ T938] usb 2-1: config 0 descriptor?? [ 154.247367][ T5862] usb 3-1: USB disconnect, device number 8 [ 154.261831][ T5862] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 154.636196][ T7689] xt_l2tp: v2 sid > 0xffff: 117440512 [ 154.643421][ T7689] netlink: 'syz.4.627': attribute type 10 has an invalid length. [ 154.651235][ T7689] netlink: 168 bytes leftover after parsing attributes in process `syz.4.627'. [ 155.066528][ T938] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 155.080743][ T938] asix 2-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 155.100331][ T938] asix 2-1:0.251: probe with driver asix failed with error -71 [ 155.122660][ T938] usb 2-1: USB disconnect, device number 8 [ 155.269860][ T5862] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 155.341274][ T30] audit: type=1400 audit(1766374416.533:300): avc: denied { write } for pid=7698 comm="syz.4.633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 155.422371][ T30] audit: type=1400 audit(1766374416.613:301): avc: denied { associate } for pid=7702 comm="syz.4.635" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 155.442082][ T5862] usb 3-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 155.609818][ T5862] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.645154][ T5862] usb 3-1: config 0 descriptor?? [ 155.671804][ T5862] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 155.770151][ T7715] netlink: 32 bytes leftover after parsing attributes in process `syz.4.639'. [ 155.850066][ T7720] net_ratelimit: 4 callbacks suppressed [ 155.850093][ T7720] IPVS: sh: FWM 3 0x00000003 - no destination available [ 155.864423][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 155.883783][ T7720] IPVS: sh: FWM 3 0x00000003 - no destination available [ 155.891298][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 155.924817][ T7720] netlink: 'syz.1.640': attribute type 27 has an invalid length. [ 156.399923][ T6079] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 156.539987][ T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 156.561211][ T6079] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 156.572624][ T6079] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.586265][ T6079] usb 1-1: config 0 descriptor?? [ 156.596186][ T6079] cp210x 1-1:0.0: cp210x converter detected [ 156.700002][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 156.712264][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.729879][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.748474][ T9] usb 2-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 156.757802][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.775065][ T5862] gspca_sunplus: reg_w_riv err -71 [ 156.782780][ T5862] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 156.793082][ T5862] usb 3-1: USB disconnect, device number 9 [ 156.800887][ T9] usb 2-1: config 0 descriptor?? [ 156.888373][ T7749] xt_l2tp: v2 sid > 0xffff: 117440512 [ 156.896161][ T7749] netlink: 'syz.3.652': attribute type 10 has an invalid length. [ 156.903986][ T7749] netlink: 168 bytes leftover after parsing attributes in process `syz.3.652'. [ 157.194014][ T6079] usb 1-1: cp210x converter now attached to ttyUSB0 [ 157.243609][ T6079] usb 1-1: USB disconnect, device number 6 [ 157.269018][ T7751] netlink: 'syz.4.653': attribute type 2 has an invalid length. [ 157.332384][ T6079] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 157.343315][ T6079] cp210x 1-1:0.0: device disconnected [ 157.523116][ T9] bigben 0003:146B:0902.0005: unexpected rdesc, please submit for review [ 157.611017][ T9] bigben 0003:146B:0902.0005: item fetching failed at offset 3/5 [ 157.702010][ T7756] IPVS: sh: FWM 3 0x00000003 - no destination available [ 157.711823][ T9] bigben 0003:146B:0902.0005: parse failed [ 157.724804][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 157.756995][ T7756] IPVS: sh: FWM 3 0x00000003 - no destination available [ 157.765223][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 157.791403][ T7756] netlink: 'syz.3.654': attribute type 27 has an invalid length. [ 157.937968][ T9] bigben 0003:146B:0902.0005: probe with driver bigben failed with error -22 [ 157.980972][ T9] usb 2-1: USB disconnect, device number 9 [ 158.162264][ T30] audit: type=1400 audit(1766374419.353:302): avc: denied { bind } for pid=7763 comm="syz.3.657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 158.390007][ T938] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 158.493463][ T7773] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 158.607788][ T938] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.620352][ T30] audit: type=1400 audit(1766374419.813:303): avc: denied { connect } for pid=7772 comm="syz.3.661" laddr=::1 lport=11809 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 158.647393][ T938] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 158.721798][ T938] usb 1-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.00 [ 158.741745][ T7776] IPVS: sh: FWM 3 0x00000003 - no destination available [ 158.749002][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 158.765169][ T7776] netlink: 'syz.1.662': attribute type 27 has an invalid length. [ 158.865173][ T30] audit: type=1400 audit(1766374420.053:304): avc: denied { name_bind } for pid=7777 comm="syz.3.663" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 158.987206][ T938] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.024024][ T938] usb 1-1: config 0 descriptor?? [ 159.478457][ T938] stadia 0003:18D1:9400.0006: item fetching failed at offset 5/7 [ 159.515635][ T30] audit: type=1400 audit(1766374420.703:305): avc: denied { audit_write } for pid=7781 comm="syz.2.665" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 159.515883][ T938] stadia 0003:18D1:9400.0006: parse failed [ 159.632770][ T938] stadia 0003:18D1:9400.0006: probe with driver stadia failed with error -22 [ 159.687017][ T938] usb 1-1: USB disconnect, device number 7 [ 160.056690][ T7795] batadv_slave_0: Caught tx_queue_len zero misconfig [ 160.187163][ T30] audit: type=1326 audit(1766374421.373:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7801 comm="syz.4.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f691798f749 code=0x7ffc0000 [ 160.269924][ T30] audit: type=1326 audit(1766374421.403:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7801 comm="syz.4.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f691798f749 code=0x7ffc0000 [ 160.339880][ T30] audit: type=1326 audit(1766374421.403:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7801 comm="syz.4.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f691798f749 code=0x7ffc0000 [ 160.406710][ T30] audit: type=1326 audit(1766374421.403:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7801 comm="syz.4.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f691798f749 code=0x7ffc0000 [ 160.449899][ T30] audit: type=1326 audit(1766374421.403:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7801 comm="syz.4.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f691798f749 code=0x7ffc0000 [ 160.479130][ T7811] veth1_to_team: Caught tx_queue_len zero misconfig [ 160.497065][ T30] audit: type=1326 audit(1766374421.403:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7801 comm="syz.4.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f691798f749 code=0x7ffc0000 [ 160.539864][ T30] audit: type=1326 audit(1766374421.403:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7801 comm="syz.4.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f691798f749 code=0x7ffc0000 [ 160.577679][ T30] audit: type=1326 audit(1766374421.403:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7801 comm="syz.4.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f691798f749 code=0x7ffc0000 [ 160.623831][ T30] audit: type=1326 audit(1766374421.403:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7801 comm="syz.4.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f691798f749 code=0x7ffc0000 [ 160.673897][ T938] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 160.726523][ T30] audit: type=1326 audit(1766374421.403:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7801 comm="syz.4.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7f691798f749 code=0x7ffc0000 [ 161.268473][ T7826] netlink: 'syz.2.679': attribute type 2 has an invalid length. [ 161.510635][ T30] audit: type=1326 audit(1766374421.403:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7801 comm="syz.4.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f691798f749 code=0x7ffc0000 [ 161.539852][ T30] audit: type=1326 audit(1766374421.403:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7801 comm="syz.4.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f691798f749 code=0x7ffc0000 [ 161.566250][ T30] audit: type=1326 audit(1766374421.403:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7801 comm="syz.4.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f691798f749 code=0x7ffc0000 [ 161.611141][ T938] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.625908][ T938] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.636203][ T938] usb 1-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 161.659862][ T938] usb 1-1: config 0 interface 0 has no altsetting 0 [ 161.669967][ T938] usb 1-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 161.679007][ T938] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.749845][ T938] usb 1-1: config 0 descriptor?? [ 162.031984][ T7837] netlink: 48 bytes leftover after parsing attributes in process `syz.1.684'. [ 162.237354][ T938] magicmouse 0003:05AC:0265.0007: hidraw0: USB HID v0.09 Device [HID 05ac:0265] on usb-dummy_hcd.0-1/input0 [ 162.370006][ T5817] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 162.378496][ T5817] Bluetooth: hci0: Injecting HCI hardware error event [ 162.382217][ T7847] xt_socket: unknown flags 0x4 [ 162.386369][ T5829] Bluetooth: hci0: hardware error 0x00 [ 162.435978][ T938] magicmouse 0003:05AC:0265.0007: magicmouse input not registered [ 162.518744][ T938] magicmouse 0003:05AC:0265.0007: probe with driver magicmouse failed with error -12 [ 162.549224][ T938] usb 1-1: USB disconnect, device number 8 [ 162.775973][ T7848] fido_id[7848]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 163.235690][ T7856] netlink: 'syz.3.689': attribute type 1 has an invalid length. [ 163.471208][ T7862] xt_l2tp: v2 sid > 0xffff: 117440512 [ 163.478979][ T7862] netlink: 'syz.1.690': attribute type 10 has an invalid length. [ 163.486792][ T7862] netlink: 168 bytes leftover after parsing attributes in process `syz.1.690'. [ 164.280422][ T6079] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 164.470039][ T5829] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 164.486674][ T7886] xt_l2tp: v2 sid > 0xffff: 117440512 [ 164.493909][ T7886] netlink: 'syz.2.695': attribute type 10 has an invalid length. [ 164.501828][ T7886] netlink: 168 bytes leftover after parsing attributes in process `syz.2.695'. [ 164.610160][ T6079] usb 4-1: Using ep0 maxpacket: 32 [ 164.828136][ T6079] usb 4-1: config 0 has no interfaces? [ 164.845792][ T6079] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 164.861006][ T6079] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.871629][ T6079] usb 4-1: config 0 descriptor?? [ 164.885214][ T7888] bond0: Caught tx_queue_len zero misconfig [ 165.155370][ T7869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.180955][ T7869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.196314][ T938] usb 4-1: USB disconnect, device number 8 [ 165.304258][ T7905] Bluetooth: MGMT ver 1.23 [ 165.424482][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 165.424496][ T30] audit: type=1400 audit(1766374426.613:325): avc: denied { getopt } for pid=7909 comm="syz.4.706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 165.572737][ T30] audit: type=1400 audit(1766374426.643:326): avc: denied { ioctl } for pid=7909 comm="syz.4.706" path="socket:[15223]" dev="sockfs" ino=15223 ioctlcmd=0x89f2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 165.799865][ T938] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 165.868345][ T7925] lo: Caught tx_queue_len zero misconfig [ 165.961185][ T30] audit: type=1400 audit(1766374427.153:327): avc: denied { ioctl } for pid=7928 comm="syz.2.715" path="socket:[16107]" dev="sockfs" ino=16107 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 165.996089][ T938] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 166.016871][ T938] usb 4-1: config 0 has no interface number 0 [ 166.017771][ T7933] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 166.031357][ T938] usb 4-1: config 0 interface 184 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 166.056065][ T30] audit: type=1400 audit(1766374427.233:328): avc: denied { ioctl } for pid=7932 comm="syz.1.716" path="socket:[16123]" dev="sockfs" ino=16123 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 166.094121][ T938] usb 4-1: config 0 interface 184 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 166.109929][ T938] usb 4-1: config 0 interface 184 has no altsetting 0 [ 166.173144][ T5829] Bluetooth: to_multiplier 58225 > 3200 [ 166.194206][ T938] usb 4-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=69.ee [ 166.258220][ T938] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.278499][ T938] usb 4-1: Product: syz [ 166.288791][ T938] usb 4-1: Manufacturer: syz [ 166.301710][ T938] usb 4-1: SerialNumber: syz [ 166.325267][ T938] usb 4-1: config 0 descriptor?? [ 166.347309][ T938] ttusbir 4-1:0.184: cannot find expected altsetting [ 166.379885][ T6079] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 166.490168][ T5937] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 166.519099][ T7953] net_ratelimit: 2 callbacks suppressed [ 166.519130][ T7953] IPVS: sh: FWM 3 0x00000003 - no destination available [ 166.533553][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 166.541447][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 166.549761][ T6079] usb 5-1: Using ep0 maxpacket: 8 [ 166.558253][ T6079] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 166.570581][ T6079] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 166.585782][ T6079] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.595858][ T7953] IPVS: sh: FWM 3 0x00000003 - no destination available [ 166.604968][ T6079] usb 5-1: config 0 descriptor?? [ 166.606742][ T938] usb 4-1: USB disconnect, device number 9 [ 166.629179][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 166.636290][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 166.651386][ T5937] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 166.721658][ T5937] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 166.732905][ T5937] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 166.733431][ T7953] netlink: 'syz.2.724': attribute type 27 has an invalid length. [ 166.769474][ T5937] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.830627][ T5937] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 166.843514][ T5937] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 166.843719][ T6079] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 166.863566][ T5937] usb 2-1: Product: syz [ 166.869983][ T5937] usb 2-1: Manufacturer: syz [ 166.896513][ T5937] cdc_wdm 2-1:1.0: skipping garbage [ 166.908651][ T5937] cdc_wdm 2-1:1.0: skipping garbage [ 166.924193][ T5937] cdc_wdm 2-1:1.0: cdc-wdm1: USB WDM device [ 166.947148][ T5937] cdc_wdm 2-1:1.0: Unknown control protocol [ 167.256386][ T6079] usb 5-1: USB disconnect, device number 10 [ 167.337833][ T7959] xt_socket: unknown flags 0x4 [ 167.411651][ T7963] ======================================================= [ 167.411651][ T7963] WARNING: The mand mount option has been deprecated and [ 167.411651][ T7963] and is ignored by this kernel. Remove the mand [ 167.411651][ T7963] option from the mount to silence this warning. [ 167.411651][ T7963] ======================================================= [ 167.462031][ T30] audit: type=1400 audit(1766374428.653:329): avc: denied { mount } for pid=7962 comm="syz.2.728" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 167.521712][ T30] audit: type=1400 audit(1766374428.673:330): avc: denied { mounton } for pid=7962 comm="syz.2.728" path="/148/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 167.555264][ T7968] tun0: tun_chr_ioctl cmd 2148553947 [ 167.580178][ T30] audit: type=1400 audit(1766374428.673:331): avc: denied { mount } for pid=7962 comm="syz.2.728" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 167.602313][ T30] audit: type=1400 audit(1766374428.683:332): avc: denied { remount } for pid=7962 comm="syz.2.728" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 167.717114][ T30] audit: type=1400 audit(1766374428.683:333): avc: denied { map } for pid=7964 comm="syz.3.729" path="socket:[16194]" dev="sockfs" ino=16194 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 167.740568][ T30] audit: type=1400 audit(1766374428.683:334): avc: denied { read } for pid=7964 comm="syz.3.729" path="socket:[16194]" dev="sockfs" ino=16194 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 168.217318][ T5829] Bluetooth: hci1: command tx timeout [ 168.238026][ T7972] ceph: No mds server is up or the cluster is laggy [ 168.244963][ T5937] libceph: connect (1)[c::]:6789 error -101 [ 168.253042][ T7973] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 168.275175][ T5937] libceph: mon0 (1)[c::]:6789 connect error [ 169.223665][ T7992] xt_l2tp: v2 sid > 0xffff: 117440512 [ 169.230870][ T7992] netlink: 'syz.4.736': attribute type 10 has an invalid length. [ 169.238673][ T7992] netlink: 168 bytes leftover after parsing attributes in process `syz.4.736'. [ 169.711328][ T5937] usb 2-1: USB disconnect, device number 10 [ 169.929732][ T8005] IPVS: sh: FWM 3 0x00000003 - no destination available [ 169.980042][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 169.987731][ T8006] IPVS: sh: FWM 3 0x00000003 - no destination available [ 170.033253][ T8005] netlink: 'syz.0.739': attribute type 27 has an invalid length. [ 170.533957][ T8020] netlink: 168 bytes leftover after parsing attributes in process `syz.4.748'. [ 170.572089][ T8023] netlink: 28 bytes leftover after parsing attributes in process `syz.2.749'. [ 170.611509][ T8023] netlink: 28 bytes leftover after parsing attributes in process `syz.2.749'. [ 171.270337][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 171.270375][ T30] audit: type=1400 audit(1766374432.443:338): avc: denied { setopt } for pid=8030 comm="syz.4.755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 171.400194][ T5937] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 171.481144][ T8039] netlink: 8 bytes leftover after parsing attributes in process `syz.4.756'. [ 171.507279][ T8039] xt_socket: unknown flags 0x4 [ 171.658219][ T5937] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 171.668807][ T5937] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 171.678334][ T30] audit: type=1400 audit(1766374432.873:339): avc: denied { sqpoll } for pid=8042 comm="syz.1.758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 171.698558][ T5937] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 171.832950][ T8046] ceph: No mds server is up or the cluster is laggy [ 171.864241][ T938] libceph: connect (1)[c::]:6789 error -101 [ 171.874614][ T938] libceph: mon0 (1)[c::]:6789 connect error [ 171.894560][ T8049] net_ratelimit: 1 callbacks suppressed [ 171.894583][ T8049] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 171.978428][ T5937] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.175902][ T8052] IPVS: sh: FWM 3 0x00000003 - no destination available [ 172.184043][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 172.192692][ T8052] IPVS: sh: FWM 3 0x00000003 - no destination available [ 172.200625][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 172.209497][ T8052] netlink: 'syz.0.759': attribute type 27 has an invalid length. [ 172.282808][ T5937] usb 3-1: config 0 descriptor?? [ 172.323999][ T5937] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 172.470653][ T5937] dvb-usb: bulk message failed: -22 (3/0) [ 172.518035][ T5937] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 172.546665][ T8054] netlink: 8 bytes leftover after parsing attributes in process `syz.1.760'. [ 172.562901][ T8029] dvb-usb: bulk message failed: -22 (2/0) [ 172.571939][ T5937] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 172.578955][ T5937] usb 3-1: media controller created [ 172.608133][ T5937] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 172.636347][ T5937] dvb-usb: bulk message failed: -22 (6/0) [ 172.649419][ T5937] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 172.708663][ T5937] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input12 [ 172.756081][ T8060] IPVS: sh: FWM 3 0x00000003 - no destination available [ 172.763739][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 172.786583][ T8060] IPVS: sh: FWM 3 0x00000003 - no destination available [ 172.793980][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 172.808166][ T8060] netlink: 'syz.0.762': attribute type 27 has an invalid length. [ 172.898902][ T5937] dvb-usb: schedule remote query interval to 150 msecs. [ 172.988444][ T5937] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 173.021532][ T5937] usb 3-1: USB disconnect, device number 10 [ 173.123878][ T5937] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 174.205453][ T8078] IPVS: sh: FWM 3 0x00000003 - no destination available [ 174.216493][ T8078] netlink: 'syz.3.769': attribute type 27 has an invalid length. [ 174.239886][ T9] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 174.247467][ T6079] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 174.399862][ T5937] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 174.399942][ T6079] usb 1-1: Using ep0 maxpacket: 16 [ 174.415008][ T6079] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 174.423633][ T9] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 174.431916][ T6079] usb 1-1: config 0 has no interface number 0 [ 174.438508][ T9] usb 2-1: config 0 has no interface number 0 [ 174.444825][ T6079] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.456095][ T9] usb 2-1: config 0 interface 41 has no altsetting 0 [ 174.465390][ T6079] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.475747][ T6079] usb 1-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 174.485141][ T6079] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.495587][ T9] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 174.505086][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.515193][ T6079] usb 1-1: config 0 descriptor?? [ 174.526140][ T9] usb 2-1: Product: syz [ 174.534272][ T9] usb 2-1: Manufacturer: syz [ 174.539387][ T9] usb 2-1: SerialNumber: syz [ 174.548709][ T9] usb 2-1: config 0 descriptor?? [ 174.559845][ T5937] usb 3-1: Using ep0 maxpacket: 8 [ 174.567338][ T5937] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 174.575732][ T5937] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 174.585534][ T5937] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 174.595308][ T5937] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 174.606300][ T5937] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 174.619528][ T5937] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 174.628618][ T5937] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.855837][ T5937] usb 3-1: GET_CAPABILITIES returned 0 [ 174.870204][ T5937] usbtmc 3-1:16.0: can't read capabilities [ 175.087908][ T5937] usb 3-1: USB disconnect, device number 11 [ 175.135737][ T6079] input: HID 28bd:0071 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.1/0003:28BD:0071.0008/input/input13 [ 175.214948][ T6079] input: HID 28bd:0071 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.1/0003:28BD:0071.0008/input/input14 [ 175.236662][ T5862] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 175.257762][ T6079] uclogic 0003:28BD:0071.0008: input,hidraw0: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.0-1/input1 [ 175.341659][ T938] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 175.354312][ T6079] usb 1-1: USB disconnect, device number 9 [ 175.362739][ T9] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffb9 [ 175.378804][ T9] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71 [ 175.389947][ T5862] usb 5-1: Using ep0 maxpacket: 32 [ 175.396307][ T5862] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 175.412592][ T9] usb 2-1: USB disconnect, device number 11 [ 175.424107][ T5862] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.436304][ T5862] usb 5-1: config 0 descriptor?? [ 175.502869][ T938] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 175.513898][ T938] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 175.524211][ T938] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 175.533287][ T938] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.543633][ T8085] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 175.553223][ T938] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 175.648599][ T5862] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 175.658370][ T5862] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 175.672857][ T5862] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 175.680096][ T5862] usb 5-1: media controller created [ 175.694408][ T5862] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 175.734512][ T8093] netlink: 'syz.2.775': attribute type 29 has an invalid length. [ 175.786832][ T9] usb 4-1: USB disconnect, device number 10 [ 175.857506][ T5862] az6027: usb out operation failed. (-71) [ 175.864276][ T5862] az6027: usb out operation failed. (-71) [ 175.881902][ T5862] stb0899_attach: Driver disabled by Kconfig [ 175.898562][ T5862] az6027: no front-end attached [ 175.898562][ T5862] [ 175.919265][ T5862] az6027: usb out operation failed. (-71) [ 175.929029][ T5862] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 175.939245][ T5862] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input15 [ 175.979028][ T5862] dvb-usb: schedule remote query interval to 400 msecs. [ 175.989218][ T5862] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 176.002639][ T5862] usb 5-1: USB disconnect, device number 11 [ 176.041015][ T938] kernel write not supported for file /vbi3 (pid: 938 comm: kworker/1:2) [ 176.056630][ T5862] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 176.193284][ T8103] xt_socket: unknown flags 0x4 [ 176.383275][ T8109] warning: `syz.0.781' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 176.685888][ T30] audit: type=1400 audit(1766374437.873:340): avc: denied { name_connect } for pid=8119 comm="syz.2.788" dest=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 177.004433][ T30] audit: type=1400 audit(1766374438.193:341): avc: denied { connect } for pid=8127 comm="syz.4.790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 177.153316][ T30] audit: type=1400 audit(1766374438.343:342): avc: denied { write } for pid=8130 comm="syz.4.793" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 177.246002][ T30] audit: type=1400 audit(1766374438.373:343): avc: denied { map } for pid=8129 comm="syz.3.791" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 177.304715][ T30] audit: type=1400 audit(1766374438.373:344): avc: denied { execute } for pid=8129 comm="syz.3.791" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 177.359458][ T30] audit: type=1400 audit(1766374438.393:345): avc: denied { read } for pid=8130 comm="syz.4.793" path="socket:[16852]" dev="sockfs" ino=16852 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 177.437796][ T8146] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input16 [ 177.799875][ T5862] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 177.815127][ T30] audit: type=1400 audit(1766374439.003:346): avc: denied { ioctl } for pid=8160 comm="syz.3.804" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 ioctlcmd=0x940e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 177.949913][ T5862] usb 2-1: Using ep0 maxpacket: 8 [ 177.958790][ T5862] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 177.993013][ T5862] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 178.038331][ T5862] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 178.088135][ T5862] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 178.118345][ T5862] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 178.148051][ T5862] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 178.166980][ T5862] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.199403][ T8167] net_ratelimit: 3 callbacks suppressed [ 178.199427][ T8167] IPVS: sh: FWM 3 0x00000003 - no destination available [ 178.214913][ T8167] IPVS: sh: FWM 3 0x00000003 - no destination available [ 178.243231][ T8167] netlink: 'syz.4.806': attribute type 27 has an invalid length. [ 178.433336][ T5862] usb 2-1: GET_CAPABILITIES returned 0 [ 178.740812][ T5862] usbtmc 2-1:16.0: can't read capabilities [ 178.770184][ T30] audit: type=1400 audit(1766374439.953:347): avc: denied { mount } for pid=8168 comm="syz.0.807" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 178.798643][ T5862] usb 2-1: USB disconnect, device number 12 [ 178.928270][ T30] audit: type=1400 audit(1766374440.063:348): avc: denied { unmount } for pid=5812 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 179.048233][ T30] audit: type=1400 audit(1766374440.233:349): avc: denied { name_bind } for pid=8176 comm="syz.0.810" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 179.749843][ T5937] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 179.919827][ T5937] usb 4-1: Using ep0 maxpacket: 16 [ 179.930262][ T5862] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 179.983271][ T5937] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 180.020236][ T5937] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 180.100601][ T5937] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 24676, setting to 1024 [ 180.150152][ T5937] usb 4-1: config 0 interface 0 has no altsetting 0 [ 180.213561][ T5937] usb 4-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 180.235862][ T5937] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.267234][ T5937] usb 4-1: Product: syz [ 180.293906][ T5937] usb 4-1: Manufacturer: syz [ 180.312955][ T5937] usb 4-1: SerialNumber: syz [ 180.357124][ T5937] usb 4-1: config 0 descriptor?? [ 180.698204][ T5937] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input17 [ 180.847664][ T5862] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 180.865805][ T5862] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 180.875362][ T5862] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.888123][ T5862] usb 2-1: Product: syz [ 180.899864][ T5862] usb 2-1: Manufacturer: syz [ 180.902834][ T5937] usb 4-1: USB disconnect, device number 11 [ 180.908314][ T6595] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -19 [ 180.926212][ T5862] usb 2-1: SerialNumber: syz [ 180.936920][ T5862] usb 2-1: config 0 descriptor?? [ 180.958517][ T5862] hub 2-1:0.0: bad descriptor, ignoring hub [ 181.034212][ T6595] udevd[6595]: setting owner of /dev/input/event5 to uid=0, gid=104 failed: No such file or directory [ 181.054520][ T8204] netlink: 'syz.2.818': attribute type 2 has an invalid length. [ 181.119747][ T5862] hub 2-1:0.0: probe with driver hub failed with error -5 [ 181.299158][ T8183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.433126][ T8183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.605949][ T5862] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input18 [ 182.724466][ T5862] usb 2-1: reset full-speed USB device number 13 using dummy_hcd [ 182.746630][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 182.746643][ T30] audit: type=1400 audit(1766374443.933:353): avc: denied { bind } for pid=8217 comm="syz.3.823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 182.783763][ T5862] usb 2-1: device reset changed ep0 maxpacket size! [ 182.802842][ T5862] usb 2-1: USB disconnect, device number 13 [ 182.976018][ T8221] kvm: apic: phys broadcast and lowest prio [ 183.063402][ T8226] xt_socket: unknown flags 0x4 [ 183.292219][ T30] audit: type=1400 audit(1766374444.483:354): avc: denied { bind } for pid=8229 comm="syz.4.828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 183.372664][ T5862] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 183.581472][ T30] audit: type=1400 audit(1766374444.483:355): avc: denied { name_bind } for pid=8229 comm="syz.4.828" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 183.607914][ T30] audit: type=1400 audit(1766374444.483:356): avc: denied { node_bind } for pid=8229 comm="syz.4.828" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 184.073609][ T8236] IPVS: sh: FWM 3 0x00000003 - no destination available [ 184.081135][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 184.091245][ T8236] IPVS: sh: FWM 3 0x00000003 - no destination available [ 184.098410][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 184.107917][ T8236] netlink: 'syz.3.829': attribute type 27 has an invalid length. [ 184.327759][ T5862] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 184.358280][ T5862] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 184.389740][ T5862] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.409748][ T5862] usb 2-1: config 0 descriptor?? [ 184.415960][ T8214] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 184.543149][ T30] audit: type=1400 audit(1766374445.733:357): avc: denied { ioctl } for pid=8240 comm="syz.4.832" path="socket:[17133]" dev="sockfs" ino=17133 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 184.992419][ T5862] elan 0003:04F3:0755.0009: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 185.194012][ T8259] netlink: 830 bytes leftover after parsing attributes in process `syz.4.839'. [ 185.303981][ T5862] usb 2-1: USB disconnect, device number 14 [ 185.572187][ T5828] Bluetooth: hci2: command 0x0406 tx timeout [ 185.572686][ T5819] Bluetooth: hci1: command 0x0406 tx timeout [ 185.822551][ T8267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.836492][ T8267] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.081299][ T8267] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 186.115732][ T8265] ceph: No mds server is up or the cluster is laggy [ 186.124169][ T5937] libceph: connect (1)[c::]:6789 error -101 [ 186.133959][ T5937] libceph: mon0 (1)[c::]:6789 connect error [ 186.542844][ T8272] ceph: No mds server is up or the cluster is laggy [ 186.568774][ T8273] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 186.785024][ T5937] libceph: connect (1)[c::]:6789 error -101 [ 186.809927][ T5937] libceph: mon0 (1)[c::]:6789 connect error [ 186.948873][ T8281] input: syz0 as /devices/virtual/input/input19 [ 187.079922][ T5862] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 187.320095][ T5937] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 187.360337][ T5862] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 187.371580][ T5862] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 187.386046][ T5862] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 187.399860][ T5862] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.415352][ T5862] usb 5-1: Product: syz [ 187.425996][ T5862] usb 5-1: Manufacturer: syz [ 187.441409][ T5862] usb 5-1: SerialNumber: syz [ 187.479853][ T5937] usb 2-1: Using ep0 maxpacket: 16 [ 187.488669][ T5937] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 187.499296][ T5937] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.507503][ T5937] usb 2-1: Product: syz [ 187.513821][ T5937] usb 2-1: Manufacturer: syz [ 187.518517][ T5937] usb 2-1: SerialNumber: syz [ 187.552070][ T5937] usb 2-1: config 0 descriptor?? [ 187.706491][ T8303] netlink: 'syz.2.851': attribute type 2 has an invalid length. [ 187.776794][ T8304] loop7: detected capacity change from 0 to 8 [ 188.034140][ T5937] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 188.081891][ T5937] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 188.108567][ T5937] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 188.125065][ T5937] usb 2-1: media controller created [ 188.143800][ T5937] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 188.235066][ T8285] dtv5100: wlen = 0, aborting. [ 188.322019][ T5937] zl10353_read_register: readreg error (reg=127, ret==0) [ 188.346466][ T5937] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 188.409836][ T938] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 188.474903][ T5937] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 188.576834][ T5937] usb 2-1: USB disconnect, device number 15 [ 188.630628][ T938] usb 4-1: Using ep0 maxpacket: 16 [ 188.637715][ T938] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 188.650128][ T938] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 188.697232][ T5937] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 188.715980][ T938] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 188.725293][ T938] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.734554][ T938] usb 4-1: Product: syz [ 188.741133][ T938] usb 4-1: Manufacturer: syz [ 188.759662][ T938] usb 4-1: SerialNumber: syz [ 188.765334][ T5862] cdc_ncm 5-1:1.0: bind() failure [ 188.779371][ T938] usb 4-1: config 0 descriptor?? [ 188.785911][ T5862] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 188.792408][ T938] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 188.804255][ T938] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 188.814342][ T5862] cdc_ncm 5-1:1.1: bind() failure [ 188.835582][ T30] audit: type=1400 audit(1766374450.023:358): avc: denied { setopt } for pid=8311 comm="syz.0.855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 188.856089][ T8312] netlink: 12 bytes leftover after parsing attributes in process `syz.0.855'. [ 188.899942][ T30] audit: type=1400 audit(1766374450.053:359): avc: denied { nlmsg_read } for pid=8311 comm="syz.0.855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 188.922777][ T5862] usb 5-1: USB disconnect, device number 12 [ 189.005098][ T9] kernel read not supported for file /rfkill (pid: 9 comm: kworker/0:0) [ 189.357159][ T8322] xt_l2tp: v2 sid > 0xffff: 117440512 [ 189.741814][ T938] em28xx 4-1:0.0: unknown em28xx chip ID (47) [ 189.806708][ T938] em28xx 4-1:0.0: Config register raw data: 0x2f [ 189.814021][ T938] em28xx 4-1:0.0: I2S Audio (3 sample rate(s)) [ 189.826919][ T938] em28xx 4-1:0.0: No AC97 audio processor [ 190.031902][ T938] usb 4-1: USB disconnect, device number 12 [ 190.063764][ T8330] syz.0.862 uses obsolete (PF_INET,SOCK_PACKET) [ 190.209874][ T5937] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 190.217825][ T8334] capability: warning: `syz.4.863' uses 32-bit capabilities (legacy support in use) [ 190.390354][ T5937] usb 2-1: Using ep0 maxpacket: 8 [ 190.399409][ T5937] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 190.410957][ T5937] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 190.421122][ T5937] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 190.431195][ T5937] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.450739][ T5937] usb 2-1: config 0 descriptor?? [ 190.540084][ T5862] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 190.660208][ T30] audit: type=1400 audit(1766374451.853:360): avc: denied { ioctl } for pid=8326 comm="syz.1.860" path="socket:[18400]" dev="sockfs" ino=18400 ioctlcmd=0x8b2c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 190.660846][ T9] usb 2-1: USB disconnect, device number 16 [ 190.722258][ T8347] IPVS: sh: FWM 3 0x00000003 - no destination available [ 190.729885][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 190.741808][ T8347] IPVS: sh: FWM 3 0x00000003 - no destination available [ 190.749154][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 190.759363][ T8347] netlink: 'syz.3.867': attribute type 27 has an invalid length. [ 190.796297][ T5862] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 190.808371][ T5862] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 190.918043][ T5862] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 190.940046][ T5862] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 190.977936][ T5862] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 190.987172][ T5862] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.022565][ T5862] usb 5-1: config 0 descriptor?? [ 191.274074][ T8351] netlink: 28 bytes leftover after parsing attributes in process `syz.1.869'. [ 191.290439][ T8351] netlink: 'syz.1.869': attribute type 7 has an invalid length. [ 191.311262][ T8351] netlink: 'syz.1.869': attribute type 8 has an invalid length. [ 191.319272][ T8351] netlink: 4 bytes leftover after parsing attributes in process `syz.1.869'. [ 191.352559][ T8351] erspan0: entered promiscuous mode [ 191.366168][ T8351] gretap0: entered promiscuous mode [ 191.385414][ T8351] erspan0: left promiscuous mode [ 191.394787][ T8351] gretap0: left promiscuous mode [ 191.527199][ T5862] plantronics 0003:047F:FFFF.000A: ignoring exceeding usage max [ 191.609027][ T8357] xt_l2tp: v2 sid > 0xffff: 117440512 [ 191.615897][ T8357] netlink: 'syz.0.871': attribute type 10 has an invalid length. [ 191.623735][ T8357] netlink: 168 bytes leftover after parsing attributes in process `syz.0.871'. [ 191.972393][ T5862] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 192.061842][ T5862] usb 5-1: USB disconnect, device number 13 [ 192.177807][ T30] audit: type=1400 audit(1766374453.363:361): avc: denied { read } for pid=8361 comm="syz.1.873" path="socket:[18451]" dev="sockfs" ino=18451 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 192.755399][ T8360] fido_id[8360]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 193.072450][ T8379] IPVS: sh: FWM 3 0x00000003 - no destination available [ 193.079468][ C1] IPVS: sh: FWM 3 0x00000003 - no destination available [ 193.086602][ C1] IPVS: sh: FWM 3 0x00000003 - no destination available [ 193.095460][ T8379] IPVS: sh: FWM 3 0x00000003 - no destination available [ 193.102472][ C1] IPVS: sh: FWM 3 0x00000003 - no destination available [ 193.109569][ C1] IPVS: sh: FWM 3 0x00000003 - no destination available [ 193.117363][ T8379] netlink: 'syz.2.880': attribute type 27 has an invalid length. [ 193.284498][ T30] audit: type=1400 audit(1766374454.473:362): avc: denied { write } for pid=8386 comm="syz.2.882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 193.303809][ T8387] vcan0: tx address claim with different name [ 193.348624][ T30] audit: type=1400 audit(1766374454.533:363): avc: denied { ioctl } for pid=8374 comm="syz.0.877" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x6209 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 193.403800][ T30] audit: type=1400 audit(1766374454.593:364): avc: denied { accept } for pid=8389 comm="syz.2.884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 193.447018][ T30] audit: type=1400 audit(1766374454.633:365): avc: denied { write } for pid=8389 comm="syz.2.884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 193.739637][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.745958][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.803111][ T5817] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 193.820883][ T5817] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 193.828504][ T5817] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 193.836629][ T5817] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 193.844126][ T5817] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 194.009879][ T9] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 194.478144][ T8402] chnl_net:caif_netlink_parms(): no params data found [ 194.499151][ T38] bridge_slave_1: left allmulticast mode [ 194.507571][ T38] bridge_slave_1: left promiscuous mode [ 194.520881][ T5862] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 194.522146][ T38] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.542001][ T38] bridge_slave_0: left allmulticast mode [ 194.547682][ T38] bridge_slave_0: left promiscuous mode [ 194.553964][ T38] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.615026][ T9] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 194.628976][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 194.637832][ T9] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 194.647912][ T9] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 194.656218][ T9] usb 5-1: Product: syz [ 194.660658][ T9] usb 5-1: Manufacturer: syz [ 194.665354][ T9] usb 5-1: SerialNumber: syz [ 194.679945][ T5862] usb 1-1: Using ep0 maxpacket: 8 [ 194.695908][ T5862] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 194.785629][ T9] usb 5-1: config 0 descriptor?? [ 194.799746][ T5862] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 194.809752][ T5862] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 194.814242][ T9] usb 5-1: selecting invalid altsetting 0 [ 194.830436][ T5862] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 194.848723][ T5862] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 194.896394][ T5862] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 194.906070][ T5862] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.974844][ T38] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 194.985597][ T38] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 194.995059][ T38] bond0 (unregistering): Released all slaves [ 195.041484][ T8398] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 195.049584][ T8398] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 195.068993][ T38] : left promiscuous mode [ 195.090830][ T8398] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 195.110064][ T5937] usb 5-1: USB disconnect, device number 14 [ 195.218522][ T30] audit: type=1400 audit(1766374456.403:366): avc: denied { search } for pid=5482 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 195.246605][ T30] audit: type=1400 audit(1766374456.403:367): avc: denied { search } for pid=5482 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 195.269841][ T30] audit: type=1400 audit(1766374456.403:368): avc: denied { search } for pid=5482 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 195.292023][ T30] audit: type=1400 audit(1766374456.403:369): avc: denied { read } for pid=5482 comm="dhcpcd" name="n100" dev="tmpfs" ino=3683 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 195.313872][ T30] audit: type=1400 audit(1766374456.403:370): avc: denied { open } for pid=5482 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=3683 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 195.366965][ T30] audit: type=1400 audit(1766374456.403:371): avc: denied { getattr } for pid=5482 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=3683 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 195.538593][ T8402] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.547096][ T8402] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.557273][ T8402] bridge_slave_0: entered allmulticast mode [ 195.569706][ T8402] bridge_slave_0: entered promiscuous mode [ 195.612524][ T8402] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.621543][ T8402] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.632669][ T8402] bridge_slave_1: entered allmulticast mode [ 195.641713][ T8402] bridge_slave_1: entered promiscuous mode [ 195.665660][ T38] hsr_slave_0: left promiscuous mode [ 195.676802][ T38] hsr_slave_1: left promiscuous mode [ 195.684677][ T38] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 195.695236][ T38] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 195.707670][ T8433] usbtmc 1-1:16.0: simple control status returned 67 [ 195.742144][ T30] audit: type=1400 audit(1766374456.933:372): avc: denied { read open } for pid=8434 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 195.818717][ T30] audit: type=1400 audit(1766374456.933:373): avc: denied { getattr } for pid=8434 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 195.890488][ T5817] Bluetooth: hci1: command tx timeout [ 195.909528][ T5862] usb 1-1: USB disconnect, device number 10 [ 195.971580][ T8443] IPVS: sh: FWM 3 0x00000003 - no destination available [ 195.979250][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 196.044728][ T8443] IPVS: sh: FWM 3 0x00000003 - no destination available [ 196.052129][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 196.072027][ T938] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 196.128634][ T8443] netlink: 'syz.4.898': attribute type 27 has an invalid length. [ 196.217531][ T30] audit: type=1400 audit(1766374457.403:374): avc: denied { add_name } for pid=8432 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 196.246869][ T938] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.289873][ T938] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.319406][ T30] audit: type=1400 audit(1766374457.403:375): avc: denied { create } for pid=8432 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 196.352461][ T938] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 196.361873][ T938] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 196.380587][ T938] usb 4-1: Manufacturer: syz [ 196.408104][ T38] team0 (unregistering): Port device team_slave_1 removed [ 196.426574][ T938] usb 4-1: config 0 descriptor?? [ 196.559128][ T38] team0 (unregistering): Port device team_slave_0 removed [ 196.759853][ T5862] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 196.912598][ T8402] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 196.924981][ T8402] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 196.934079][ T5862] usb 1-1: Using ep0 maxpacket: 32 [ 196.943613][ T5862] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 196.960412][ T5862] usb 1-1: config 0 has no interface number 0 [ 196.972842][ T5862] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 196.990978][ T8402] team0: Port device team_slave_0 added [ 196.996661][ T5862] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.006557][ T8402] team0: Port device team_slave_1 added [ 197.012923][ T5862] usb 1-1: Product: syz [ 197.017355][ T5862] usb 1-1: Manufacturer: syz [ 197.042712][ T5862] usb 1-1: SerialNumber: syz [ 197.062092][ T5862] usb 1-1: config 0 descriptor?? [ 197.082003][ T8402] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 197.090110][ T8402] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 197.116788][ T8402] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.133416][ T5862] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 197.156460][ T8402] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.173455][ T8402] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 197.201498][ T8402] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 197.285051][ T938] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.000B/input/input20 [ 197.316915][ T8402] hsr_slave_0: entered promiscuous mode [ 197.326567][ T8402] hsr_slave_1: entered promiscuous mode [ 197.334330][ T8402] debugfs: 'hsr0' already exists in 'hsr' [ 197.343410][ T8402] Cannot create hsr debugfs directory [ 197.397417][ T938] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.000B/input/input21 [ 197.401415][ T38] IPVS: stop unused estimator thread 0... [ 197.478897][ T938] input: syz Touch Strip as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.000B/input/input22 [ 197.612905][ T938] input: syz Dial as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.000B/input/input23 [ 197.689499][ T5862] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 197.694958][ T938] uclogic 0003:256C:006D.000B: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.3-1/input0 [ 197.760533][ T5862] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 197.774109][ T8402] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 197.823596][ T938] usb 4-1: USB disconnect, device number 13 [ 197.867002][ T8402] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 197.887944][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 197.941141][ T5937] usb 1-1: USB disconnect, device number 11 [ 197.969907][ T5817] Bluetooth: hci1: command tx timeout [ 198.092652][ T5937] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 198.117890][ T8474] fido_id[8474]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 198.691632][ T5937] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 198.705746][ T8402] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 198.748037][ T8402] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 198.758355][ T5937] quatech2 1-1:0.51: device disconnected [ 199.356920][ T938] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 199.397369][ T8402] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.465318][ T8402] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.497903][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.505025][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.531807][ T938] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.545009][ T938] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 199.555529][ T938] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.565080][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.572237][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.591671][ T938] usb 4-1: config 0 descriptor?? [ 199.827895][ T938] usbhid 4-1:0.0: can't add hid device: -71 [ 199.842834][ T938] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 199.874183][ T938] usb 4-1: USB disconnect, device number 14 [ 200.049915][ T5817] Bluetooth: hci1: command tx timeout [ 200.216121][ T8402] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.315979][ T8547] netlink: 'syz.4.915': attribute type 4 has an invalid length. [ 200.340451][ T938] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 200.382072][ T8547] netlink: 'syz.4.915': attribute type 4 has an invalid length. [ 200.519873][ T938] usb 4-1: Using ep0 maxpacket: 32 [ 200.530932][ T938] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.559889][ T938] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 200.620159][ T8568] xt_socket: unknown flags 0x4 [ 200.634175][ T938] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.654405][ T938] usb 4-1: config 0 descriptor?? [ 200.676786][ T938] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 200.713017][ T938] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 200.745063][ T5876] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 200.803356][ T8402] veth0_vlan: entered promiscuous mode [ 200.820272][ T8402] veth1_vlan: entered promiscuous mode [ 200.910091][ T5876] usb 1-1: Using ep0 maxpacket: 8 [ 200.911970][ T8402] veth0_macvtap: entered promiscuous mode [ 200.922885][ T5876] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 200.937002][ T5876] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 200.953381][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 200.953393][ T30] audit: type=1400 audit(1766374462.143:380): avc: denied { append } for pid=8579 comm="syz.4.920" name="sg0" dev="devtmpfs" ino=755 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 200.954842][ T5876] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.961848][ T8402] veth1_macvtap: entered promiscuous mode [ 200.997290][ T30] audit: type=1400 audit(1766374462.143:381): avc: denied { write } for pid=8579 comm="syz.4.920" name="sg0" dev="devtmpfs" ino=755 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 201.074196][ T5876] usb 1-1: config 0 descriptor?? [ 201.088496][ T938] usb 4-1: USB disconnect, device number 15 [ 201.092501][ T5876] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 201.098651][ T938] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 201.177028][ T8402] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 201.230599][ T8402] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 201.272798][ T6002] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.304208][ T6002] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.315268][ T6002] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.334813][ T6002] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.476984][ T6002] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.500055][ T6002] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.555943][ T1528] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.580003][ T1528] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.609489][ T30] audit: type=1400 audit(1766374462.793:382): avc: denied { mounton } for pid=8402 comm="syz-executor" path="/root/syzkaller.EhBXNo/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=20384 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 201.820030][ T8603] netlink: 'syz.3.926': attribute type 11 has an invalid length. [ 201.851105][ T8600] xt_socket: unknown flags 0x4 [ 202.150731][ T5817] Bluetooth: hci1: command tx timeout [ 202.165188][ T8612] netlink: 'syz.5.885': attribute type 10 has an invalid length. [ 202.172957][ T8612] netlink: 168 bytes leftover after parsing attributes in process `syz.5.885'. [ 202.390600][ T938] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 202.514864][ T5876] gspca_vc032x: reg_w err -71 [ 202.519582][ T5876] vc032x 1-1:0.0: probe with driver vc032x failed with error -71 [ 202.529689][ T5876] usb 1-1: USB disconnect, device number 12 [ 202.741331][ T938] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 202.823384][ T938] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 202.848337][ T30] audit: type=1400 audit(1766374464.023:383): avc: denied { read write } for pid=8616 comm="syz.2.929" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 202.878512][ T938] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 202.888862][ T938] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.902457][ T30] audit: type=1400 audit(1766374464.023:384): avc: denied { open } for pid=8616 comm="syz.2.929" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 203.142112][ T938] usb 4-1: GET_CAPABILITIES returned 0 [ 203.646280][ T938] usbtmc 4-1:16.0: can't read capabilities [ 203.665755][ T8627] ceph: No mds server is up or the cluster is laggy [ 203.672779][ T5926] libceph: connect (1)[c::]:6789 error -101 [ 203.684078][ T5926] libceph: mon0 (1)[c::]:6789 connect error [ 203.691271][ T8628] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 204.433478][ T8638] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 204.469805][ T30] audit: type=1400 audit(1766374465.643:385): avc: denied { read } for pid=8639 comm="syz.0.935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 204.509872][ T30] audit: type=1400 audit(1766374465.643:386): avc: denied { relabelto } for pid=8637 comm="syz.2.934" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 204.535745][ T30] audit: type=1400 audit(1766374465.643:387): avc: denied { associate } for pid=8637 comm="syz.2.934" name="/" dev="cgroup2" ino=1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 204.611252][ T30] audit: type=1400 audit(1766374465.693:388): avc: denied { shutdown } for pid=8641 comm="syz.5.936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 204.806378][ T8653] xt_socket: unknown flags 0x4 [ 204.845562][ T10] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 204.974167][ T5862] usb 4-1: USB disconnect, device number 16 [ 205.041840][ T10] usb 3-1: config 0 has no interfaces? [ 205.063637][ T8658] netlink: 'syz.5.940': attribute type 10 has an invalid length. [ 205.071603][ T8658] netlink: 168 bytes leftover after parsing attributes in process `syz.5.940'. [ 205.085554][ T10] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 205.418453][ T10] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 205.516269][ T8661] IPVS: sh: FWM 3 0x00000003 - no destination available [ 205.523520][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 205.532366][ T8661] IPVS: sh: FWM 3 0x00000003 - no destination available [ 205.539504][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 205.555830][ T8661] netlink: 'syz.3.942': attribute type 27 has an invalid length. [ 205.620655][ T10] usb 3-1: Manufacturer: syz [ 205.637363][ T10] usb 3-1: config 0 descriptor?? [ 205.860583][ T5926] usb 3-1: USB disconnect, device number 12 [ 205.989051][ T8664] netlink: 'syz.5.943': attribute type 27 has an invalid length. [ 206.050073][ T5862] IPVS: starting estimator thread 0... [ 206.162881][ T8665] IPVS: using max 40 ests per chain, 96000 per kthread [ 206.317553][ T8669] loop2: detected capacity change from 0 to 7 [ 206.326919][ T8669] loop2: [POWERTEC] p1 p2 p3 [ 206.334680][ T8669] loop2: p2 start 524319 is beyond EOD, truncated [ 206.348692][ T8669] loop2: p3 start 1932423285 is beyond EOD, truncated [ 206.477901][ T6599] udevd[6599]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 206.682614][ T30] audit: type=1400 audit(1766374467.873:389): avc: denied { shutdown } for pid=8676 comm="syz.2.948" lport=52056 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 206.875617][ T30] audit: type=1400 audit(1766374467.923:390): avc: denied { append } for pid=8681 comm="syz.3.950" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 207.129257][ T13] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 207.676085][ T8702] netlink: 'syz.3.953': attribute type 10 has an invalid length. [ 207.683989][ T8702] netlink: 168 bytes leftover after parsing attributes in process `syz.3.953'. [ 208.392952][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 208.461934][ T5862] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 208.553565][ T8724] netlink: 8 bytes leftover after parsing attributes in process `syz.2.960'. [ 208.989831][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 209.002501][ T9] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 209.014150][ T9] usb 6-1: config 0 has no interface number 0 [ 209.020550][ T9] usb 6-1: config 0 interface 184 has no altsetting 0 [ 209.031038][ T9] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 209.049817][ T5862] usb 1-1: Using ep0 maxpacket: 8 [ 209.060166][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.068461][ T9] usb 6-1: Product: syz [ 209.073783][ T9] usb 6-1: Manufacturer: syz [ 209.073871][ T5862] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 209.092045][ T9] usb 6-1: SerialNumber: syz [ 209.098729][ T9] usb 6-1: config 0 descriptor?? [ 209.104261][ T5862] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 209.114391][ T5862] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 209.124852][ T5862] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 209.126157][ T9] smsc75xx v1.0.0 [ 209.141117][ T5862] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 209.155447][ T5862] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 209.164584][ T5862] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.300860][ T10] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 209.377339][ T5862] usb 1-1: GET_CAPABILITIES returned 0 [ 209.383166][ T5862] usbtmc 1-1:16.0: can't read capabilities [ 209.460919][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 209.469739][ T10] usb 4-1: config 1 has an invalid interface number: 185 but max is 0 [ 209.478355][ T10] usb 4-1: config 1 has no interface number 0 [ 209.484516][ T10] usb 4-1: New USB device found, idVendor=0c0b, idProduct=a109, bcdDevice=f3.0e [ 209.493691][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.708260][ T30] audit: type=1400 audit(1766374470.893:391): avc: denied { accept } for pid=8726 comm="syz.3.963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 209.710247][ T10] usb 4-1: string descriptor 0 read error: -71 [ 209.755582][ T10] ums-datafab 4-1:1.185: USB Mass Storage device detected [ 209.779461][ T10] ums-datafab 4-1:1.185: Quirks match for vid 0c0b pid a109: 1 [ 209.805663][ T10] ums-sddr55 4-1:1.185: USB Mass Storage device detected [ 209.864327][ T10] usb 4-1: USB disconnect, device number 17 [ 209.887501][ T30] audit: type=1400 audit(1766374471.073:392): avc: denied { mounton } for pid=8748 comm="syz.2.970" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 209.934207][ T8750] usbtmc 1-1:16.0: usb_control_msg returned -32 [ 209.942662][ T5862] usb 1-1: USB disconnect, device number 13 [ 210.225341][ T8754] netlink: 'syz.2.971': attribute type 10 has an invalid length. [ 210.233142][ T8754] netlink: 168 bytes leftover after parsing attributes in process `syz.2.971'. [ 210.610473][ T9] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 210.621628][ T9] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 210.631345][ T9] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 210.646322][ T9] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 210.666702][ T9] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 210.677449][ T9] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 210.689379][ T9] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 210.714052][ T9] usb 6-1: USB disconnect, device number 2 [ 210.942633][ T8768] xt_socket: unknown flags 0x4 [ 211.079823][ T5896] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 212.038767][ T30] audit: type=1400 audit(1766374473.223:393): avc: denied { read write } for pid=8784 comm="syz.0.982" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 212.093060][ T5896] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.130661][ T5896] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.198846][ T5896] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 212.206868][ T30] audit: type=1400 audit(1766374473.223:394): avc: denied { open } for pid=8784 comm="syz.0.982" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 212.215417][ T5926] libceph: connect (1)[c::]:6789 error -101 [ 212.247661][ T5896] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.256492][ T5926] libceph: mon0 (1)[c::]:6789 connect error [ 212.271987][ T30] audit: type=1400 audit(1766374473.253:395): avc: denied { ioctl } for pid=8784 comm="syz.0.982" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 212.324483][ T8797] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 212.354340][ T5896] usb 5-1: config 0 descriptor?? [ 212.461805][ T8792] ceph: No mds server is up or the cluster is laggy [ 212.594996][ T8804] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.985'. [ 212.749868][ T5926] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 212.861042][ T5896] pyra 0003:1E7D:2CF6.000C: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.4-1/input0 [ 212.969826][ T5926] usb 3-1: Using ep0 maxpacket: 8 [ 212.983771][ T5926] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 213.010579][ T5926] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 213.042893][ T5926] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 213.074057][ T6056] usb 5-1: USB disconnect, device number 15 [ 213.084616][ T5926] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 213.111824][ T5896] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 213.120932][ T5926] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 213.136599][ T5926] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.191121][ T8817] xt_l2tp: v2 sid > 0xffff: 117440512 [ 213.197943][ T8817] netlink: 'syz.5.988': attribute type 10 has an invalid length. [ 213.205779][ T8817] netlink: 168 bytes leftover after parsing attributes in process `syz.5.988'. [ 213.289881][ T5896] usb 1-1: Using ep0 maxpacket: 8 [ 213.311200][ T5896] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 213.383518][ T5896] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 213.467401][ T5926] usb 3-1: GET_CAPABILITIES returned 0 [ 213.504880][ T5926] usbtmc 3-1:16.0: can't read capabilities [ 213.511219][ T5896] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 213.543865][ T5896] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 213.556385][ T5896] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 213.576778][ T5896] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 213.586156][ T5896] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.681510][ T5926] usb 3-1: USB disconnect, device number 13 [ 213.798809][ T8827] input: syz0 as /devices/virtual/input/input24 [ 213.825687][ T5896] usb 1-1: usb_control_msg returned -32 [ 213.840109][ T30] audit: type=1400 audit(1766374474.983:396): avc: denied { append } for pid=8826 comm="syz.4.990" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 213.852657][ T5896] usbtmc 1-1:16.0: can't read capabilities [ 214.202264][ T8846] IPVS: sh: FWM 3 0x00000003 - no destination available [ 214.209543][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 214.220823][ T8846] IPVS: sh: FWM 3 0x00000003 - no destination available [ 214.228209][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 214.242519][ T8846] netlink: 'syz.5.995': attribute type 27 has an invalid length. [ 214.301139][ T8840] netlink: 4 bytes leftover after parsing attributes in process `syz.3.993'. [ 215.017483][ T8847] usbtmc 1-1:16.0: usb_control_msg returned -32 [ 215.196303][ T8865] dlm: non-version read from control device 216 [ 215.221919][ T5896] usb 1-1: USB disconnect, device number 14 [ 215.369883][ T8870] IPVS: sh: FWM 3 0x00000003 - no destination available [ 215.377145][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 215.396897][ T8870] IPVS: sh: FWM 3 0x00000003 - no destination available [ 215.404462][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 215.432751][ T8870] netlink: 'syz.4.1001': attribute type 27 has an invalid length. [ 215.584217][ T8865] dlm: non-version read from control device 216 [ 215.600372][ T8865] dlm: non-version read from control device 216 [ 215.616924][ T8865] dlm: non-version read from control device 216 [ 215.701301][ T8865] dlm: non-version read from control device 216 [ 215.721921][ T8865] dlm: non-version read from control device 216 [ 215.728260][ T8865] dlm: non-version read from control device 216 [ 215.839700][ T8865] dlm: non-version read from control device 216 [ 215.852561][ T8865] dlm: non-version read from control device 216 [ 215.869939][ T8865] dlm: non-version read from control device 216 [ 215.884383][ T8865] dlm: non-version read from control device 216 [ 216.046885][ T30] audit: type=1400 audit(1766374477.233:397): avc: denied { write } for pid=8886 comm="syz.4.1003" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 216.107020][ T8892] loop2: detected capacity change from 0 to 7 [ 216.115480][ T938] libceph: connect (1)[c::]:6789 error -101 [ 216.122123][ T8865] dlm: non-version read from control device 216 [ 216.129586][ T8884] ceph: No mds server is up or the cluster is laggy [ 216.138758][ T938] libceph: mon0 (1)[c::]:6789 connect error [ 216.144858][ T8888] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 216.185396][ T8865] dlm: non-version read from control device 216 [ 216.202003][ T8895] netlink: 'syz.4.1006': attribute type 7 has an invalid length. [ 216.217823][ T8895] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1006'. [ 216.228331][ T5823] Dev loop2: unable to read RDB block 7 [ 216.235405][ T8865] dlm: non-version read from control device 216 [ 216.241786][ T5823] loop2: unable to read partition table [ 216.265755][ T5823] loop2: partition table beyond EOD, truncated [ 216.289855][ T8865] dlm: non-version read from control device 216 [ 216.296122][ T8865] dlm: non-version read from control device 216 [ 216.304429][ T8892] Dev loop2: unable to read RDB block 7 [ 216.318263][ T8892] loop2: unable to read partition table [ 216.337833][ T8892] loop2: partition table beyond EOD, truncated [ 216.375800][ T8892] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 216.543326][ T30] audit: type=1400 audit(1766374477.733:398): avc: denied { mounton } for pid=8907 comm="syz.4.1009" path="/206/file0" dev="tmpfs" ino=1064 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 216.713692][ T8914] netlink: 'syz.2.1007': attribute type 10 has an invalid length. [ 216.721630][ T8914] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1007'. [ 218.128577][ T8937] xt_socket: unknown flags 0x4 [ 218.186351][ T30] audit: type=1400 audit(1766374479.363:399): avc: denied { accept } for pid=8923 comm="syz.4.1012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 218.336061][ T8942] input: syz0 as /devices/virtual/input/input25 [ 218.356437][ T8942] input: failed to attach handler leds to device input25, error: -6 [ 218.717017][ T8952] ceph: No mds server is up or the cluster is laggy [ 218.723945][ T938] libceph: connect (1)[c::]:6789 error -101 [ 218.730085][ T938] libceph: mon0 (1)[c::]:6789 connect error [ 218.753930][ T8953] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 218.769603][ T10] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 218.922199][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 218.943682][ T10] usb 6-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 218.986251][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.019230][ T10] usb 6-1: config 0 descriptor?? [ 219.041205][ T10] gspca_main: sq930x-2.14.0 probing 041e:403c [ 219.271776][ T30] audit: type=1400 audit(1766374480.463:400): avc: denied { bind } for pid=8966 comm="syz.4.1022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 219.298139][ T30] audit: type=1400 audit(1766374480.483:401): avc: denied { set_context_mgr } for pid=8969 comm="syz.2.1023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 219.448308][ T30] audit: type=1400 audit(1766374480.623:402): avc: denied { bind } for pid=8973 comm="syz.2.1025" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 219.866763][ T8983] input: syz0 as /devices/virtual/input/input26 [ 219.930075][ T10] gspca_sq930x: reg_w 0105 bf00 failed -71 [ 220.000069][ T10] sq930x 6-1:0.0: probe with driver sq930x failed with error -71 [ 220.020066][ T10] usb 6-1: USB disconnect, device number 3 [ 220.350505][ T5829] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 220.358903][ T5829] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 220.367346][ T5829] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 220.387947][ T5829] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 220.396356][ T5829] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 220.851399][ T13] bridge_slave_1: left allmulticast mode [ 220.857956][ T13] bridge_slave_1: left promiscuous mode [ 220.889483][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.919953][ T30] audit: type=1400 audit(1766374482.103:403): avc: denied { setopt } for pid=9000 comm="syz.0.1036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 220.985714][ T9005] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1037'. [ 221.314842][ T13] bridge_slave_0: left allmulticast mode [ 221.320737][ T13] bridge_slave_0: left promiscuous mode [ 221.326465][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.941992][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 221.952942][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 221.962548][ T13] bond0 (unregistering): Released all slaves [ 222.072533][ T13] !9: left promiscuous mode [ 222.252008][ T13] : left promiscuous mode [ 222.689834][ T5829] Bluetooth: hci3: command tx timeout [ 222.738076][ T30] audit: type=1326 audit(1766374483.713:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9050 comm="syz.2.1048" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe141f8f749 code=0x0 [ 223.019080][ T13] hsr_slave_0: left promiscuous mode [ 223.079945][ T13] hsr_slave_1: left promiscuous mode [ 223.089083][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 223.112584][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 223.453405][ T5926] libceph: connect (1)[c::]:6789 error -101 [ 223.460153][ T5926] libceph: mon0 (1)[c::]:6789 connect error [ 223.486832][ T9087] ceph: No mds server is up or the cluster is laggy [ 223.805984][ T5937] libceph: connect (1)[c::]:6789 error -101 [ 223.822849][ T5937] libceph: mon0 (1)[c::]:6789 connect error [ 224.077304][ T13] team0 (unregistering): Port device team_slave_1 removed [ 224.102625][ T13] team0 (unregistering): Port device team_slave_0 removed [ 224.298015][ T9092] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 224.344969][ T8993] chnl_net:caif_netlink_parms(): no params data found [ 224.413855][ T9102] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1057'. [ 224.440144][ T9102] Zero length message leads to an empty skb [ 224.842692][ T8993] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.848048][ T5829] Bluetooth: hci3: command tx timeout [ 224.867207][ T8993] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.875854][ T8993] bridge_slave_0: entered allmulticast mode [ 224.882175][ T5937] libceph: connect (1)[c::]:6789 error -101 [ 224.888958][ T5937] libceph: mon0 (1)[c::]:6789 connect error [ 224.896481][ T8993] bridge_slave_0: entered promiscuous mode [ 224.902658][ T9106] ceph: No mds server is up or the cluster is laggy [ 224.939222][ T9106] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 224.992080][ T8993] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.025813][ T8993] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.057406][ T8993] bridge_slave_1: entered allmulticast mode [ 225.064765][ T8993] bridge_slave_1: entered promiscuous mode [ 225.144593][ T8993] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 225.174355][ T8993] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 225.233448][ T13] IPVS: stop unused estimator thread 0... [ 225.283617][ T8993] team0: Port device team_slave_0 added [ 225.318846][ T8993] team0: Port device team_slave_1 added [ 225.460228][ T30] audit: type=1400 audit(1766374486.653:405): avc: denied { mounton } for pid=9146 comm="syz.2.1068" path="/proc/612/task" dev="proc" ino=22609 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 225.725648][ T8993] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 225.851795][ T8993] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 225.971720][ T30] audit: type=1400 audit(1766374487.133:406): avc: denied { create } for pid=9162 comm="syz.3.1073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 226.034461][ T9159] ceph: No mds server is up or the cluster is laggy [ 226.066243][ T5926] libceph: connect (1)[c::]:6789 error -101 [ 226.085361][ T5926] libceph: mon0 (1)[c::]:6789 connect error [ 226.119155][ T8993] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 226.133492][ T30] audit: type=1400 audit(1766374487.283:407): avc: denied { write } for pid=9162 comm="syz.3.1073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 226.175350][ T30] audit: type=1400 audit(1766374487.283:408): avc: denied { ioctl } for pid=9162 comm="syz.3.1073" path="socket:[22632]" dev="sockfs" ino=22632 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 226.202948][ T9161] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 226.245938][ T8993] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 226.265300][ T8993] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 226.350807][ T8993] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 226.434120][ T8993] hsr_slave_0: entered promiscuous mode [ 226.442787][ T8993] hsr_slave_1: entered promiscuous mode [ 226.448959][ T8993] debugfs: 'hsr0' already exists in 'hsr' [ 226.465861][ T8993] Cannot create hsr debugfs directory [ 226.486136][ T9182] IPVS: sh: FWM 3 0x00000003 - no destination available [ 226.639945][ T5926] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 226.690173][ T5937] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 226.800111][ T5926] usb 6-1: Using ep0 maxpacket: 32 [ 226.820196][ T5926] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 226.850018][ T5937] usb 4-1: Using ep0 maxpacket: 8 [ 226.855470][ T5926] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 226.875812][ T5937] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 226.900133][ T5926] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 226.916282][ T8993] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 226.931790][ T5937] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 226.943938][ T5829] Bluetooth: hci3: command tx timeout [ 226.956509][ T5926] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 226.970012][ T5937] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 226.972832][ T8993] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 226.981959][ T5937] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 227.001446][ T5937] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 227.014905][ T5926] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 227.026546][ T5926] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.038293][ T5937] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.047915][ T5926] usb 6-1: Product: syz [ 227.052779][ T5926] usb 6-1: Manufacturer: syz [ 227.057396][ T5926] usb 6-1: SerialNumber: syz [ 227.070869][ T9199] xt_l2tp: v2 sid > 0xffff: 117440512 [ 227.078120][ T9199] netlink: 'syz.2.1082': attribute type 10 has an invalid length. [ 227.085978][ T9199] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1082'. [ 227.234541][ C1] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 227.358787][ T5937] usb 4-1: GET_CAPABILITIES returned 0 [ 227.381175][ T5926] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/input/input27 [ 227.418419][ T5937] usbtmc 4-1:16.0: can't read capabilities [ 227.439255][ T8993] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 227.487414][ T30] audit: type=1400 audit(1766374488.673:409): avc: denied { read } for pid=5172 comm="acpid" name="mouse1" dev="devtmpfs" ino=3156 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 227.514052][ T8993] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 227.524495][ T5926] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 227.543067][ T5926] (id 0x00) [ 227.555291][ T30] audit: type=1400 audit(1766374488.673:410): avc: denied { open } for pid=5172 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=3156 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 227.565581][ T5937] usb 4-1: USB disconnect, device number 18 [ 227.642668][ T30] audit: type=1400 audit(1766374488.673:411): avc: denied { ioctl } for pid=5172 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=3156 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 227.739801][ T5926] rc_core: IR keymap rc-imon-pad not found [ 227.745915][ T5926] Registered IR keymap rc-empty [ 227.760749][ T5926] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 227.771207][ T5926] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 227.820955][ T5926] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/rc/rc0 [ 227.858740][ T5926] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/rc/rc0/input28 [ 227.877868][ T8993] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.893252][ T5926] imon 6-1:155.0: iMON device (15c2:ffdc, intf0) on usb<6:4> initialized [ 227.928129][ T8993] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.959206][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.966351][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.988560][ T30] audit: type=1400 audit(1766374489.173:412): avc: denied { create } for pid=9224 comm="syz.2.1085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 228.027430][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.034578][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.373371][ T5862] usb 6-1: USB disconnect, device number 4 [ 228.396860][ T9178] imon:send_packet: packet tx failed (-71) [ 228.440800][ T9178] imon:vfd_write: send packet #1 failed [ 228.551614][ T5926] libceph: connect (1)[c::]:6789 error -101 [ 228.558349][ T5926] libceph: mon0 (1)[c::]:6789 connect error [ 228.588207][ T9239] ceph: No mds server is up or the cluster is laggy [ 228.625793][ T9242] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 229.000605][ T8993] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.010201][ T5829] Bluetooth: hci3: command tx timeout [ 229.340196][ T9264] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1092'. [ 229.376281][ T8993] veth0_vlan: entered promiscuous mode [ 229.392927][ T8993] veth1_vlan: entered promiscuous mode [ 229.438771][ T8993] veth0_macvtap: entered promiscuous mode [ 229.459923][ T8993] veth1_macvtap: entered promiscuous mode [ 229.481531][ T8993] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 229.505130][ T8993] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.510032][ T5926] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 229.549546][ T2979] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.572246][ T9272] xt_l2tp: v2 sid > 0xffff: 117440512 [ 229.579198][ T9272] netlink: 'syz.5.1093': attribute type 10 has an invalid length. [ 229.587176][ T9272] netlink: 168 bytes leftover after parsing attributes in process `syz.5.1093'. [ 229.924908][ T2979] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.957164][ T2979] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.973669][ T9273] IPVS: sh: FWM 3 0x00000003 - no destination available [ 229.985518][ T2979] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.998082][ T9273] netlink: 'syz.2.1094': attribute type 27 has an invalid length. [ 230.061303][ T5926] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.073050][ T5926] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 230.082136][ T5926] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.131327][ T5926] usb 4-1: config 0 descriptor?? [ 230.224457][ T2979] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.237284][ T2979] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.284781][ T4205] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.302524][ T30] audit: type=1400 audit(1766374491.493:413): avc: denied { read } for pid=9281 comm="syz.5.1096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 230.329804][ T4205] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.353824][ T30] audit: type=1400 audit(1766374491.543:414): avc: denied { mounton } for pid=8993 comm="syz-executor" path="/root/syzkaller.rrC9FB/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 230.389195][ T8993] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000007: 0000 [#1] SMP KASAN NOPTI [ 230.401258][ T8993] KASAN: null-ptr-deref in range [0x0000000000000038-0x000000000000003f] [ 230.409652][ T8993] CPU: 1 UID: 0 PID: 8993 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 230.420653][ T8993] Tainted: [L]=SOFTLOCKUP [ 230.424955][ T8993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 230.434990][ T8993] RIP: 0010:simple_xattrs_free+0x60/0x1e0 [ 230.440699][ T8993] Code: ea 03 80 3c 02 00 0f 85 8b 01 00 00 49 c7 45 00 00 00 00 00 e8 21 9c 75 ff 4c 89 fa 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 56 01 00 00 48 bd 00 00 00 00 00 fc ff df 49 8b [ 230.460291][ T8993] RSP: 0018:ffffc90004947ae0 EFLAGS: 00010202 [ 230.466344][ T8993] RAX: dffffc0000000000 RBX: ffff88814ca3ee10 RCX: ffffffff826a4375 [ 230.474296][ T8993] RDX: 0000000000000007 RSI: ffffffff82494a4f RDI: 0000000000000038 [ 230.482250][ T8993] RBP: ffff88814ca3eea8 R08: 0000000000000005 R09: 0000000000000000 [ 230.490203][ T8993] R10: 00000000ffffffea R11: ffffffff8b77814d R12: 1ffff92000928f6b [ 230.498155][ T8993] R13: 0000000000000000 R14: ffff88802895fc20 R15: 0000000000000038 [ 230.506106][ T8993] FS: 0000555564875500(0000) GS:ffff8881249f5000(0000) knlGS:0000000000000000 [ 230.515018][ T8993] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 230.521584][ T8993] CR2: 00007f11ca265da0 CR3: 0000000066c6e000 CR4: 00000000003526f0 [ 230.529538][ T8993] Call Trace: [ 230.532800][ T8993] [ 230.535716][ T8993] __kernfs_new_node+0x7b4/0x990 [ 230.540644][ T8993] ? __pfx___kernfs_new_node+0x10/0x10 [ 230.546088][ T8993] ? find_held_lock+0x2b/0x80 [ 230.550757][ T8993] ? kernfs_root+0xee/0x2a0 [ 230.555247][ T8993] kernfs_new_node+0x13c/0x1e0 [ 230.560000][ T8993] ? kasan_save_track+0x14/0x30 [ 230.564835][ T8993] kernfs_create_dir_ns+0x4c/0x1a0 [ 230.569933][ T8993] cgroup_mkdir+0x40f/0x12e0 [ 230.574509][ T8993] ? __pfx_cgroup_mkdir+0x10/0x10 [ 230.579521][ T8993] kernfs_iop_mkdir+0x111/0x190 [ 230.584358][ T8993] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 230.589377][ T8993] vfs_mkdir+0x731/0xb60 [ 230.593603][ T8993] do_mkdirat+0x442/0x5e0 [ 230.597922][ T8993] ? __pfx_do_mkdirat+0x10/0x10 [ 230.602758][ T8993] ? getname_flags.part.0+0x1c5/0x550 [ 230.608113][ T8993] __x64_sys_mkdirat+0x83/0xb0 [ 230.612867][ T8993] do_syscall_64+0xcd/0xf80 [ 230.617356][ T8993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.623230][ T8993] RIP: 0033:0x7f11ca38de97 [ 230.627625][ T8993] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 230.647213][ T8993] RSP: 002b:00007fffc9106248 EFLAGS: 00000206 ORIG_RAX: 0000000000000102 [ 230.655608][ T8993] RAX: ffffffffffffffda RBX: 00007fffc91062a0 RCX: 00007f11ca38de97 [ 230.663562][ T8993] RDX: 00000000000001ff RSI: 00007fffc91062a0 RDI: 00000000ffffff9c [ 230.671514][ T8993] RBP: 0000000000000001 R08: 0000000000000017 R09: 00007fffc9105f97 [ 230.679467][ T8993] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000008 [ 230.687417][ T8993] R13: 0000000000000003 R14: 00007fffc9106718 R15: 0000000000000000 [ 230.695373][ T8993] [ 230.698374][ T8993] Modules linked in: [ 230.702944][ T8993] ---[ end trace 0000000000000000 ]--- [ 230.732065][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 230.732079][ T30] audit: type=1400 audit(1766374491.913:418): avc: denied { read } for pid=5169 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 230.760276][ T30] audit: type=1400 audit(1766374491.913:419): avc: denied { search } for pid=5169 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 230.782092][ T30] audit: type=1400 audit(1766374491.913:420): avc: denied { search } for pid=5169 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 230.803625][ T5926] keytouch 0003:0926:3333.000D: fixing up Keytouch IEC report descriptor [ 230.807907][ T30] audit: type=1400 audit(1766374491.913:421): avc: denied { add_name } for pid=5169 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 230.815809][ T5926] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.000D/input/input29 [ 230.851226][ T8993] RIP: 0010:simple_xattrs_free+0x60/0x1e0 [ 230.864480][ T30] audit: type=1400 audit(1766374491.913:422): avc: denied { create } for pid=5169 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 230.885407][ T30] audit: type=1400 audit(1766374491.913:423): avc: denied { append open } for pid=5169 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 230.966020][ T9289] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1098'. [ 230.982546][ T30] audit: type=1400 audit(1766374491.913:424): avc: denied { getattr } for pid=5169 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 231.440557][ T8993] Code: ea 03 80 3c 02 00 0f 85 8b 01 00 00 49 c7 45 00 00 00 00 00 e8 21 9c 75 ff 4c 89 fa 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 56 01 00 00 48 bd 00 00 00 00 00 fc ff df 49 8b [ 231.464978][ T8993] RSP: 0018:ffffc90004947ae0 EFLAGS: 00010202 [ 231.473785][ T8993] RAX: dffffc0000000000 RBX: ffff88814ca3ee10 RCX: ffffffff826a4375 [ 231.482610][ T8993] RDX: 0000000000000007 RSI: ffffffff82494a4f RDI: 0000000000000038 [ 231.495452][ T8993] RBP: ffff88814ca3eea8 R08: 0000000000000005 R09: 0000000000000000 [ 231.503517][ T8993] R10: 00000000ffffffea R11: ffffffff8b77814d R12: 1ffff92000928f6b [ 231.506948][ T5926] keytouch 0003:0926:3333.000D: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 231.511583][ T8993] R13: 0000000000000000 R14: ffff88802895fc20 R15: 0000000000000038 [ 231.511598][ T8993] FS: 0000555564875500(0000) GS:ffff8881248f5000(0000) knlGS:0000000000000000 [ 231.511617][ T8993] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 231.511629][ T8993] CR2: 0000001b3171eff8 CR3: 0000000066c6e000 CR4: 00000000003526f0 [ 231.511642][ T8993] Kernel panic - not syncing: Fatal exception [ 231.511933][ T8993] Kernel Offset: disabled