last executing test programs: 2m15.659419848s ago: executing program 4 (id=1203): socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sched_setscheduler(0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c000000140001000000000000dcdf25e000000100000000000000000000000000000000000000000000000000000001000000000007000000008000"], 0x5c}}, 0x4004044) 2m1.626090382s ago: executing program 4 (id=1213): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl711\x00', [0x4f27, 0x5, 0x4, 0x4, 0x5, 0x6, 0x6, 0x7, 0xa, 0x100, 0x2, 0x80000, 0x1, 0x8, 0x1e, 0x1, 0x0, 0x1a449, 0x3, 0x5, 0x81, 0xcaa7, 0x0, 0x1e58, 0xb, 0x3, 0x3c, 0x8, 0x6, 0x0, 0x5]}) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000280)=0x4000fdfd) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@remote, 0xc, 0x2, 0x0, 0x1, 0x9, 0x9}, &(0x7f0000000180)=0x20) read(r0, &(0x7f0000000000)=""/13, 0xd) 1m56.6182021s ago: executing program 4 (id=1220): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000c00)={0x44, 0x0, &(0x7f0000000a80)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 1m54.980326846s ago: executing program 4 (id=1223): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000040)={0x400, 0x3}, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000240), 0x108001, 0x0) ioctl$SOUND_OLD_MIXER_INFO(r2, 0x80304d65, &(0x7f0000000280)) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet(0xffffffffffffffff, 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x8000000) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x487, &(0x7f0000002b40), &(0x7f0000002b80)=0x30) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) read(r4, 0x0, 0x0) sendmsg$NFT_MSG_GETCHAIN(r4, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x14, 0x4, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x1, 0x4}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) r8 = fsopen(&(0x7f0000000100)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000180)='user\x00', &(0x7f00000002c0)='\x00\x00E\x01\x00\x00\f\x01\x00\x00\x00\x00\x00\xc1~\x99l\xb7\xd6\xfc\xebw1hn\x1a\xc5\xef\xec,\xa1\xa0\x12\x1c\x7fn\a\\\xec\xd8\x94oh\x1d\xec\xf5jb\xe5\xb2\xa2e\xfd\x9c\xc4\xd22\x9c\xe97#(/\xb1\xe6\x03\xe1\xaa\x96\x92\x8b4}\xc1L\x1b\x9b\xe6n\x97\xc7\x06\xb2Y\xadQ\xa4c\x1b&\x0e?\xc0\x90\xaf\xb29\xf6>\xe1\xe8}D\f\xc1u\xab]$\x1b\x1bt\xda\x9eA\xd3\x1b\x12A\x82\xd5\xa8@\x1eIw\xb2y2F\xe8\xc7\x03e&\x98\"9\t\xe0\x81Pj\xee&\xae{P\xe8\xceL\xe1\xd1V\xc7\xeaF\xd54\x80\xb6%\xaf\xbbK\x85\x95\xf2\x1bG\xf1\xdaq:\xae\xe22\\~j~\xfe\x83\xbb>\xb0\x9b.\xa4\x95\x0eY\xb8j\xe1M\xf5\xa5\x87`\x04\xab\xf1\xc7[\xda{\r\x95\xa4\xea^\xfc\xa7\x8b\x85\xd1ld\xacK\x8aqd\x1d\xaa\x99\xeb\t|@\xd5p\x1d>+\x0e\xec\xe2\xcd\xdc\x8f\x01\xf7\xabH=z\xa5x\x1b\x9f\x95\xd1\x88k\x85L#\x99^p\x18\x98\xec6\xf69y\x052', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000080)='user\x00', &(0x7f00000000c0)='ocfs2\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r6}, 0x18) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000006f80)=ANY=[@ANYBLOB="a03700002d00010026bd7000fcdbdf250400000005000b00", @ANYRES32, @ANYBLOB="81120c"], 0x37a0}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)=ANY=[], 0xc8}}, 0x0) syslog(0x9, 0x0, 0x0) 1m51.932434335s ago: executing program 4 (id=1228): socket(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 1m49.488107549s ago: executing program 4 (id=1232): socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) kexec_load(0x0, 0x1, &(0x7f0000000180)=[{0x0, 0x140, 0x40000000, 0x41000000}], 0x0) 1m32.482599224s ago: executing program 32 (id=1232): socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) kexec_load(0x0, 0x1, &(0x7f0000000180)=[{0x0, 0x140, 0x40000000, 0x41000000}], 0x0) 1m23.738049122s ago: executing program 2 (id=1259): syz_io_uring_setup(0x83, &(0x7f0000000580)={0x0, 0xe7b7, 0x13500, 0x0, 0x352}, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) open(&(0x7f0000000100)='./file0\x00', 0x440, 0x0) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x3b9}}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="b900"], 0xb8) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000080), 0x1010412, &(0x7f0000000780)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',cache=fscache']) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, &(0x7f00000001c0)=""/17, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x22) writev(r4, &(0x7f0000000000)=[{&(0x7f00000006c0)='\t', 0x2003f}], 0x1) 1m21.422265795s ago: executing program 2 (id=1261): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000380)="e8", 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201fb0000000008530846010000000000010902240001"], 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='scalable\x00', 0x9) shutdown(r0, 0x1) 1m15.430223879s ago: executing program 2 (id=1265): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, 0x0, 0x0) userfaultfd(0x801) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r2, 0x0, 0x8000000000000000}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@gettaction={0x34, 0x32, 0x301, 0x0, 0x2, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}]}, 0x34}}, 0x4000000) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) 1m14.033035178s ago: executing program 2 (id=1269): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$nfs(0x0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x20040c1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 1m9.674272718s ago: executing program 1 (id=1271): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x29c780}) io_uring_enter(0xffffffffffffffff, 0x3516, 0xaddf, 0x2, 0x0, 0x1517f) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) epoll_create1(0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) syz_open_procfs(0x0, 0x0) clock_settime(0x1ed5d7403, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x9f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, 0x0, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x3, 0x0, @mcast2, 0x7}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x3b00, 0x0, 0x0) 1m9.095354567s ago: executing program 3 (id=1272): mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000180)="adaf44bb2eaaa91b341bab", 0xb, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x0, 0xfe, 0x2, 0x0, 0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xe) shutdown(r1, 0x1) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000100)=0x6, 0x4) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) 1m8.727635989s ago: executing program 2 (id=1273): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000e40), 0x40040, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000ec0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000380)={0x18, r1}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xa) socket$unix(0x1, 0xc17a9ab45fe0440f, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020027bd7000fcdbdf254c0000000c00a704000000000000000008000300020000100c00a7000100000000000000080001007063690011000200303000000008000300010000000f00a9007365636f6e646e616d6500000c00a6000000000000000000"], 0x74}, 0x1, 0x0, 0x0, 0x40880}, 0x24000800) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/current\x00') readv(r3, &(0x7f0000001440)=[{&(0x7f0000000040)=""/20, 0x5}, {0x0, 0x2}], 0x2) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0xc, @multicast, 'ip6tnl0\x00'}}, 0x1e) syz_emit_ethernet(0x16, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaa49aaaa2aaaaaaabb886400007e3fce28892f"], 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1000000003, 0x8, &(0x7f0000000300)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x4dc, 0x2d, 0x9, 0x70bd27, 0x25dfdbfe, {0x5}, [@typed={0x8, 0xa, 0x0, 0x0, @uid}, @nested={0x46f, 0xdb, 0x0, 0x1, [@typed={0x8, 0x3c, 0x0, 0x0, @ipv4=@remote}, @nested={0x1af, 0x11a, 0x0, 0x1, [@nested={0x4, 0x7d}, @typed={0x4, 0x1f}, @typed={0x8, 0xf2, 0x0, 0x0, @fd=r4}, @typed={0xc, 0x14, 0x0, 0x0, @u64=0x9}, @generic="6ab4282d19593ea3010b78d59fa47f0ac2404cd59f63f8afc1dec89a88a3bcbfc38bc3222dca0fc2db9021b6d39de969731be7427290fb051e28c4d538e4f6807cfb1554be4e23a591ec4a02f8bd74641d4d0240d4ca979018af5325a7ae69b8b68ddeb31fcbd83a52f6534d5ed221399aa56fa0dea20426fee58431c172744297004396a1b9ebc7163efe7cb9", @nested={0x4, 0x68}, @generic="5f63aceb283d92bf881a35129ae66dd26f8c7cc21e04a726a755bbfa808ff6338b5cce83c25e878b4e15d53af86f676ea70b16f9d0ab32a7b20495b8e4bb240df610b5fbe0b2b611a1b6b502074524fd2be259351564cced64413648c3ea544a4cb08a8a2bcc03f82200555f35841f77edef7d1e09866502426e431b38479ce8e18cd8a3cfcc51478b63eb988f4e9b2ad8abe4bff9c3dda384edc43cc9b5ec93dac4f8ca0d59fba3aa6b09e50099c5b1c0373f3498d201ada245d2e5144a117d960cea108d4fdc695db50fc1849ab46c3b98d8b90859cceb88bc322a9bd6a1b030e6dd29e897bc758eccc9e46b2ba40015d47718e2c2b63e2ea7252fc1fc"]}, @generic="7d03997914d237c650175445c3ba7dce7ca607d479fd79f4755f3ca51a6d78f952c41d5abfd062cbf177301f08bcb13a5c637da3bb952a80900c79ba3922dd2c29342d60fb060644d0b8cd5cc1ec3611bf33c9e15727ca44fa1fefe4851b8cec3ab1299bb847d24dac0ad3468f459961c5", @nested={0x1f4, 0x131, 0x0, 0x1, [@generic="6ea2cd62264ccceda51899b319844b471b4cea17baf8a07a6da09cdbfa9b8817312c4333cb755dfa49518d7180417b4df4264f9a1197cfdc4c4b3bea4c4da1f35dc5ec5bec4647dd5deae9b6fca0cf2a5d62ef40620c76ed8a1e235829fb5c647d2a8696fa4b98c34c51a93f999959f9102b0a4d7093ebf2a8416389f69550722e36810561d4381179c3f51c71f42b6573bdd86311a5eae61a76be03ae7b700aac30c6d2adb44f6f48c2be0ec753071d69f3a3c05ee6cf4750", @nested={0x4, 0xb5}, @generic="687f0dc6bdf48a3c25f912b33c5aa697ff747fb62cc06ed75e4e51f251fc8c3a642a68f15f7102deabf0e1d7d1f0744252dda33d5ea35ec85cc04d13d62a45b550073cf37d98858f0265a04a7f67bb05b1a9ca2690c3cf7f2bfad25d8bcd70fba8bf919ec8be53d19e7bfd1aa77402be20e59d9bda220acca719f71f729a66f705616cc229d9c96bab7ac2c72ec92f628024fad3cb43d5439ff7afaa7aa34da4063c2549fc030eba55275a", @generic="bf87627838e58404916367520cceb4b87a79eb8c6df223c035cae8442fe4244a33b94d5b8b418b295b05b9b55026351820666e81cfe3fa9b87357863791b4e8fdfdeea45e972eff5a47cf0b52668318d28ca3a72f4244d760c623674343133ddb4b16d65dd0a56cb0cfbb929938cc70f926de817c9c47ae63d3c540556266c4f7581afc4", @nested={0x4, 0x101}]}, @generic="1a549925c03df0ce6c54c5465c80f72d9f76b2b837920145866effd66a7626e77dfae03f5fc4b3b5b398b5f5c8af7623e44b400b4fa498d3ef474f6b2bb8e42b1fbc6b912fa2", @typed={0x8, 0x83, 0x0, 0x0, @u32=0x13f9}]}, @generic="8e1d5febe1c6657344c712a7d90143988c25eb826a8e9881e1b9d1b306aa65c680df588ea2a6df4b8857c537c7583f71612927ae318ad06a9111163745423e2cf885631ba49089428f0ef08da5270d"]}, 0x4dc}}, 0xc880) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, 0x0) r6 = socket$inet6(0xa, 0x2, 0x3a) r7 = dup(r6) bind$unix(r7, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) syz_usb_connect(0x2, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x9, 0x94, 0x73, 0x8, 0x1199, 0x6821, 0x9859, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0x3, 0x0, 0x0, 0x37, 0x5d, 0xd2}}]}}]}}, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x1400, 0xfffffffe, 0x1d) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, 0x0, 0x0) 1m7.630012427s ago: executing program 3 (id=1275): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$snapshot(0xffffffffffffff9c, 0x0, 0xc2d41, 0x0) write$FUSE_LSEEK(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f00000001c0)='g', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}, 0x2}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000000c0)={0xb, 0x4, 0xfe, 0x2, 0x3, 0xfd, 0x85, 0x0, 0x2, 0x4, 0x2, 0x0, 0xf, 0x5}, 0xe) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(r1, 0x1, 0x28, 0x0, 0x0) shutdown(r1, 0x1) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004001}, 0x24044018) 1m4.165707074s ago: executing program 1 (id=1276): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b000000"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0xcb4}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='rxrpc_recvmsg\x00', r2}, 0x10) r3 = socket(0x21, 0x2, 0x10000000000002) connect$rxrpc(r3, &(0x7f0000000140)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e21, @private=0xa010102}}, 0x24) sendmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r3, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x24, 0x10, 0x1, 0x2, 0x0, {0x0, 0x0, 0x74, r4, {0xfff2}, {}, {0xa, 0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0) 1m3.121886842s ago: executing program 2 (id=1277): mkdir(&(0x7f0000000080)='./file1\x00', 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setfsuid(0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[], 0x104}}, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$phonet_pipe(0x23, 0x5, 0x2) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000100)={0x1, 'geneve0\x00', 0x2a32}, 0x18) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x487, &(0x7f00000001c0), &(0x7f0000000200)=0x30) connect$phonet_pipe(r1, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x41}, 0x4000880) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) modify_ldt$write(0x1, &(0x7f0000000140)={0x7, 0xffffffffffffffff, 0x2000, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x10) 1m2.214316134s ago: executing program 3 (id=1279): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000004100)=""/4099, 0x1003}], 0x1}}], 0x1, 0x18ca02a0, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r3, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r3, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 58.467730011s ago: executing program 0 (id=1281): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440), 0x4000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0x16) mount(&(0x7f00000000c0)=@nullb, 0x0, &(0x7f0000000480)='cramfs\x00', 0x2, &(0x7f0000000580)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00[\x9a\xaa\xe7\xf4:\xe9\x8b\xb6m|\x7f\x11\xac?)\x8f\xcd7p+\xec<\x16\x1b\xf7h:\x81\x02\x88\xe9\x8c\xbb\xf9\xb3\xfbq{\x9c\x9e2,i\x13\xfe\xc4\xbf+\xb9V\xdb\xa0i\"\x94\xe1\xa0\"\xd7\xf0b\xb2\xc8\xb2x_\xd2\xa5\x8e\x00\x00\x00\x00\x00\x00\x00\x00\x14\xf4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x85\x01}*\xb8\xa7n\v\xca\x90\x9b\xcdHb\\\x16\xc6\x84\xc7\xa63\xe2\x05\v\xc2:uv9E!\xe3\x8a\x85\x19\xdc\r\xf1\xcf\xdaJ\xacy\xe1\x83o\xdd') utimensat(0xffffffffffffffff, &(0x7f0000000000)='./bus\x00', 0x0, 0x100) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x7, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004400)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000300)=""/41, 0x29}], 0x1}}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000001800)=""/4096, 0x1000}], 0x1}}], 0x2, 0x0, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x6, &(0x7f0000000100)=0x20002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000000d000)=""/102400, 0x19000) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_open_dev$vivid(&(0x7f0000000200), 0x0, 0x2) lsetxattr$system_posix_acl(&(0x7f00000002c0)='./cgroup\x00', &(0x7f0000000300)='system.posix_acl_default\x00', 0x0, 0x0, 0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000340)={0x0, @reserved}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') pread64(r4, 0x0, 0x0, 0x3) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') r5 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0x4]}, 0x8) read(r5, &(0x7f0000000740)=""/377, 0x179) read$FUSE(r5, &(0x7f00000064c0)={0x2020}, 0x2020) 58.33160071s ago: executing program 1 (id=1282): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$nfs(0x0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x20040c1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 57.167142069s ago: executing program 3 (id=1283): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000e40), 0x40040, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000ec0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000380)={0x18, r1}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xa) socket$unix(0x1, 0xc17a9ab45fe0440f, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/current\x00') readv(r3, &(0x7f0000001440)=[{&(0x7f0000000040)=""/20, 0x5}, {0x0, 0x2}], 0x2) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000080)={0x18, 0x0, {0xc, @multicast, 'ip6tnl0\x00'}}, 0x1e) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1000000003, 0x8, &(0x7f0000000300)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x4dc, 0x2d, 0x9, 0x70bd27, 0x25dfdbfe, {0x5}, [@typed={0x8, 0xa, 0x0, 0x0, @uid}, @nested={0x46f, 0xdb, 0x0, 0x1, [@typed={0x8, 0x3c, 0x0, 0x0, @ipv4=@remote}, @nested={0x1af, 0x11a, 0x0, 0x1, [@nested={0x4, 0x7d}, @typed={0x4, 0x1f}, @typed={0x8, 0xf2, 0x0, 0x0, @fd=r5}, @typed={0xc, 0x14, 0x0, 0x0, @u64=0x9}, @generic="6ab4282d19593ea3010b78d59fa47f0ac2404cd59f63f8afc1dec89a88a3bcbfc38bc3222dca0fc2db9021b6d39de969731be7427290fb051e28c4d538e4f6807cfb1554be4e23a591ec4a02f8bd74641d4d0240d4ca979018af5325a7ae69b8b68ddeb31fcbd83a52f6534d5ed221399aa56fa0dea20426fee58431c172744297004396a1b9ebc7163efe7cb9", @nested={0x4, 0x68}, @generic="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"]}, @generic="7d03997914d237c650175445c3ba7dce7ca607d479fd79f4755f3ca51a6d78f952c41d5abfd062cbf177301f08bcb13a5c637da3bb952a80900c79ba3922dd2c29342d60fb060644d0b8cd5cc1ec3611bf33c9e15727ca44fa1fefe4851b8cec3ab1299bb847d24dac0ad3468f459961c5", @nested={0x1f4, 0x131, 0x0, 0x1, [@generic="6ea2cd62264ccceda51899b319844b471b4cea17baf8a07a6da09cdbfa9b8817312c4333cb755dfa49518d7180417b4df4264f9a1197cfdc4c4b3bea4c4da1f35dc5ec5bec4647dd5deae9b6fca0cf2a5d62ef40620c76ed8a1e235829fb5c647d2a8696fa4b98c34c51a93f999959f9102b0a4d7093ebf2a8416389f69550722e36810561d4381179c3f51c71f42b6573bdd86311a5eae61a76be03ae7b700aac30c6d2adb44f6f48c2be0ec753071d69f3a3c05ee6cf4750", @nested={0x4, 0xb5}, @generic="687f0dc6bdf48a3c25f912b33c5aa697ff747fb62cc06ed75e4e51f251fc8c3a642a68f15f7102deabf0e1d7d1f0744252dda33d5ea35ec85cc04d13d62a45b550073cf37d98858f0265a04a7f67bb05b1a9ca2690c3cf7f2bfad25d8bcd70fba8bf919ec8be53d19e7bfd1aa77402be20e59d9bda220acca719f71f729a66f705616cc229d9c96bab7ac2c72ec92f628024fad3cb43d5439ff7afaa7aa34da4063c2549fc030eba55275a", @generic="bf87627838e58404916367520cceb4b87a79eb8c6df223c035cae8442fe4244a33b94d5b8b418b295b05b9b55026351820666e81cfe3fa9b87357863791b4e8fdfdeea45e972eff5a47cf0b52668318d28ca3a72f4244d760c623674343133ddb4b16d65dd0a56cb0cfbb929938cc70f926de817c9c47ae63d3c540556266c4f7581afc4", @nested={0x4, 0x101}]}, @generic="1a549925c03df0ce6c54c5465c80f72d9f76b2b837920145866effd66a7626e77dfae03f5fc4b3b5b398b5f5c8af7623e44b400b4fa498d3ef474f6b2bb8e42b1fbc6b912fa2", @typed={0x8, 0x83, 0x0, 0x0, @u32=0x13f9}]}, @generic="8e1d5febe1c6657344c712a7d90143988c25eb826a8e9881e1b9d1b306aa65c680df588ea2a6df4b8857c537c7583f71612927ae318ad06a9111163745423e2cf885631ba49089428f0ef08da5270d"]}, 0x4dc}}, 0xc880) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, 0x0) r7 = socket$inet6(0xa, 0x2, 0x3a) r8 = dup(r7) bind$unix(r8, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x8, 0x3a, 0xff, @remote, @local, {[], @echo_reply={0x81, 0x0, 0x0, 0x200}}}}}}, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x9, 0x94, 0x73, 0x8, 0x1199, 0x6821, 0x9859, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0x3, 0x0, 0x0, 0x37, 0x5d, 0xd2}}]}}]}}, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x1400, 0xfffffffe, 0x1d) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e0a056020"], 0xd) 56.857604502s ago: executing program 0 (id=1284): mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x0, 0xfe, 0x2, 0x0, 0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xe) shutdown(r1, 0x1) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000100)=0x6, 0x4) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) 56.60166741s ago: executing program 1 (id=1285): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001100)={0x14, r2, 0xf09, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004080}, 0x20008004) 54.274174836s ago: executing program 0 (id=1286): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) ioctl$COMEDI_CMD(r0, 0x80506409, &(0x7f0000000100)={0x1, 0x30000, 0x40, 0xffffffff, 0xffffffff, 0x2, 0x4, 0x9, 0x100, 0x101, 0xffffffff, 0x40000, 0x0, 0x0, 0x0}) 53.758372594s ago: executing program 1 (id=1287): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000e40), 0x40040, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000ec0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000380)={0x18, r1}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xa) socket$unix(0x1, 0xc17a9ab45fe0440f, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020027bd7000fcdbdf254c0000000c00a704000000000000000008000300020000100c00a7000100000000000000080001007063690011000200303000000008000300010000000f00a9007365636f6e646e616d6500000c00a6000000000000000000"], 0x74}, 0x1, 0x0, 0x0, 0x40880}, 0x24000800) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/current\x00') readv(r3, &(0x7f0000001440)=[{&(0x7f0000000040)=""/20, 0x5}, {0x0, 0x2}], 0x2) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000080)={0x18, 0x0, {0xc, @multicast, 'ip6tnl0\x00'}}, 0x1e) syz_emit_ethernet(0x16, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaa49aaaa2aaaaaaabb886400007e3fce28892f"], 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1000000003, 0x8, &(0x7f0000000300)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x4dc, 0x2d, 0x9, 0x70bd27, 0x25dfdbfe, {0x5}, [@typed={0x8, 0xa, 0x0, 0x0, @uid}, @nested={0x46f, 0xdb, 0x0, 0x1, [@typed={0x8, 0x3c, 0x0, 0x0, @ipv4=@remote}, @nested={0x1af, 0x11a, 0x0, 0x1, [@nested={0x4, 0x7d}, @typed={0x4, 0x1f}, @typed={0x8, 0xf2, 0x0, 0x0, @fd=r5}, @typed={0xc, 0x14, 0x0, 0x0, @u64=0x9}, @generic="6ab4282d19593ea3010b78d59fa47f0ac2404cd59f63f8afc1dec89a88a3bcbfc38bc3222dca0fc2db9021b6d39de969731be7427290fb051e28c4d538e4f6807cfb1554be4e23a591ec4a02f8bd74641d4d0240d4ca979018af5325a7ae69b8b68ddeb31fcbd83a52f6534d5ed221399aa56fa0dea20426fee58431c172744297004396a1b9ebc7163efe7cb9", @nested={0x4, 0x68}, @generic="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"]}, @generic="7d03997914d237c650175445c3ba7dce7ca607d479fd79f4755f3ca51a6d78f952c41d5abfd062cbf177301f08bcb13a5c637da3bb952a80900c79ba3922dd2c29342d60fb060644d0b8cd5cc1ec3611bf33c9e15727ca44fa1fefe4851b8cec3ab1299bb847d24dac0ad3468f459961c5", @nested={0x1f4, 0x131, 0x0, 0x1, [@generic="6ea2cd62264ccceda51899b319844b471b4cea17baf8a07a6da09cdbfa9b8817312c4333cb755dfa49518d7180417b4df4264f9a1197cfdc4c4b3bea4c4da1f35dc5ec5bec4647dd5deae9b6fca0cf2a5d62ef40620c76ed8a1e235829fb5c647d2a8696fa4b98c34c51a93f999959f9102b0a4d7093ebf2a8416389f69550722e36810561d4381179c3f51c71f42b6573bdd86311a5eae61a76be03ae7b700aac30c6d2adb44f6f48c2be0ec753071d69f3a3c05ee6cf4750", @nested={0x4, 0xb5}, @generic="687f0dc6bdf48a3c25f912b33c5aa697ff747fb62cc06ed75e4e51f251fc8c3a642a68f15f7102deabf0e1d7d1f0744252dda33d5ea35ec85cc04d13d62a45b550073cf37d98858f0265a04a7f67bb05b1a9ca2690c3cf7f2bfad25d8bcd70fba8bf919ec8be53d19e7bfd1aa77402be20e59d9bda220acca719f71f729a66f705616cc229d9c96bab7ac2c72ec92f628024fad3cb43d5439ff7afaa7aa34da4063c2549fc030eba55275a", @generic="bf87627838e58404916367520cceb4b87a79eb8c6df223c035cae8442fe4244a33b94d5b8b418b295b05b9b55026351820666e81cfe3fa9b87357863791b4e8fdfdeea45e972eff5a47cf0b52668318d28ca3a72f4244d760c623674343133ddb4b16d65dd0a56cb0cfbb929938cc70f926de817c9c47ae63d3c540556266c4f7581afc4", @nested={0x4, 0x101}]}, @generic="1a549925c03df0ce6c54c5465c80f72d9f76b2b837920145866effd66a7626e77dfae03f5fc4b3b5b398b5f5c8af7623e44b400b4fa498d3ef474f6b2bb8e42b1fbc6b912fa2", @typed={0x8, 0x83, 0x0, 0x0, @u32=0x13f9}]}, @generic="8e1d5febe1c6657344c712a7d90143988c25eb826a8e9881e1b9d1b306aa65c680df588ea2a6df4b8857c537c7583f71612927ae318ad06a9111163745423e2cf885631ba49089428f0ef08da5270d"]}, 0x4dc}}, 0xc880) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, 0x0) r7 = socket$inet6(0xa, 0x2, 0x3a) r8 = dup(r7) bind$unix(r8, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) syz_usb_connect(0x2, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x9, 0x94, 0x73, 0x8, 0x1199, 0x6821, 0x9859, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0x3, 0x0, 0x0, 0x37, 0x5d, 0xd2}}]}}]}}, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x1400, 0xfffffffe, 0x1d) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, 0x0, 0x0) 51.89078139s ago: executing program 3 (id=1288): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4000000) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x8, 0x584e4f53, 0x4, 0x2, 0x7, 0x0, 0x5, 0x1, 0x4, 0x2, 0x7}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYBLOB="ad4300000000010000000f"], 0x14}, 0x1, 0x0, 0x0, 0x20040054}, 0x0) set_mempolicy(0x2, &(0x7f0000000080)=0x51e1, 0x3ff) recvmmsg(0xffffffffffffffff, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x578410eb) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) process_vm_readv(r1, 0x0, 0x0, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000300)={@local, @random="390d42607512", @void, {@ipv6={0x86dd, @udp={0x7, 0x6, "20919d", 0x8, 0x11, 0xff, @dev={0xfe, 0x80, '\x00', 0x10}, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, {[], {0x4e22, 0x4e20, 0x8}}}}}}, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xf3e, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21}, &(0x7f0000000100)) 51.292196863s ago: executing program 0 (id=1289): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$snapshot(0xffffffffffffff9c, 0x0, 0xc2d41, 0x0) write$FUSE_LSEEK(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f00000001c0)='g', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}, 0x2}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000000c0)={0xb, 0x4, 0xfe, 0x2, 0x3, 0xfd, 0x85, 0x0, 0x2, 0x4, 0x2, 0x0, 0xf, 0x5}, 0xe) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(r1, 0x1, 0x28, 0x0, 0x0) shutdown(r1, 0x1) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004001}, 0x24044018) 49.19181168s ago: executing program 1 (id=1290): socket$inet6(0xa, 0x3, 0x3a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xd, 0x0, 0x0, &(0x7f0000000500)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x7}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) syz_open_dev$sndpcmp(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x4000009ca) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) 49.126636207s ago: executing program 0 (id=1291): bind$alg(0xffffffffffffffff, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x20, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) read$msr(0xffffffffffffffff, &(0x7f0000032680)=""/102400, 0x19000) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) socket$inet_udplite(0x2, 0x2, 0x88) close(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$USBDEVFS_REAPURB(r1, 0x4008550c, 0x0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x0, &(0x7f0000000240)={0x0, 0x0, 0xfffc, 0x360}, 0x8, 0x7, 0x80, 0x0, 0x1, 0x101, 0x0}) 47.407206757s ago: executing program 33 (id=1277): mkdir(&(0x7f0000000080)='./file1\x00', 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setfsuid(0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[], 0x104}}, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$phonet_pipe(0x23, 0x5, 0x2) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000100)={0x1, 'geneve0\x00', 0x2a32}, 0x18) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x487, &(0x7f00000001c0), &(0x7f0000000200)=0x30) connect$phonet_pipe(r1, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x41}, 0x4000880) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) modify_ldt$write(0x1, &(0x7f0000000140)={0x7, 0xffffffffffffffff, 0x2000, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x10) 47.391135128s ago: executing program 0 (id=1293): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) userfaultfd(0x801) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r2, 0x0, 0x8000000000000000}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@gettaction={0x34, 0x32, 0x301, 0x0, 0x2, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}]}, 0x34}}, 0x4000000) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) 47.389735671s ago: executing program 3 (id=1294): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$nfs(0x0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x20040c1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 0s ago: executing program 34 (id=1290): socket$inet6(0xa, 0x3, 0x3a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xd, 0x0, 0x0, &(0x7f0000000500)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x7}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) syz_open_dev$sndpcmp(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x4000009ca) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) kernel console output (not intermixed with test programs): : new low-speed USB device number 7 using dummy_hcd [ 211.256414][ T5905] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 211.283563][ T7560] netlink: 16 bytes leftover after parsing attributes in process `syz.3.511'. [ 211.293724][ T7560] netlink: 24 bytes leftover after parsing attributes in process `syz.3.511'. [ 211.307034][ T7560] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 211.383376][ T5905] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 211.391757][ T5905] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 211.401637][ T5905] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 211.413231][ T5905] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 211.430363][ T5905] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 39, setting to 8 [ 211.460919][ T5905] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 211.477126][ T5905] usb 3-1: string descriptor 0 read error: -22 [ 211.494215][ T5905] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 211.505804][ T5905] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.518596][ T5905] usb 3-1: config 0 descriptor?? [ 211.524436][ T7551] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 211.535898][ T5905] hub 3-1:0.0: bad descriptor, ignoring hub [ 211.548259][ T5905] hub 3-1:0.0: probe with driver hub failed with error -5 [ 211.564973][ T5905] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input9 [ 211.846497][ T5905] usb 3-1: USB disconnect, device number 7 [ 212.340609][ T7574] macvlan2: entered promiscuous mode [ 212.353475][ T7574] macvlan2: entered allmulticast mode [ 213.535161][ T7588] netlink: 16 bytes leftover after parsing attributes in process `syz.3.518'. [ 213.544154][ T7588] netlink: 24 bytes leftover after parsing attributes in process `syz.3.518'. [ 217.634538][ T30] audit: type=1400 audit(1751715042.579:305): avc: denied { connect } for pid=7622 comm="syz.1.531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 217.813418][ T5906] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 218.007985][ T5906] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 218.063444][ T5906] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 218.098108][ T5906] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.166499][ T5906] usb 5-1: config 0 descriptor?? [ 218.355766][ T30] audit: type=1400 audit(1751715043.619:306): avc: denied { read } for pid=5500 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 218.395948][ T7641] sp0: Synchronizing with TNC [ 218.422803][ T30] audit: type=1400 audit(1751715043.689:307): avc: denied { create } for pid=7625 comm="syz.4.530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 218.601248][ T7642] netlink: 'syz.4.530': attribute type 10 has an invalid length. [ 218.609473][ T7642] netlink: 40 bytes leftover after parsing attributes in process `syz.4.530'. [ 218.821203][ T30] audit: type=1400 audit(1751715043.689:308): avc: denied { allowed } for pid=7625 comm="syz.4.530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 218.883489][ T30] audit: type=1400 audit(1751715043.689:309): avc: denied { search } for pid=5500 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 218.956023][ T30] audit: type=1400 audit(1751715043.689:310): avc: denied { search } for pid=5500 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 219.014801][ T30] audit: type=1400 audit(1751715043.689:311): avc: denied { search } for pid=5500 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 219.063494][ T5920] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 219.158340][ T30] audit: type=1400 audit(1751715043.689:312): avc: denied { read } for pid=5500 comm="dhcpcd" name="n101" dev="tmpfs" ino=3773 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 219.180710][ T30] audit: type=1400 audit(1751715043.689:313): avc: denied { open } for pid=5500 comm="dhcpcd" path="/run/udev/data/n101" dev="tmpfs" ino=3773 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 219.224655][ T5906] ath6kl: Failed to submit usb control message: -110 [ 219.231670][ T5906] ath6kl: unable to send the bmi data to the device: -110 [ 219.239994][ T30] audit: type=1400 audit(1751715043.689:314): avc: denied { getattr } for pid=5500 comm="dhcpcd" path="/run/udev/data/n101" dev="tmpfs" ino=3773 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 219.291828][ T5906] ath6kl: Unable to send get target info: -110 [ 219.339877][ T5906] ath6kl: Failed to init ath6kl core: -110 [ 219.353504][ T5920] usb 2-1: Using ep0 maxpacket: 16 [ 219.355669][ T5906] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 219.365303][ T5920] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 219.383619][ T5920] usb 2-1: config 0 interface 0 has no altsetting 0 [ 219.416552][ T5920] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 219.427204][ T5920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.468562][ T5920] usb 2-1: Product: syz [ 219.472791][ T5920] usb 2-1: Manufacturer: syz [ 219.513591][ T5920] usb 2-1: SerialNumber: syz [ 219.521235][ T5920] usb 2-1: config 0 descriptor?? [ 219.541597][ T5920] hub 2-1:0.0: bad descriptor, ignoring hub [ 219.548439][ T5920] hub 2-1:0.0: probe with driver hub failed with error -5 [ 219.557488][ T5959] usb 5-1: USB disconnect, device number 8 [ 219.673572][ T5920] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 219.724529][ T36] usb 2-1: Failed to submit usb control message: -71 [ 219.731554][ T36] usb 2-1: unable to send the bmi data to the device: -71 [ 219.825086][ T7634] [U] è [ 219.850289][ T5920] usb 2-1: USB disconnect, device number 9 [ 219.878941][ T36] usb 2-1: unable to get target info from device [ 219.921324][ T36] usb 2-1: could not get target info (-71) [ 219.936105][ T36] usb 2-1: could not probe fw (-71) [ 220.785764][ T7672] netlink: 4 bytes leftover after parsing attributes in process `syz.3.541'. [ 220.864965][ T7667] netlink: 8 bytes leftover after parsing attributes in process `syz.3.541'. [ 220.875561][ T7667] netlink: 24 bytes leftover after parsing attributes in process `syz.3.541'. [ 220.960779][ T7672] hsr_slave_1 (unregistering): left promiscuous mode [ 221.162990][ T7680] ptrace attach of "./syz-executor exec"[5840] was attempted by "./syz-executor exec"[7680] [ 223.064666][ T30] kauditd_printk_skb: 48 callbacks suppressed [ 223.402149][ T7699] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 223.662692][ T30] audit: type=1400 audit(1751715048.259:363): avc: denied { create } for pid=7693 comm="syz.4.551" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 223.807751][ T30] audit: type=1400 audit(1751715048.279:364): avc: denied { write } for pid=7693 comm="syz.4.551" name="file0" dev="tmpfs" ino=621 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 223.830337][ T30] audit: type=1400 audit(1751715048.279:365): avc: denied { open } for pid=7693 comm="syz.4.551" path="/113/file0" dev="tmpfs" ino=621 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 223.853049][ C0] vkms_vblank_simulate: vblank timer overrun [ 223.859863][ T30] audit: type=1400 audit(1751715048.289:366): avc: denied { ioctl } for pid=7693 comm="syz.4.551" path="/113/file0" dev="tmpfs" ino=621 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 223.883873][ C0] vkms_vblank_simulate: vblank timer overrun [ 223.954762][ T30] audit: type=1400 audit(1751715049.179:367): avc: denied { unlink } for pid=5838 comm="syz-executor" name="file0" dev="tmpfs" ino=621 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 223.982794][ T5205] udevd[5205]: worker [6167] terminated by signal 33 (Unknown signal 33) [ 224.002452][ T5205] udevd[5205]: worker [6167] failed while handling '/devices/virtual/block/loop1' [ 224.034645][ T30] audit: type=1400 audit(1751715049.309:368): avc: denied { create } for pid=7704 comm="syz.4.554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 224.122576][ T30] audit: type=1400 audit(1751715049.369:369): avc: denied { write } for pid=7704 comm="syz.4.554" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 224.936243][ T30] audit: type=1400 audit(1751715050.199:370): avc: denied { setopt } for pid=7722 comm="syz.1.558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 225.027336][ T30] audit: type=1400 audit(1751715050.209:371): avc: denied { write } for pid=7722 comm="syz.1.558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 225.187315][ T30] audit: type=1400 audit(1751715050.209:372): avc: denied { bind } for pid=7722 comm="syz.1.558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 226.783129][ T7745] netlink: 16 bytes leftover after parsing attributes in process `syz.0.567'. [ 226.792103][ T7745] netlink: 24 bytes leftover after parsing attributes in process `syz.0.567'. [ 226.803943][ T7745] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 226.909622][ T7748] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 228.506438][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 228.506450][ T30] audit: type=1400 audit(1751715053.779:381): avc: denied { create } for pid=7768 comm="syz.1.575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 228.532210][ C0] vkms_vblank_simulate: vblank timer overrun [ 229.698803][ T30] audit: type=1400 audit(1751715054.889:382): avc: denied { create } for pid=7780 comm="syz.4.578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 229.929978][ T30] audit: type=1400 audit(1751715054.919:383): avc: denied { write } for pid=7778 comm="syz.0.577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 230.041152][ T30] audit: type=1400 audit(1751715054.919:384): avc: denied { nlmsg_write } for pid=7778 comm="syz.0.577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 230.087503][ T30] audit: type=1400 audit(1751715055.179:385): avc: denied { connect } for pid=7780 comm="syz.4.578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 230.156053][ T30] audit: type=1400 audit(1751715055.189:386): avc: denied { read } for pid=7780 comm="syz.4.578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 230.415735][ T30] audit: type=1400 audit(1751715055.689:387): avc: denied { create } for pid=7787 comm="syz.1.580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 230.972072][ T7797] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 230.984469][ T30] audit: type=1400 audit(1751715055.689:388): avc: denied { bind } for pid=7787 comm="syz.1.580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 231.013614][ T30] audit: type=1400 audit(1751715055.689:389): avc: denied { setopt } for pid=7787 comm="syz.1.580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 231.549758][ T5959] usb 5-1: new low-speed USB device number 9 using dummy_hcd [ 232.454999][ T5959] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 232.493761][ T5959] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 232.536700][ T5959] usb 5-1: config 0 has no interface number 0 [ 232.545955][ T5959] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 232.612927][ T5959] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.683861][ T5959] usb 5-1: config 0 descriptor?? [ 232.736401][ T5959] iowarrior 5-1:0.1: no interrupt-in endpoint found [ 232.950493][ T5948] usb 5-1: USB disconnect, device number 9 [ 233.083423][ T5959] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 233.273437][ T5959] usb 1-1: Using ep0 maxpacket: 16 [ 233.287680][ T5959] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 233.310062][ T5959] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.343986][ T5959] usb 1-1: config 0 descriptor?? [ 233.821809][ T7823] netlink: 16 bytes leftover after parsing attributes in process `syz.4.592'. [ 233.830978][ T7823] netlink: 24 bytes leftover after parsing attributes in process `syz.4.592'. [ 233.842176][ T7823] /dev/nullb0: Can't open blockdev [ 233.948702][ T5959] lenovo 0003:17EF:6047.0004: hidraw0: USB HID v1.01 Device [HID 17ef:6047] on usb-dummy_hcd.0-1/input0 [ 234.157037][ T30] audit: type=1400 audit(1751715059.429:390): avc: denied { create } for pid=7826 comm="syz.2.593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 234.248603][ T30] audit: type=1400 audit(1751715059.449:391): avc: denied { connect } for pid=7826 comm="syz.2.593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 234.623478][ T5906] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 234.655740][ T7834] random: crng reseeded on system resumption [ 235.897212][ T30] audit: type=1400 audit(1751715059.489:392): avc: denied { create } for pid=7826 comm="syz.2.593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 235.961898][ T5949] usb 1-1: USB disconnect, device number 6 [ 236.005296][ T30] audit: type=1400 audit(1751715059.509:393): avc: denied { bind } for pid=7826 comm="syz.2.593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 236.062794][ T5906] usb 3-1: config 0 has an invalid interface number: 3 but max is 0 [ 236.088062][ T5906] usb 3-1: config 0 has no interface number 0 [ 236.934725][ T5906] usb 3-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 236.943897][ T30] audit: type=1400 audit(1751715059.519:394): avc: denied { name_bind } for pid=7826 comm="syz.2.593" src=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 236.964363][ C0] vkms_vblank_simulate: vblank timer overrun [ 236.970571][ T5906] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.981202][ T5906] usb 3-1: config 0 descriptor?? [ 236.986324][ T30] audit: type=1400 audit(1751715059.539:395): avc: denied { node_bind } for pid=7826 comm="syz.2.593" saddr=2f23:2f6d:7372:: src=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 237.010050][ T30] audit: type=1400 audit(1751715059.709:396): avc: denied { watch watch_reads } for pid=7830 comm="syz.1.595" path="pipe:[4569]" dev="pipefs" ino=4569 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 237.033777][ C0] vkms_vblank_simulate: vblank timer overrun [ 237.041947][ T5906] hub 3-1:0.3: bad descriptor, ignoring hub [ 237.047995][ T5906] hub 3-1:0.3: probe with driver hub failed with error -5 [ 237.058084][ T5906] sierra 3-1:0.3: Sierra USB modem converter detected [ 237.065219][ T30] audit: type=1400 audit(1751715059.709:397): avc: denied { read write } for pid=7830 comm="syz.1.595" name="mouse0" dev="devtmpfs" ino=923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 237.349071][ T30] audit: type=1400 audit(1751715059.709:398): avc: denied { open } for pid=7830 comm="syz.1.595" path="/dev/input/mouse0" dev="devtmpfs" ino=923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 237.373133][ T30] audit: type=1400 audit(1751715059.839:399): avc: denied { create } for pid=7828 comm="syz.3.594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 237.437453][ T5906] usb 3-1: Sierra USB modem converter now attached to ttyUSB0 [ 237.468336][ T7856] ptrace attach of "./syz-executor exec"[5839] was attempted by "./syz-executor exec"[7856] [ 237.604171][ T5906] usb 3-1: USB disconnect, device number 8 [ 237.657814][ T5906] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 237.732405][ T5906] sierra 3-1:0.3: device disconnected [ 237.758315][ T7851] netlink: 24 bytes leftover after parsing attributes in process `syz.3.601'. [ 238.152296][ T7873] netlink: 16 bytes leftover after parsing attributes in process `syz.1.606'. [ 238.161400][ T7873] netlink: 24 bytes leftover after parsing attributes in process `syz.1.606'. [ 238.171698][ T7873] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 238.780289][ T5906] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 238.963321][ T5906] usb 1-1: Using ep0 maxpacket: 16 [ 238.981107][ T5906] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 239.030474][ T5906] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.151410][ T5906] usb 1-1: config 0 descriptor?? [ 239.516298][ T5949] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 239.724827][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 239.724845][ T30] audit: type=1400 audit(1751715064.989:418): avc: denied { sys_module } for pid=7880 comm="syz.1.610" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 239.874805][ T5949] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 239.893907][ T5906] lenovo 0003:17EF:6047.0005: hidraw0: USB HID v1.01 Device [HID 17ef:6047] on usb-dummy_hcd.0-1/input0 [ 239.913328][ T5949] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 239.939280][ T5949] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.966565][ T5949] usb 4-1: config 0 descriptor?? [ 240.298266][ T7894] netlink: 'syz.3.611': attribute type 10 has an invalid length. [ 240.306863][ T7894] netlink: 40 bytes leftover after parsing attributes in process `syz.3.611'. [ 240.342671][ T7894] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 240.953265][ T30] audit: type=1400 audit(1751715066.219:419): avc: denied { getopt } for pid=7898 comm="syz.2.614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 241.004449][ T7902] netlink: 'syz.2.614': attribute type 12 has an invalid length. [ 241.012392][ T7902] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.614'. [ 241.053497][ T5949] ath6kl: Failed to submit usb control message: -110 [ 241.060262][ T5949] ath6kl: unable to send the bmi data to the device: -110 [ 241.207664][ T7906] ptrace attach of "./syz-executor exec"[5839] was attempted by "./syz-executor exec"[7906] [ 241.407624][ T5906] usb 1-1: USB disconnect, device number 7 [ 241.478252][ T5949] ath6kl: Unable to send get target info: -110 [ 241.487693][ T5949] ath6kl: Failed to init ath6kl core: -110 [ 241.543925][ T5949] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 241.595343][ T5949] usb 4-1: USB disconnect, device number 9 [ 241.755303][ T7911] netlink: 'syz.4.618': attribute type 10 has an invalid length. [ 242.053377][ T24] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 242.301527][ T7923] netlink: 48 bytes leftover after parsing attributes in process `syz.4.621'. [ 242.386362][ T24] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 242.733723][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.749144][ T24] usb 2-1: config 0 descriptor?? [ 243.047928][ T24] cp210x 2-1:0.0: cp210x converter detected [ 243.288196][ T30] audit: type=1400 audit(1751715068.559:420): avc: denied { bind } for pid=7934 comm="syz.0.626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 243.390029][ T24] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 243.406394][ T7937] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve0, syncid = 10802, id = 0 [ 243.968713][ T24] usb 2-1: cp210x converter now attached to ttyUSB0 [ 244.173415][ T30] audit: type=1400 audit(1751715068.669:421): avc: denied { create } for pid=7934 comm="syz.0.626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 244.255344][ T24] usb 2-1: USB disconnect, device number 10 [ 244.323697][ T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 245.073455][ T24] cp210x 2-1:0.0: device disconnected [ 245.121591][ T30] audit: type=1400 audit(1751715070.359:422): avc: denied { write } for pid=7950 comm="syz.3.629" name="001" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 245.249228][ T5949] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 245.342978][ T7958] netlink: 'syz.2.632': attribute type 10 has an invalid length. [ 245.387297][ T7958] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 245.435142][ T5949] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 245.583296][ T5949] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 245.652508][ T7953] ptrace attach of "./syz-executor exec"[5838] was attempted by "./syz-executor exec"[7953] [ 245.684645][ T5949] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.705556][ T5949] usb 1-1: config 0 descriptor?? [ 246.070707][ T7969] netlink: 'syz.0.627': attribute type 10 has an invalid length. [ 246.078899][ T7969] netlink: 40 bytes leftover after parsing attributes in process `syz.0.627'. [ 246.090620][ T7969] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 246.364380][ T7971] netlink: 48 bytes leftover after parsing attributes in process `syz.1.636'. [ 246.903939][ T5949] ath6kl: Failed to submit usb control message: -110 [ 246.917164][ T5949] ath6kl: unable to send the bmi data to the device: -110 [ 246.925327][ T5949] ath6kl: Unable to send get target info: -110 [ 246.934162][ T5949] ath6kl: Failed to init ath6kl core: -110 [ 246.941703][ T5949] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 246.969667][ T30] audit: type=1400 audit(1751715072.239:423): avc: denied { connect } for pid=7979 comm="syz.2.640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 247.038371][ T30] audit: type=1400 audit(1751715072.309:424): avc: denied { read } for pid=7979 comm="syz.2.640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 247.064181][ T7981] netlink: 4 bytes leftover after parsing attributes in process `syz.2.640'. [ 247.111773][ T5950] usb 1-1: USB disconnect, device number 8 [ 247.564038][ T5950] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 247.785207][ T5950] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 247.807631][ T5950] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.837182][ T5950] usb 1-1: config 0 descriptor?? [ 247.878246][ T5950] cp210x 1-1:0.0: cp210x converter detected [ 247.985706][ T30] audit: type=1400 audit(1751715073.259:425): avc: denied { read write } for pid=8000 comm="syz.4.646" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 247.985761][ T30] audit: type=1400 audit(1751715073.259:426): avc: denied { open } for pid=8000 comm="syz.4.646" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 248.096061][ C0] vkms_vblank_simulate: vblank timer overrun [ 248.113545][ T30] audit: type=1400 audit(1751715073.369:427): avc: denied { mounton } for pid=8000 comm="syz.4.646" path="/133" dev="tmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 248.211987][ T30] audit: type=1400 audit(1751715073.479:428): avc: denied { create } for pid=8000 comm="syz.4.646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 248.231417][ C0] vkms_vblank_simulate: vblank timer overrun [ 248.239790][ T8001] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 248.267915][ T30] audit: type=1400 audit(1751715073.509:429): avc: denied { connect } for pid=8000 comm="syz.4.646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 248.427540][ T5950] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 248.496024][ T8011] netlink: 16 bytes leftover after parsing attributes in process `syz.2.648'. [ 248.505088][ T8011] netlink: 24 bytes leftover after parsing attributes in process `syz.2.648'. [ 248.517584][ T8011] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 248.540140][ T8012] ptrace attach of "./syz-executor exec"[5830] was attempted by "./syz-executor exec"[8012] [ 248.896409][ T5834] kernel read not supported for file /vga_arbiter (pid: 5834 comm: kworker/0:3) [ 248.896602][ T5950] usb 1-1: cp210x converter now attached to ttyUSB0 [ 249.201695][ T5949] usb 1-1: USB disconnect, device number 9 [ 249.215233][ T5949] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 249.258311][ T5949] cp210x 1-1:0.0: device disconnected [ 249.433367][ T5834] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 249.584951][ T5834] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 249.596751][ T5834] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 249.605989][ T5834] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.616539][ T5834] usb 5-1: config 0 descriptor?? [ 249.699060][ T8029] netlink: 'syz.3.655': attribute type 10 has an invalid length. [ 249.725023][ T8029] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 250.413151][ T8036] netlink: 'syz.4.653': attribute type 10 has an invalid length. [ 250.421142][ T8036] netlink: 40 bytes leftover after parsing attributes in process `syz.4.653'. [ 250.643905][ T5949] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 250.673630][ T5834] ath6kl: Failed to submit usb control message: -110 [ 250.706033][ T5834] ath6kl: unable to send the bmi data to the device: -110 [ 250.738711][ T5834] ath6kl: Unable to send get target info: -110 [ 250.762657][ T5834] ath6kl: Failed to init ath6kl core: -110 [ 250.781964][ T5834] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 250.817431][ T5949] usb 1-1: config 0 has an invalid interface number: 3 but max is 0 [ 250.844746][ T5949] usb 1-1: config 0 has no interface number 0 [ 250.852872][ T5949] usb 1-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 250.871213][ T5949] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.893783][ T5949] usb 1-1: config 0 descriptor?? [ 251.048412][ T5949] hub 1-1:0.3: bad descriptor, ignoring hub [ 251.063735][ T5949] hub 1-1:0.3: probe with driver hub failed with error -5 [ 251.073210][ T5949] sierra 1-1:0.3: Sierra USB modem converter detected [ 251.195052][ T8048] netlink: 16 bytes leftover after parsing attributes in process `syz.1.660'. [ 251.238138][ T5959] usb 5-1: USB disconnect, device number 10 [ 251.282943][ T5949] usb 1-1: Sierra USB modem converter now attached to ttyUSB0 [ 251.338053][ T5949] usb 1-1: USB disconnect, device number 10 [ 251.369365][ T5949] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 251.402988][ T5949] sierra 1-1:0.3: device disconnected [ 251.655551][ T8056] ptrace attach of "./syz-executor exec"[5839] was attempted by "./syz-executor exec"[8056] [ 251.972468][ T30] audit: type=1400 audit(1751715077.239:430): avc: denied { create } for pid=8058 comm="syz.3.664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 252.099736][ T30] audit: type=1400 audit(1751715077.259:431): avc: denied { setopt } for pid=8058 comm="syz.3.664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 252.142631][ T8066] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 252.146226][ T8068] netlink: 'syz.0.667': attribute type 10 has an invalid length. [ 252.261326][ T8068] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 252.347002][ T8076] netlink: 4 bytes leftover after parsing attributes in process `syz.1.668'. [ 252.492684][ T8081] netlink: 8 bytes leftover after parsing attributes in process `syz.1.668'. [ 252.505621][ T8081] netlink: 24 bytes leftover after parsing attributes in process `syz.1.668'. [ 252.589287][ T8076] hsr_slave_1 (unregistering): left promiscuous mode [ 252.761989][ T8089] netlink: 16 bytes leftover after parsing attributes in process `syz.0.672'. [ 252.819135][ T24] kernel read not supported for file /vga_arbiter (pid: 24 comm: kworker/1:0) [ 252.893460][ T8094] netlink: 60 bytes leftover after parsing attributes in process `syz.4.673'. [ 253.451373][ T30] audit: type=1400 audit(1751715078.719:432): avc: denied { module_request } for pid=8098 comm="syz.2.675" kmod="net-pf-10-proto-132" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 253.488874][ T8102] sp0: Synchronizing with TNC [ 253.500564][ T30] audit: type=1400 audit(1751715078.769:433): avc: denied { read } for pid=5500 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 253.523594][ T30] audit: type=1400 audit(1751715078.799:434): avc: denied { create } for pid=8103 comm="syz.3.676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 253.548666][ T30] audit: type=1400 audit(1751715078.819:435): avc: denied { read } for pid=8103 comm="syz.3.676" dev="nsfs" ino=4026532811 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 253.665145][ T30] audit: type=1400 audit(1751715078.819:436): avc: denied { open } for pid=8103 comm="syz.3.676" path="net:[4026532811]" dev="nsfs" ino=4026532811 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 253.708835][ T30] audit: type=1400 audit(1751715078.819:437): avc: denied { create } for pid=8103 comm="syz.3.676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 253.806575][ T30] audit: type=1400 audit(1751715078.899:438): avc: denied { read write } for pid=5838 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 253.865505][ T30] audit: type=1400 audit(1751715078.899:439): avc: denied { open } for pid=5838 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 253.902356][ T8113] netlink: 12 bytes leftover after parsing attributes in process `syz.1.678'. [ 253.923337][ T49] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 254.050884][ T8116] netlink: 48 bytes leftover after parsing attributes in process `syz.1.679'. [ 254.105349][ T49] usb 3-1: Using ep0 maxpacket: 16 [ 254.114396][ T49] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 254.127883][ T49] usb 3-1: config 0 interface 0 has no altsetting 0 [ 254.138032][ T49] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 254.150166][ T49] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.158353][ T49] usb 3-1: Product: syz [ 254.162656][ T49] usb 3-1: Manufacturer: syz [ 254.169211][ T49] usb 3-1: SerialNumber: syz [ 254.208108][ T49] usb 3-1: config 0 descriptor?? [ 254.229017][ T49] hub 3-1:0.0: bad descriptor, ignoring hub [ 254.236881][ T49] hub 3-1:0.0: probe with driver hub failed with error -5 [ 254.269033][ T49] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 254.279376][ T8118] netlink: 'syz.1.680': attribute type 10 has an invalid length. [ 254.317029][ T59] usb 3-1: Failed to submit usb control message: -71 [ 254.366057][ T8118] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 254.393486][ T59] usb 3-1: unable to send the bmi data to the device: -71 [ 254.432842][ T59] usb 3-1: unable to get target info from device [ 254.456513][ T8098] [U] è [ 254.459737][ T59] usb 3-1: could not get target info (-71) [ 254.488681][ T59] usb 3-1: could not probe fw (-71) [ 254.554056][ T49] usb 3-1: USB disconnect, device number 9 [ 255.213460][ T5949] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 255.344720][ T8138] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 255.389316][ T5949] usb 1-1: Using ep0 maxpacket: 16 [ 255.407295][ T5949] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 255.421920][ T5949] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.442007][ T5949] usb 1-1: config 0 descriptor?? [ 256.148757][ T5949] usbhid 1-1:0.0: can't add hid device: -32 [ 256.160825][ T5949] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 256.255307][ T8152] netlink: 60 bytes leftover after parsing attributes in process `syz.1.688'. [ 256.669690][ T8155] netlink: 12 bytes leftover after parsing attributes in process `syz.2.689'. [ 256.957449][ T8160] netlink: 16 bytes leftover after parsing attributes in process `syz.4.690'. [ 256.970056][ T8160] netlink: 24 bytes leftover after parsing attributes in process `syz.4.690'. [ 256.981224][ T8160] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 256.993061][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 256.993081][ T30] audit: type=1400 audit(1751715082.249:479): avc: denied { mounton } for pid=8156 comm="syz.4.690" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=67 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 258.197924][ T49] usb 1-1: USB disconnect, device number 11 [ 258.637000][ T8184] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 258.685798][ T30] audit: type=1400 audit(1751715083.959:480): avc: denied { ioctl } for pid=8186 comm="syz.3.700" path="socket:[15114]" dev="sockfs" ino=15114 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 258.688194][ T8188] netlink: 4 bytes leftover after parsing attributes in process `syz.3.700'. [ 258.720231][ T30] audit: type=1400 audit(1751715083.959:481): avc: denied { write } for pid=8186 comm="syz.3.700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 258.946946][ T8194] netlink: 12 bytes leftover after parsing attributes in process `syz.2.703'. [ 258.972893][ T30] audit: type=1400 audit(1751715084.239:482): avc: denied { name_bind } for pid=8195 comm="syz.1.704" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 259.549384][ T30] audit: type=1400 audit(1751715084.239:483): avc: denied { node_bind } for pid=8195 comm="syz.1.704" saddr=224.0.0.1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 259.573924][ T24] kernel read not supported for file /vga_arbiter (pid: 24 comm: kworker/1:0) [ 259.885650][ T8206] netlink: 16 bytes leftover after parsing attributes in process `syz.0.706'. [ 259.894613][ T8206] netlink: 24 bytes leftover after parsing attributes in process `syz.0.706'. [ 259.905193][ T8206] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 260.206881][ T30] audit: type=1400 audit(1751715084.859:484): avc: denied { create } for pid=8198 comm="syz.3.705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 260.235850][ T30] audit: type=1400 audit(1751715085.179:485): avc: denied { create } for pid=8198 comm="syz.3.705" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 260.345521][ T30] audit: type=1400 audit(1751715085.179:486): avc: denied { write } for pid=8198 comm="syz.3.705" name="file0" dev="tmpfs" ino=759 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 260.350226][ T8211] netlink: 48 bytes leftover after parsing attributes in process `syz.3.709'. [ 260.367760][ C0] vkms_vblank_simulate: vblank timer overrun [ 260.377073][ T30] audit: type=1400 audit(1751715085.179:487): avc: denied { open } for pid=8198 comm="syz.3.705" path="/141/file0" dev="tmpfs" ino=759 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 260.439934][ T30] audit: type=1400 audit(1751715085.189:488): avc: denied { ioctl } for pid=8198 comm="syz.3.705" path="/141/file0" dev="tmpfs" ino=759 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 260.773727][ T5906] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 260.956281][ T5906] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 260.966513][ T5906] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 260.975726][ T5906] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.987714][ T5906] usb 3-1: config 0 descriptor?? [ 261.336148][ T8227] netlink: 'syz.2.710': attribute type 10 has an invalid length. [ 261.344190][ T8227] netlink: 40 bytes leftover after parsing attributes in process `syz.2.710'. [ 261.370916][ T8227] batman_adv: batadv0: Adding interface: vlan1 [ 261.377293][ T8227] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.402636][ C0] vkms_vblank_simulate: vblank timer overrun [ 261.409413][ T8227] batman_adv: batadv0: Interface activated: vlan1 [ 261.888139][ T8235] netlink: 4 bytes leftover after parsing attributes in process `syz.3.715'. [ 261.915080][ T8237] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 262.017158][ T5906] ath6kl: Failed to submit usb control message: -110 [ 262.039489][ T5906] ath6kl: unable to send the bmi data to the device: -110 [ 262.067998][ T5906] ath6kl: Unable to send get target info: -110 [ 262.091977][ T5906] ath6kl: Failed to init ath6kl core: -110 [ 262.111426][ T5906] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 262.135140][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 262.135161][ T30] audit: type=1400 audit(1751715087.409:493): avc: denied { create } for pid=8239 comm="syz.4.717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 262.195157][ T30] audit: type=1400 audit(1751715087.409:494): avc: denied { setopt } for pid=8239 comm="syz.4.717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 262.214551][ C0] vkms_vblank_simulate: vblank timer overrun [ 262.224934][ T30] audit: type=1400 audit(1751715087.409:495): avc: denied { write } for pid=8239 comm="syz.4.717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 262.339478][ T24] usb 3-1: USB disconnect, device number 10 [ 262.383505][ T30] audit: type=1400 audit(1751715087.409:496): avc: denied { read } for pid=8239 comm="syz.4.717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 262.403455][ T30] audit: type=1400 audit(1751715087.469:497): avc: denied { bind } for pid=8239 comm="syz.4.717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 262.640360][ T5959] kernel read not supported for file /vga_arbiter (pid: 5959 comm: kworker/1:7) [ 262.733931][ T30] audit: type=1400 audit(1751715087.469:498): avc: denied { node_bind } for pid=8239 comm="syz.4.717" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 262.829637][ T8248] netlink: 'syz.2.719': attribute type 12 has an invalid length. [ 262.837490][ T8248] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.719'. [ 263.739395][ T30] audit: type=1400 audit(1751715087.469:499): avc: denied { connect } for pid=8239 comm="syz.4.717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 263.793589][ T30] audit: type=1400 audit(1751715087.469:500): avc: denied { write } for pid=8239 comm="syz.4.717" laddr=::1 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 263.815147][ T30] audit: type=1400 audit(1751715087.999:501): avc: denied { create } for pid=8245 comm="syz.2.719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 263.834809][ T30] audit: type=1400 audit(1751715088.089:502): avc: denied { setopt } for pid=8245 comm="syz.2.719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 263.960299][ T8259] netlink: 48 bytes leftover after parsing attributes in process `syz.4.723'. [ 264.050775][ T8257] netlink: 20 bytes leftover after parsing attributes in process `syz.3.721'. [ 264.059883][ T8257] x_tables: ip_tables: udp match: only valid for protocol 17 [ 264.252677][ T8266] netlink: 40 bytes leftover after parsing attributes in process `syz.3.727'. [ 264.311722][ T8269] netlink: 4 bytes leftover after parsing attributes in process `syz.1.728'. [ 264.467106][ T8278] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 264.633358][ T5950] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 264.795128][ T5950] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 264.804487][ T5950] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.819612][ T5950] usb 1-1: config 0 descriptor?? [ 264.831641][ T5950] cp210x 1-1:0.0: cp210x converter detected [ 265.180439][ T8286] netlink: 80 bytes leftover after parsing attributes in process `syz.2.732'. [ 265.463828][ T5950] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 265.812298][ T5950] usb 1-1: cp210x converter now attached to ttyUSB0 [ 265.850565][ T5834] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 265.983473][ T5959] usb 1-1: USB disconnect, device number 12 [ 266.060937][ T5959] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 266.326500][ T5834] usb 3-1: config 0 has an invalid interface number: 3 but max is 0 [ 266.359473][ T5834] usb 3-1: config 0 has no interface number 0 [ 266.374944][ T5834] usb 3-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 266.420685][ T5834] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.452312][ T5834] usb 3-1: config 0 descriptor?? [ 266.472313][ T5959] cp210x 1-1:0.0: device disconnected [ 266.512181][ T5834] hub 3-1:0.3: bad descriptor, ignoring hub [ 266.649712][ T8305] netlink: 'syz.3.736': attribute type 12 has an invalid length. [ 266.657792][ T8305] netlink: 9472 bytes leftover after parsing attributes in process `syz.3.736'. [ 266.705826][ T5834] hub 3-1:0.3: probe with driver hub failed with error -5 [ 266.763499][ T5834] sierra 3-1:0.3: Sierra USB modem converter detected [ 266.795247][ T5844] Bluetooth: hci4: unexpected event for opcode 0x2060 [ 266.829866][ T5834] usb 3-1: Sierra USB modem converter now attached to ttyUSB0 [ 267.034123][ T5834] usb 3-1: USB disconnect, device number 11 [ 267.073477][ T8308] netlink: 12 bytes leftover after parsing attributes in process `syz.1.737'. [ 267.089179][ T5834] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 267.111828][ T8310] netlink: 20 bytes leftover after parsing attributes in process `syz.4.738'. [ 267.120990][ T8310] x_tables: ip_tables: udp match: only valid for protocol 17 [ 267.168390][ T5834] sierra 3-1:0.3: device disconnected [ 267.241704][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 267.241722][ T30] audit: type=1400 audit(1751715092.509:518): avc: denied { append } for pid=8316 comm="syz.3.740" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 267.415211][ T8325] netlink: 4 bytes leftover after parsing attributes in process `syz.4.741'. [ 267.759670][ T30] audit: type=1400 audit(1751715093.009:519): avc: denied { add_name } for pid=8289 comm="dhcpcd-run-hook" name="resolv.conf.lapb4.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 267.980645][ T30] audit: type=1400 audit(1751715093.019:520): avc: denied { create } for pid=8289 comm="dhcpcd-run-hook" name="resolv.conf.lapb4.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 268.045581][ T30] audit: type=1400 audit(1751715093.019:521): avc: denied { write } for pid=8289 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.lapb4.link" dev="tmpfs" ino=4417 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 268.176216][ T30] audit: type=1400 audit(1751715093.019:522): avc: denied { append } for pid=8289 comm="dhcpcd-run-hook" name="resolv.conf.lapb4.link" dev="tmpfs" ino=4417 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 268.270706][ T30] audit: type=1400 audit(1751715093.399:523): avc: denied { remove_name } for pid=8337 comm="rm" name="resolv.conf.lapb4.link" dev="tmpfs" ino=4417 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 268.328798][ T30] audit: type=1400 audit(1751715093.399:524): avc: denied { unlink } for pid=8337 comm="rm" name="resolv.conf.lapb4.link" dev="tmpfs" ino=4417 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 268.374783][ T8347] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 268.778472][ T30] audit: type=1400 audit(1751715094.049:525): avc: denied { write } for pid=8356 comm="syz.1.747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 268.825673][ T30] audit: type=1400 audit(1751715094.049:526): avc: denied { connect } for pid=8356 comm="syz.1.747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 268.869496][ T30] audit: type=1400 audit(1751715094.049:527): avc: denied { name_connect } for pid=8356 comm="syz.1.747" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 269.255848][ T8366] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 269.845703][ T8375] random: crng reseeded on system resumption [ 272.467767][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 272.467785][ T30] audit: type=1400 audit(1751715097.739:541): avc: denied { unmount } for pid=5839 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 272.654537][ T8380] netlink: 'syz.3.751': attribute type 12 has an invalid length. [ 272.662422][ T8380] netlink: 9472 bytes leftover after parsing attributes in process `syz.3.751'. [ 273.412680][ T30] audit: type=1400 audit(1751715098.679:542): avc: denied { write } for pid=8387 comm="syz.1.753" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 273.704821][ T30] audit: type=1400 audit(1751715098.969:543): avc: denied { create } for pid=8401 comm="syz.4.756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 273.962554][ T5844] Bluetooth: hci4: command 0x0405 tx timeout [ 274.370447][ T30] audit: type=1400 audit(1751715098.979:544): avc: denied { setopt } for pid=8401 comm="syz.4.756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 275.082852][ T8425] netlink: 4 bytes leftover after parsing attributes in process `syz.0.761'. [ 275.124013][ T30] audit: type=1400 audit(1751715100.339:545): avc: denied { create } for pid=8424 comm="syz.0.761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 275.251109][ T30] audit: type=1400 audit(1751715100.339:546): avc: denied { connect } for pid=8424 comm="syz.0.761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 275.331195][ T30] audit: type=1400 audit(1751715100.339:547): avc: denied { write } for pid=8424 comm="syz.0.761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 276.279759][ T30] audit: type=1400 audit(1751715100.339:548): avc: denied { read } for pid=8424 comm="syz.0.761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 276.299323][ T30] audit: type=1400 audit(1751715100.549:549): avc: denied { create } for pid=8432 comm="syz.2.765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 276.318912][ T30] audit: type=1400 audit(1751715100.559:550): avc: denied { ioctl } for pid=8432 comm="syz.2.765" path="socket:[16617]" dev="sockfs" ino=16617 ioctlcmd=0x89e9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 277.958002][ T8467] netlink: 24 bytes leftover after parsing attributes in process `syz.0.769'. [ 278.498384][ T8479] netlink: 20 bytes leftover after parsing attributes in process `syz.4.772'. [ 279.046299][ T8485] netlink: 16 bytes leftover after parsing attributes in process `syz.1.774'. [ 279.055243][ T8485] netlink: 24 bytes leftover after parsing attributes in process `syz.1.774'. [ 279.065608][ T8485] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 280.574341][ T5834] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 280.614037][ T8511] netlink: 80 bytes leftover after parsing attributes in process `syz.0.779'. [ 281.453797][ T5906] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 281.483445][ T5834] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 281.493311][ T5834] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 281.502374][ T5834] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.546569][ T5834] usb 4-1: config 0 descriptor?? [ 281.609534][ T8528] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8528 comm=syz.1.783 [ 281.627671][ T5906] usb 1-1: config 0 has an invalid interface number: 3 but max is 0 [ 281.642977][ T5906] usb 1-1: config 0 has no interface number 0 [ 281.661039][ T5906] usb 1-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 281.680193][ T8530] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 281.688540][ T5906] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.763339][ T5959] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 281.858947][ T8531] netlink: 'syz.3.777': attribute type 10 has an invalid length. [ 281.868356][ T8531] netlink: 40 bytes leftover after parsing attributes in process `syz.3.777'. [ 281.886065][ T8531] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 281.964756][ T5906] usb 1-1: config 0 descriptor?? [ 281.983687][ T5959] usb 3-1: device descriptor read/64, error -71 [ 282.157179][ T5906] hub 1-1:0.3: bad descriptor, ignoring hub [ 282.174331][ T5906] hub 1-1:0.3: probe with driver hub failed with error -5 [ 282.197948][ T5906] sierra 1-1:0.3: Sierra USB modem converter detected [ 282.207783][ T8534] netlink: 4 bytes leftover after parsing attributes in process `syz.1.784'. [ 282.403282][ T5959] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 282.436590][ T5844] Bluetooth: hci0: unexpected event for opcode 0x2060 [ 282.454573][ T5906] usb 1-1: Sierra USB modem converter now attached to ttyUSB0 [ 282.658953][ T5906] usb 1-1: USB disconnect, device number 13 [ 282.699413][ T5906] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 282.713493][ T5959] usb 3-1: device descriptor read/64, error -71 [ 282.725311][ T5906] sierra 1-1:0.3: device disconnected [ 282.736931][ T5834] ath6kl: Failed to submit usb control message: -110 [ 282.748205][ T5834] ath6kl: unable to send the bmi data to the device: -110 [ 282.768058][ T5834] ath6kl: Unable to send get target info: -110 [ 282.785297][ T5834] ath6kl: Failed to init ath6kl core: -110 [ 282.791817][ T5834] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 282.833694][ T5959] usb usb3-port1: attempt power cycle [ 282.959996][ T5950] usb 4-1: USB disconnect, device number 10 [ 283.193384][ T5959] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 283.692689][ T5959] usb 3-1: device descriptor read/8, error -71 [ 284.883375][ T5959] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 284.972723][ T5959] usb 3-1: device descriptor read/8, error -71 [ 285.011029][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 285.018618][ T30] audit: type=1400 audit(1751715110.279:557): avc: denied { create } for pid=8568 comm="syz.0.794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 285.049666][ T30] audit: type=1400 audit(1751715110.279:558): avc: denied { ioctl } for pid=8568 comm="syz.0.794" path="socket:[15981]" dev="sockfs" ino=15981 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 285.081929][ T8570] netlink: 4 bytes leftover after parsing attributes in process `syz.0.794'. [ 285.194974][ T5959] usb usb3-port1: unable to enumerate USB device [ 285.241455][ T8575] netlink: 16 bytes leftover after parsing attributes in process `syz.2.792'. [ 285.250491][ T8575] netlink: 24 bytes leftover after parsing attributes in process `syz.2.792'. [ 285.260739][ T8575] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 285.302221][ T8579] netlink: 8 bytes leftover after parsing attributes in process `syz.0.794'. [ 285.334502][ T8579] netlink: 24 bytes leftover after parsing attributes in process `syz.0.794'. [ 286.289247][ T8570] hsr_slave_1 (unregistering): left promiscuous mode [ 286.529327][ T30] audit: type=1400 audit(1751715111.799:559): avc: denied { write } for pid=8581 comm="syz.4.796" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 286.556408][ T30] audit: type=1400 audit(1751715111.799:560): avc: denied { open } for pid=8581 comm="syz.4.796" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 286.709202][ T30] audit: type=1400 audit(1751715111.799:561): avc: denied { ioctl } for pid=8581 comm="syz.4.796" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 286.853739][ T8596] sp0: Synchronizing with TNC [ 287.117234][ T8599] netlink: 80 bytes leftover after parsing attributes in process `syz.3.800'. [ 287.143593][ T49] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 287.344476][ T49] usb 1-1: Using ep0 maxpacket: 16 [ 287.351374][ T49] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 287.373302][ T49] usb 1-1: config 0 interface 0 has no altsetting 0 [ 287.385713][ T49] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 287.403841][ T49] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.411860][ T49] usb 1-1: Product: syz [ 287.424879][ T49] usb 1-1: Manufacturer: syz [ 287.429536][ T49] usb 1-1: SerialNumber: syz [ 287.463497][ T5920] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 287.472227][ T49] usb 1-1: config 0 descriptor?? [ 287.613096][ T49] hub 1-1:0.0: bad descriptor, ignoring hub [ 288.021328][ T8593] [U] è [ 288.148664][ T49] hub 1-1:0.0: probe with driver hub failed with error -5 [ 288.171560][ T49] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 288.175731][ T2906] usb 1-1: Failed to submit usb control message: -71 [ 288.220250][ T2906] usb 1-1: unable to send the bmi data to the device: -71 [ 288.233931][ T49] usb 1-1: USB disconnect, device number 14 [ 288.240100][ T2906] usb 1-1: unable to get target info from device [ 288.250445][ T2906] usb 1-1: could not get target info (-71) [ 288.260258][ T2906] usb 1-1: could not probe fw (-71) [ 288.263323][ T5920] usb 4-1: config 0 has an invalid interface number: 3 but max is 0 [ 288.303389][ T5959] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 288.311467][ T5920] usb 4-1: config 0 has no interface number 0 [ 288.846236][ T5920] usb 4-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 289.113353][ T5920] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.206316][ T5920] usb 4-1: config 0 descriptor?? [ 289.228232][ T5959] usb 5-1: device descriptor read/64, error -71 [ 289.245677][ T5920] hub 4-1:0.3: bad descriptor, ignoring hub [ 289.306291][ T5920] hub 4-1:0.3: probe with driver hub failed with error -5 [ 289.328233][ T5920] sierra 4-1:0.3: Sierra USB modem converter detected [ 289.530217][ T5844] Bluetooth: hci1: unexpected event for opcode 0x2060 [ 289.552170][ T5920] usb 4-1: Sierra USB modem converter now attached to ttyUSB0 [ 289.598504][ T5920] usb 4-1: USB disconnect, device number 11 [ 289.623808][ T5920] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 289.672337][ T5959] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 290.235692][ T5920] sierra 4-1:0.3: device disconnected [ 290.318949][ T5959] usb 5-1: device descriptor read/64, error -71 [ 290.369110][ T8623] netlink: 4 bytes leftover after parsing attributes in process `syz.1.807'. [ 290.491269][ T5959] usb usb5-port1: attempt power cycle [ 290.680350][ T8637] netlink: 4 bytes leftover after parsing attributes in process `syz.1.809'. [ 291.057742][ T8647] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 291.564152][ T8656] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8656 comm=syz.4.814 [ 292.376579][ T8661] sp0: Synchronizing with TNC [ 292.640831][ T8664] netlink: 'syz.4.817': attribute type 12 has an invalid length. [ 292.649169][ T8664] netlink: 9472 bytes leftover after parsing attributes in process `syz.4.817'. [ 293.013321][ T5906] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 293.882081][ T8677] netlink: 4 bytes leftover after parsing attributes in process `syz.3.820'. [ 293.943817][ T5906] usb 2-1: Using ep0 maxpacket: 16 [ 293.969252][ T5906] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 293.992929][ T5906] usb 2-1: config 0 interface 0 has no altsetting 0 [ 294.011237][ T5906] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 294.025333][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.133883][ T5959] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 294.304115][ T5906] usb 2-1: Product: syz [ 294.307963][ T5959] usb 5-1: device descriptor read/64, error -71 [ 294.309292][ T5906] usb 2-1: Manufacturer: syz [ 294.319274][ T5906] usb 2-1: SerialNumber: syz [ 294.339277][ T5906] usb 2-1: config 0 descriptor?? [ 294.350149][ T5906] hub 2-1:0.0: bad descriptor, ignoring hub [ 294.373627][ T5906] hub 2-1:0.0: probe with driver hub failed with error -5 [ 294.983626][ T5906] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 295.005190][ T59] usb 2-1: Failed to submit usb control message: -71 [ 295.016802][ T8657] [U] è [ 295.042753][ T59] usb 2-1: unable to send the bmi data to the device: -71 [ 295.054633][ T59] usb 2-1: unable to get target info from device [ 295.064694][ T5906] usb 2-1: USB disconnect, device number 11 [ 295.076555][ T59] usb 2-1: could not get target info (-71) [ 295.109418][ T59] usb 2-1: could not probe fw (-71) [ 295.173757][ T5959] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 295.313413][ T5959] usb 5-1: device descriptor read/64, error -71 [ 295.455123][ T5959] usb usb5-port1: attempt power cycle [ 295.718282][ T8708] netlink: 4 bytes leftover after parsing attributes in process `syz.3.826'. [ 295.758084][ T8708] netlink: 8 bytes leftover after parsing attributes in process `syz.3.826'. [ 295.803360][ T8708] netlink: 24 bytes leftover after parsing attributes in process `syz.3.826'. [ 296.318725][ T5959] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 296.344090][ T5959] usb 5-1: device descriptor read/8, error -71 [ 296.583458][ T5959] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 296.670818][ T5959] usb 5-1: device descriptor read/8, error -71 [ 296.786252][ T5959] usb usb5-port1: unable to enumerate USB device [ 296.857225][ T8725] netlink: 'syz.0.832': attribute type 12 has an invalid length. [ 296.865066][ T8725] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.832'. [ 297.306920][ T8732] netlink: 80 bytes leftover after parsing attributes in process `syz.0.835'. [ 297.779376][ T5959] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 298.430013][ T5959] usb 1-1: config 0 has an invalid interface number: 3 but max is 0 [ 298.510842][ T5959] usb 1-1: config 0 has no interface number 0 [ 298.511101][ T5959] usb 1-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 298.511163][ T5959] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.526698][ T5959] usb 1-1: config 0 descriptor?? [ 298.627753][ T5959] hub 1-1:0.3: bad descriptor, ignoring hub [ 298.627792][ T5959] hub 1-1:0.3: probe with driver hub failed with error -5 [ 298.629596][ T5959] sierra 1-1:0.3: Sierra USB modem converter detected [ 298.828396][ T5844] Bluetooth: hci0: unexpected event for opcode 0x2060 [ 298.845756][ T5959] usb 1-1: Sierra USB modem converter now attached to ttyUSB0 [ 298.874954][ T5959] usb 1-1: USB disconnect, device number 15 [ 298.880497][ T5959] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 298.880954][ T5959] sierra 1-1:0.3: device disconnected [ 299.517690][ T8756] netlink: 4 bytes leftover after parsing attributes in process `syz.2.842'. [ 299.645742][ T8758] netlink: 8 bytes leftover after parsing attributes in process `syz.2.842'. [ 299.693171][ T8758] netlink: 24 bytes leftover after parsing attributes in process `syz.2.842'. [ 299.982477][ T8767] 9pnet_fd: Insufficient options for proto=fd [ 299.999213][ T8767] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 300.079386][ T8756] hsr_slave_1 (unregistering): left promiscuous mode [ 300.113342][ T5834] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 300.329689][ T30] audit: type=1400 audit(1751715125.589:562): avc: denied { setopt } for pid=8769 comm="syz.4.846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 300.349568][ T5834] usb 1-1: device descriptor read/64, error -71 [ 300.694025][ T5834] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 300.876367][ T5834] usb 1-1: device descriptor read/64, error -71 [ 300.890489][ T8778] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 301.030557][ T5834] usb usb1-port1: attempt power cycle [ 301.743431][ T5834] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 301.784635][ T5834] usb 1-1: device descriptor read/8, error -71 [ 301.859185][ T30] audit: type=1400 audit(1751715127.129:563): avc: denied { write } for pid=8787 comm="syz.1.852" name="001" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 302.525085][ T30] audit: type=1400 audit(1751715127.799:564): avc: denied { create } for pid=8793 comm="syz.2.853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 302.570171][ T5834] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 302.609949][ T30] audit: type=1400 audit(1751715127.819:565): avc: denied { bind } for pid=8793 comm="syz.2.853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 302.650033][ T30] audit: type=1400 audit(1751715127.819:566): avc: denied { setopt } for pid=8793 comm="syz.2.853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 302.686044][ T5834] usb 1-1: device descriptor read/8, error -71 [ 303.072332][ T5834] usb usb1-port1: unable to enumerate USB device [ 303.112362][ T8809] netlink: 'syz.2.856': attribute type 12 has an invalid length. [ 303.120208][ T8809] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.856'. [ 303.192798][ T8814] netlink: 4 bytes leftover after parsing attributes in process `syz.3.857'. [ 304.026686][ T8829] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 305.073315][ T9] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 305.263467][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 305.310480][ T9] usb 5-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 305.393429][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.513415][ T9] usb 5-1: config 0 descriptor?? [ 305.733485][ T5834] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 305.953418][ T5834] usb 1-1: device descriptor read/64, error -71 [ 306.203545][ T5834] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 306.296528][ T9] usbhid 5-1:0.0: can't add hid device: -32 [ 306.332695][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 306.379385][ T5834] usb 1-1: device descriptor read/64, error -71 [ 306.589196][ T5834] usb usb1-port1: attempt power cycle [ 307.045269][ T5834] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 307.076347][ T5834] usb 1-1: device descriptor read/8, error -71 [ 307.319662][ T30] audit: type=1400 audit(1751715132.589:567): avc: denied { bind } for pid=8855 comm="syz.2.872" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 307.323715][ T5834] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 307.401122][ T30] audit: type=1400 audit(1751715132.669:568): avc: denied { create } for pid=8855 comm="syz.2.872" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 307.428669][ T8862] netlink: 4 bytes leftover after parsing attributes in process `syz.3.871'. [ 307.492243][ T30] audit: type=1400 audit(1751715132.669:569): avc: denied { create } for pid=8855 comm="syz.2.872" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 307.533913][ T5834] usb 1-1: device descriptor read/8, error -71 [ 307.569359][ T8865] random: crng reseeded on system resumption [ 307.643657][ T5834] usb usb1-port1: unable to enumerate USB device [ 307.655241][ T8868] netlink: 84 bytes leftover after parsing attributes in process `syz.1.875'. [ 307.756796][ T8872] netlink: 20 bytes leftover after parsing attributes in process `syz.2.874'. [ 308.042560][ T5834] usb 5-1: USB disconnect, device number 18 [ 308.299129][ T30] audit: type=1400 audit(1751715133.509:570): avc: denied { connect } for pid=8876 comm="syz.4.878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 308.464809][ T30] audit: type=1400 audit(1751715133.659:571): avc: denied { setopt } for pid=8876 comm="syz.4.878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 309.712336][ T8895] netlink: 4 bytes leftover after parsing attributes in process `syz.4.883'. [ 310.730143][ T8903] netlink: 8 bytes leftover after parsing attributes in process `syz.4.883'. [ 310.773408][ T8903] netlink: 24 bytes leftover after parsing attributes in process `syz.4.883'. [ 310.850455][ T8909] random: crng reseeded on system resumption [ 310.909554][ T8895] hsr_slave_1 (unregistering): left promiscuous mode [ 310.927673][ T8916] netlink: 4 bytes leftover after parsing attributes in process `syz.3.886'. [ 311.122734][ T8924] netlink: 84 bytes leftover after parsing attributes in process `syz.3.891'. [ 311.144531][ T5834] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 311.393323][ T5834] usb 3-1: Using ep0 maxpacket: 16 [ 311.402563][ T5834] usb 3-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 311.443326][ T9] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 311.512452][ T8930] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 311.527775][ T5834] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.550755][ T5834] usb 3-1: config 0 descriptor?? [ 311.695766][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 311.720132][ T9] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 311.736658][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.760434][ T9] usb 1-1: config 0 descriptor?? [ 311.907151][ T8939] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 312.007318][ T5834] lenovo 0003:17EF:6047.0006: item fetching failed at offset 2/5 [ 312.027076][ T5834] lenovo 0003:17EF:6047.0006: hid_parse failed [ 312.033690][ T5834] lenovo 0003:17EF:6047.0006: probe with driver lenovo failed with error -22 [ 312.448326][ T8943] netlink: 'syz.0.889': attribute type 10 has an invalid length. [ 312.456433][ T8943] netlink: 40 bytes leftover after parsing attributes in process `syz.0.889'. [ 312.466305][ T8943] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 312.903551][ T9] ath6kl: Failed to submit usb control message: -110 [ 312.910365][ T9] ath6kl: unable to send the bmi data to the device: -110 [ 313.030985][ T8954] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve0, syncid = 10802, id = 0 [ 313.990800][ T9] ath6kl: Unable to send get target info: -110 [ 314.003490][ T9] ath6kl: Failed to init ath6kl core: -110 [ 314.010211][ T9] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 314.122528][ T9] usb 3-1: USB disconnect, device number 16 [ 314.198740][ T8961] netlink: 4 bytes leftover after parsing attributes in process `syz.2.901'. [ 314.261511][ T8963] random: crng reseeded on system resumption [ 314.594012][ T8967] netlink: 4 bytes leftover after parsing attributes in process `syz.3.903'. [ 314.766219][ T8967] netlink: 8 bytes leftover after parsing attributes in process `syz.3.903'. [ 314.780750][ T8967] netlink: 24 bytes leftover after parsing attributes in process `syz.3.903'. [ 316.462837][ T24] usb 1-1: USB disconnect, device number 24 [ 316.921804][ T8997] netlink: 84 bytes leftover after parsing attributes in process `syz.3.912'. [ 317.880243][ T9010] netlink: 4 bytes leftover after parsing attributes in process `syz.1.914'. [ 318.136423][ T9017] netlink: 'syz.3.916': attribute type 12 has an invalid length. [ 318.144851][ T9017] netlink: 9472 bytes leftover after parsing attributes in process `syz.3.916'. [ 318.939106][ T9024] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 320.625072][ T9056] netlink: 84 bytes leftover after parsing attributes in process `syz.2.927'. [ 322.168380][ T9072] netlink: 4 bytes leftover after parsing attributes in process `syz.1.931'. [ 322.855316][ T9076] netlink: 20 bytes leftover after parsing attributes in process `syz.2.933'. [ 323.475063][ T9096] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 323.508598][ T9100] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 323.523390][ T24] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 323.793468][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 323.807491][ T24] usb 2-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 323.816865][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.854085][ T24] usb 2-1: config 0 descriptor?? [ 323.965257][ T5906] kernel read not supported for file /vga_arbiter (pid: 5906 comm: kworker/0:6) [ 324.401386][ T24] lenovo 0003:17EF:6047.0007: item fetching failed at offset 2/5 [ 324.766880][ T24] lenovo 0003:17EF:6047.0007: hid_parse failed [ 324.776076][ T24] lenovo 0003:17EF:6047.0007: probe with driver lenovo failed with error -22 [ 324.999041][ T30] audit: type=1400 audit(1751715150.269:572): avc: denied { create } for pid=9120 comm="syz.0.945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 325.034456][ T30] audit: type=1400 audit(1751715150.269:573): avc: denied { write } for pid=9120 comm="syz.0.945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 325.063530][ T30] audit: type=1400 audit(1751715150.269:574): avc: denied { read } for pid=9120 comm="syz.0.945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 325.089731][ T30] audit: type=1400 audit(1751715150.359:575): avc: denied { read write } for pid=5828 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 325.123501][ T30] audit: type=1400 audit(1751715150.359:576): avc: denied { read write } for pid=9115 comm="syz.2.944" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 325.183321][ T30] audit: type=1400 audit(1751715150.359:577): avc: denied { open } for pid=9115 comm="syz.2.944" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 325.257219][ T30] audit: type=1400 audit(1751715150.359:578): avc: denied { ioctl } for pid=9115 comm="syz.2.944" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 325.287594][ T30] audit: type=1400 audit(1751715150.359:579): avc: denied { name_bind } for pid=9123 comm="syz.3.946" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 326.243457][ T5920] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 326.267308][ T30] audit: type=1400 audit(1751715150.359:580): avc: denied { node_bind } for pid=9123 comm="syz.3.946" saddr=224.0.0.1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 326.324851][ T5950] usb 2-1: USB disconnect, device number 12 [ 326.331668][ T9136] netlink: 4 bytes leftover after parsing attributes in process `syz.4.948'. [ 326.427324][ T30] audit: type=1400 audit(1751715150.359:581): avc: denied { prog_load } for pid=9123 comm="syz.3.946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 326.631753][ T9136] netlink: 8 bytes leftover after parsing attributes in process `syz.4.948'. [ 326.645062][ T5920] usb 3-1: Using ep0 maxpacket: 16 [ 326.647373][ T9136] netlink: 24 bytes leftover after parsing attributes in process `syz.4.948'. [ 326.652012][ T5920] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 326.664199][ T9145] netlink: 84 bytes leftover after parsing attributes in process `syz.1.950'. [ 326.674418][ T5920] usb 3-1: config 0 interface 0 has no altsetting 0 [ 327.126410][ T5920] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 327.135956][ T5920] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.152430][ T5920] usb 3-1: Product: syz [ 327.160958][ T5920] usb 3-1: Manufacturer: syz [ 327.169870][ T5920] usb 3-1: SerialNumber: syz [ 327.178078][ T5920] usb 3-1: config 0 descriptor?? [ 327.185617][ T5920] hub 3-1:0.0: bad descriptor, ignoring hub [ 327.196851][ T5920] hub 3-1:0.0: probe with driver hub failed with error -5 [ 327.358514][ T5920] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 327.412297][ T6816] usb 3-1: Failed to submit usb control message: -71 [ 327.429428][ T6816] usb 3-1: unable to send the bmi data to the device: -71 [ 327.461021][ T6816] usb 3-1: unable to get target info from device [ 327.480892][ T6816] usb 3-1: could not get target info (-71) [ 327.494400][ T6816] usb 3-1: could not probe fw (-71) [ 327.504048][ T5920] usb 3-1: USB disconnect, device number 17 [ 329.803418][ T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 330.620283][ T30] kauditd_printk_skb: 50 callbacks suppressed [ 330.620302][ T30] audit: type=1400 audit(1751715155.889:632): avc: denied { unmount } for pid=5838 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 330.648296][ T30] audit: type=1400 audit(1751715155.919:633): avc: denied { create } for pid=9194 comm="syz.2.964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 330.675564][ T30] audit: type=1400 audit(1751715155.939:634): avc: denied { read write } for pid=9194 comm="syz.2.964" name="radio0" dev="devtmpfs" ino=957 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 330.701415][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 330.708793][ T30] audit: type=1400 audit(1751715155.949:635): avc: denied { open } for pid=9194 comm="syz.2.964" path="/dev/radio0" dev="devtmpfs" ino=957 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 330.733128][ T30] audit: type=1400 audit(1751715155.949:636): avc: denied { read } for pid=9194 comm="syz.2.964" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 330.763380][ T9] usb 2-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 330.795046][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.817003][ T30] audit: type=1400 audit(1751715155.949:637): avc: denied { open } for pid=9194 comm="syz.2.964" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 330.854831][ T9] usb 2-1: config 0 descriptor?? [ 330.908118][ T30] audit: type=1400 audit(1751715155.949:638): avc: denied { ioctl } for pid=9194 comm="syz.2.964" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 330.986321][ T30] audit: type=1400 audit(1751715156.049:639): avc: denied { write } for pid=9196 comm="syz.4.965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 331.007249][ T9204] netlink: 4 bytes leftover after parsing attributes in process `syz.4.966'. [ 331.056892][ T30] audit: type=1400 audit(1751715156.149:640): avc: denied { create } for pid=9198 comm="syz.4.966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 331.098843][ T30] audit: type=1400 audit(1751715156.159:641): avc: denied { ioctl } for pid=9198 comm="syz.4.966" path="socket:[18234]" dev="sockfs" ino=18234 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 331.289883][ T9] lenovo 0003:17EF:6047.0008: item fetching failed at offset 3/5 [ 331.343199][ T9] lenovo 0003:17EF:6047.0008: hid_parse failed [ 331.366142][ T9] lenovo 0003:17EF:6047.0008: probe with driver lenovo failed with error -22 [ 333.663455][ T5949] usb 2-1: USB disconnect, device number 13 [ 333.973486][ T5920] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 334.193398][ T5920] usb 5-1: Using ep0 maxpacket: 16 [ 334.268723][ T5920] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 334.873299][ T5920] usb 5-1: config 0 interface 0 has no altsetting 0 [ 334.914295][ T5920] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 334.945527][ T5920] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.964053][ T5920] usb 5-1: Product: syz [ 334.968289][ T5920] usb 5-1: Manufacturer: syz [ 334.972954][ T5920] usb 5-1: SerialNumber: syz [ 335.096816][ T9257] netlink: 4 bytes leftover after parsing attributes in process `syz.2.978'. [ 335.103993][ T5920] usb 5-1: config 0 descriptor?? [ 335.116543][ T5920] hub 5-1:0.0: bad descriptor, ignoring hub [ 335.122572][ T5920] hub 5-1:0.0: probe with driver hub failed with error -5 [ 335.169005][ T5920] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 335.232846][ T6816] usb 5-1: Failed to submit usb control message: -71 [ 335.259035][ T6816] usb 5-1: unable to send the bmi data to the device: -71 [ 335.351470][ T6816] usb 5-1: unable to get target info from device [ 335.370332][ T6816] usb 5-1: could not get target info (-71) [ 335.389171][ T6816] usb 5-1: could not probe fw (-71) [ 335.526850][ T5949] usb 5-1: USB disconnect, device number 19 [ 335.642465][ T30] kauditd_printk_skb: 60 callbacks suppressed [ 335.642511][ T30] audit: type=1400 audit(1751715160.909:702): avc: denied { map_create } for pid=9267 comm="syz.3.981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 336.213795][ T30] audit: type=1400 audit(1751715161.489:703): avc: denied { unmount } for pid=5828 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 336.371634][ T30] audit: type=1400 audit(1751715161.639:704): avc: denied { name_bind } for pid=9278 comm="syz.2.985" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 337.123723][ T30] audit: type=1400 audit(1751715161.639:705): avc: denied { node_bind } for pid=9278 comm="syz.2.985" saddr=224.0.0.1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 337.251724][ T9285] netlink: 'syz.3.986': attribute type 12 has an invalid length. [ 337.253605][ T30] audit: type=1400 audit(1751715161.679:706): avc: denied { create } for pid=9281 comm="syz.3.986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 337.261501][ T9285] netlink: 9472 bytes leftover after parsing attributes in process `syz.3.986'. [ 337.405482][ T30] audit: type=1400 audit(1751715161.679:707): avc: denied { setopt } for pid=9281 comm="syz.3.986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 337.433945][ T9288] netlink: 20 bytes leftover after parsing attributes in process `syz.0.984'. [ 337.589119][ T30] audit: type=1400 audit(1751715161.769:708): avc: denied { read } for pid=9277 comm="syz.0.984" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 337.627187][ T30] audit: type=1400 audit(1751715161.769:709): avc: denied { open } for pid=9277 comm="syz.0.984" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 337.660209][ T30] audit: type=1400 audit(1751715162.379:710): avc: denied { getopt } for pid=9281 comm="syz.3.986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 337.798939][ T30] audit: type=1400 audit(1751715162.389:711): avc: denied { map_read map_write } for pid=9281 comm="syz.3.986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 338.631085][ T9300] netlink: 4 bytes leftover after parsing attributes in process `syz.1.988'. [ 339.303914][ T9312] netlink: 4 bytes leftover after parsing attributes in process `syz.2.991'. [ 340.533347][ T5920] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 340.763334][ T5920] usb 2-1: Using ep0 maxpacket: 16 [ 340.781953][ T5920] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 340.887097][ T5920] usb 2-1: config 0 interface 0 has no altsetting 0 [ 340.923553][ T5920] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 340.950911][ T5920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.968429][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 340.968449][ T30] audit: type=1400 audit(1751715166.229:725): avc: denied { read write } for pid=9339 comm="syz.0.1001" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 340.972545][ T5920] usb 2-1: Product: syz [ 340.998177][ T30] audit: type=1400 audit(1751715166.239:726): avc: denied { open } for pid=9339 comm="syz.0.1001" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 341.028599][ T30] audit: type=1400 audit(1751715166.299:727): avc: denied { name_bind } for pid=9338 comm="syz.3.999" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 341.098427][ T30] audit: type=1400 audit(1751715166.299:728): avc: denied { node_bind } for pid=9338 comm="syz.3.999" saddr=224.0.0.1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 341.174320][ T30] audit: type=1400 audit(1751715166.329:729): avc: denied { prog_load } for pid=9338 comm="syz.3.999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 341.210712][ T5920] usb 2-1: Manufacturer: syz [ 341.216268][ T5920] usb 2-1: SerialNumber: syz [ 341.229428][ T5920] usb 2-1: config 0 descriptor?? [ 341.236589][ T5920] hub 2-1:0.0: bad descriptor, ignoring hub [ 341.242925][ T5920] hub 2-1:0.0: probe with driver hub failed with error -5 [ 341.244978][ T30] audit: type=1400 audit(1751715166.329:730): avc: denied { bpf } for pid=9338 comm="syz.3.999" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 341.334980][ T5950] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 342.124503][ T30] audit: type=1400 audit(1751715167.389:731): avc: denied { create } for pid=9320 comm="syz.1.994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 342.153927][ T5920] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 342.160228][ T12] usb 2-1: Failed to submit usb control message: -71 [ 342.216661][ T12] usb 2-1: unable to send the bmi data to the device: -71 [ 342.236954][ T30] audit: type=1400 audit(1751715167.389:732): avc: denied { write } for pid=9320 comm="syz.1.994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 342.265752][ T12] usb 2-1: unable to get target info from device [ 342.275122][ T5920] usb 2-1: USB disconnect, device number 14 [ 342.281806][ T30] audit: type=1400 audit(1751715167.419:733): avc: denied { read } for pid=9320 comm="syz.1.994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 342.293832][ T9351] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1002'. [ 342.301943][ C1] vkms_vblank_simulate: vblank timer overrun [ 342.318172][ T12] usb 2-1: could not get target info (-71) [ 342.318738][ T5950] usb 1-1: Using ep0 maxpacket: 16 [ 342.331640][ T12] usb 2-1: could not probe fw (-71) [ 342.341469][ T5950] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 342.348622][ T30] audit: type=1400 audit(1751715167.609:734): avc: denied { perfmon } for pid=9353 comm="syz.3.1003" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 342.350844][ T5950] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.371318][ C1] vkms_vblank_simulate: vblank timer overrun [ 342.571282][ T5950] usb 1-1: config 0 descriptor?? [ 343.329928][ T5950] lenovo 0003:17EF:6047.0009: item fetching failed at offset 3/5 [ 343.344804][ T5950] lenovo 0003:17EF:6047.0009: hid_parse failed [ 343.351097][ T5950] lenovo 0003:17EF:6047.0009: probe with driver lenovo failed with error -22 [ 343.380312][ T9367] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1005'. [ 343.463765][ T49] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 343.494255][ T9371] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1006'. [ 343.668107][ T49] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 343.680150][ T9366] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1006'. [ 343.689357][ T9366] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1006'. [ 343.832067][ T49] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 343.841697][ T49] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.859867][ T49] usb 3-1: config 0 descriptor?? [ 344.215737][ T9391] netlink: 'syz.2.1004': attribute type 10 has an invalid length. [ 344.223849][ T9391] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1004'. [ 344.946293][ T49] ath6kl: Failed to submit usb control message: -110 [ 344.953187][ T49] ath6kl: unable to send the bmi data to the device: -110 [ 344.959376][ T5834] usb 1-1: USB disconnect, device number 25 [ 344.960444][ T49] ath6kl: Unable to send get target info: -110 [ 345.101706][ T49] ath6kl: Failed to init ath6kl core: -110 [ 346.157509][ T49] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 347.193521][ T49] usb 3-1: USB disconnect, device number 18 [ 347.685638][ T30] kauditd_printk_skb: 44 callbacks suppressed [ 347.685657][ T30] audit: type=1400 audit(1751715172.959:779): avc: denied { watch watch_reads } for pid=9416 comm="syz.3.1019" path="pipe:[3715]" dev="pipefs" ino=3715 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 347.740091][ T9421] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1018'. [ 347.787132][ T9418] random: crng reseeded on system resumption [ 347.876958][ T30] audit: type=1400 audit(1751715172.959:780): avc: denied { read write } for pid=9416 comm="syz.3.1019" name="mouse0" dev="devtmpfs" ino=923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 347.919348][ T9428] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1020'. [ 348.198470][ T30] audit: type=1400 audit(1751715172.959:781): avc: denied { open } for pid=9416 comm="syz.3.1019" path="/dev/input/mouse0" dev="devtmpfs" ino=923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 348.216643][ T9428] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1020'. [ 348.231745][ T9428] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1020'. [ 348.326501][ T30] audit: type=1400 audit(1751715173.059:782): avc: denied { create } for pid=9416 comm="syz.3.1019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 348.577457][ T30] audit: type=1400 audit(1751715173.059:783): avc: denied { create } for pid=9416 comm="syz.3.1019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 348.667879][ T30] audit: type=1400 audit(1751715173.059:784): avc: denied { append } for pid=9416 comm="syz.3.1019" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 348.749075][ T30] audit: type=1400 audit(1751715173.059:785): avc: denied { open } for pid=9416 comm="syz.3.1019" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 349.797152][ T30] audit: type=1400 audit(1751715173.079:786): avc: denied { relabelfrom } for pid=9416 comm="syz.3.1019" name="" dev="pipefs" ino=20622 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 349.819529][ C1] vkms_vblank_simulate: vblank timer overrun [ 349.825852][ T30] audit: type=1400 audit(1751715173.829:787): avc: denied { write } for pid=9437 comm="syz.2.1023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 349.847553][ T30] audit: type=1400 audit(1751715174.049:788): avc: denied { create } for pid=9440 comm="syz.0.1024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 350.272627][ T9] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 350.940193][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 350.962873][ T9458] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1027'. [ 351.021356][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 351.273286][ T9] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 351.292870][ T9] usb 3-1: New USB device found, idVendor=0853, idProduct=0146, bcdDevice= 0.00 [ 351.357618][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.626043][ T49] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 351.885513][ T49] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 352.050152][ T9] usb 3-1: config 0 descriptor?? [ 352.059851][ T49] usb 1-1: config 0 has no interfaces? [ 352.075466][ T49] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 352.102939][ T49] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.130589][ T49] usb 1-1: config 0 descriptor?? [ 352.283433][ T9] usb 3-1: USB disconnect, device number 19 [ 352.377695][ T49] usb 1-1: string descriptor 0 read error: -71 [ 353.233477][ T49] usb 1-1: USB disconnect, device number 26 [ 353.317779][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 353.317798][ T30] audit: type=1400 audit(1751715178.589:802): avc: denied { read write } for pid=9472 comm="syz.1.1034" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 353.361724][ T30] audit: type=1400 audit(1751715178.589:803): avc: denied { open } for pid=9472 comm="syz.1.1034" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 353.579772][ T9481] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 353.866363][ T30] audit: type=1400 audit(1751715178.849:804): avc: denied { create } for pid=9472 comm="syz.1.1034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 353.894866][ T30] audit: type=1400 audit(1751715178.849:805): avc: denied { connect } for pid=9472 comm="syz.1.1034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 353.992005][ T9489] blktrace: Concurrent blktraces are not allowed on loop6 [ 353.992975][ T30] audit: type=1400 audit(1751715179.219:806): avc: denied { create } for pid=9476 comm="syz.3.1036" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 354.020402][ T30] audit: type=1400 audit(1751715179.219:807): avc: denied { write } for pid=9476 comm="syz.3.1036" name="file0" dev="tmpfs" ino=1139 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 354.043113][ T30] audit: type=1400 audit(1751715179.219:808): avc: denied { open } for pid=9476 comm="syz.3.1036" path="/214/file0" dev="tmpfs" ino=1139 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 354.068785][ T30] audit: type=1400 audit(1751715179.259:809): avc: denied { ioctl } for pid=9476 comm="syz.3.1036" path="/214/file0" dev="tmpfs" ino=1139 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 354.095115][ T9490] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 354.105296][ T9] kernel read not supported for file /vga_arbiter (pid: 9 comm: kworker/0:0) [ 354.122628][ T30] audit: type=1400 audit(1751715179.389:810): avc: denied { write } for pid=9474 comm="syz.2.1035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 354.241510][ T30] audit: type=1400 audit(1751715179.389:811): avc: denied { connect } for pid=9474 comm="syz.2.1035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 355.788327][ T9515] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1046'. [ 355.861472][ T9510] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1046'. [ 355.888646][ T9510] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1046'. [ 355.953608][ T9] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 357.426206][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 357.433305][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 357.444878][ T9] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 357.454147][ T9] usb 1-1: New USB device found, idVendor=0853, idProduct=0146, bcdDevice= 0.00 [ 357.465632][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.476524][ T9] usb 1-1: config 0 descriptor?? [ 357.997604][ T9] usb 1-1: USB disconnect, device number 27 [ 358.131410][ T9548] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 358.260687][ T9551] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1055'. [ 362.374685][ T9580] random: crng reseeded on system resumption [ 363.096452][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 363.096499][ T30] audit: type=1400 audit(1751715188.349:820): avc: denied { write } for pid=9581 comm="syz.1.1064" name="001" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 363.380696][ T9587] netlink: 'syz.2.1066': attribute type 12 has an invalid length. [ 363.388827][ T9587] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.1066'. [ 364.068807][ T9607] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1070'. [ 364.142468][ T9607] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1070'. [ 364.363563][ T9607] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1070'. [ 364.493418][ T49] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 364.807842][ T49] usb 3-1: Using ep0 maxpacket: 8 [ 364.821664][ T49] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 364.845141][ T49] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 365.562446][ T49] usb 3-1: New USB device found, idVendor=0853, idProduct=0146, bcdDevice= 0.00 [ 365.571703][ T49] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.655592][ T49] usb 3-1: config 0 descriptor?? [ 368.643219][ C0] sched: DL replenish lagged too much [ 368.794562][ T49] usb 3-1: USB disconnect, device number 20 [ 369.348467][ T30] audit: type=1400 audit(1751715194.619:821): avc: denied { append } for pid=9633 comm="syz.3.1077" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 372.373580][ T9654] random: crng reseeded on system resumption [ 372.561490][ T9657] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 372.590698][ T9650] netlink: 'syz.2.1083': attribute type 12 has an invalid length. [ 372.598705][ T9650] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.1083'. [ 373.184422][ T30] audit: type=1400 audit(1751715198.409:822): avc: denied { mounton } for pid=9661 comm="syz.3.1087" path="/228/file0" dev="tmpfs" ino=1216 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 373.502099][ T30] audit: type=1400 audit(1751715198.449:823): avc: denied { mount } for pid=9661 comm="syz.3.1087" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 373.551340][ T30] audit: type=1400 audit(1751715198.449:824): avc: denied { read write } for pid=9661 comm="syz.3.1087" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 373.633361][ T30] audit: type=1400 audit(1751715198.449:825): avc: denied { open } for pid=9661 comm="syz.3.1087" path="/228/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 373.714483][ T30] audit: type=1400 audit(1751715198.799:826): avc: denied { unmount } for pid=5830 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 375.388645][ T30] audit: type=1400 audit(1751715200.649:827): avc: denied { create } for pid=9674 comm="syz.4.1091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 375.455115][ T30] audit: type=1400 audit(1751715200.689:828): avc: denied { setopt } for pid=9674 comm="syz.4.1091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 375.546651][ T30] audit: type=1400 audit(1751715200.689:829): avc: denied { write } for pid=9674 comm="syz.4.1091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 375.608204][ T30] audit: type=1400 audit(1751715200.749:830): avc: denied { read } for pid=9674 comm="syz.4.1091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 375.678644][ T30] audit: type=1400 audit(1751715200.749:831): avc: denied { bind } for pid=9674 comm="syz.4.1091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 375.746405][ T9682] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1093'. [ 375.773461][ T30] audit: type=1400 audit(1751715200.749:832): avc: denied { node_bind } for pid=9674 comm="syz.4.1091" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 375.868710][ T9682] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1093'. [ 375.892674][ T9682] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1093'. [ 375.988647][ T9690] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1096'. [ 384.001238][ T30] audit: type=1400 audit(1751715209.219:833): avc: denied { ioctl } for pid=9701 comm="syz.1.1101" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=21164 ioctlcmd=0xaa03 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 384.195919][ T5920] usb 3-1: new low-speed USB device number 21 using dummy_hcd [ 384.677267][ T5920] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 384.773366][ T5920] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 384.797729][ T5920] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 385.034024][ T5920] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.044452][ T5920] usb 3-1: config 0 descriptor?? [ 385.191518][ T5920] usb 3-1: can't set config #0, error -71 [ 385.221369][ T5920] usb 3-1: USB disconnect, device number 21 [ 387.634370][ T5906] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 388.650028][ T5906] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 388.681700][ T5906] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 388.750744][ T5906] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.604863][ T5906] usb 3-1: config 0 descriptor?? [ 389.709094][ T5906] usb 3-1: can't set config #0, error -71 [ 389.747104][ T9748] random: crng reseeded on system resumption [ 389.890657][ T5906] usb 3-1: USB disconnect, device number 22 [ 392.514157][ T30] audit: type=1400 audit(1751715217.519:834): avc: denied { read write } for pid=9745 comm="syz.1.1115" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 392.576026][ T49] usb 5-1: new low-speed USB device number 20 using dummy_hcd [ 393.164255][ T30] audit: type=1400 audit(1751715217.519:835): avc: denied { open } for pid=9745 comm="syz.1.1115" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 393.712509][ T49] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 393.763233][ T49] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 394.037302][ T49] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 394.408734][ T49] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.431740][ T49] usb 5-1: config 0 descriptor?? [ 396.078865][ T49] usb 5-1: USB disconnect, device number 20 [ 398.905810][ T9792] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1124'. [ 399.010372][ T9803] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 399.183609][ T49] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 399.656499][ T49] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 399.894004][ T49] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 400.039364][ T49] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.986981][ T49] usb 3-1: config 0 descriptor?? [ 401.508257][ T9820] netlink: 'syz.2.1127': attribute type 10 has an invalid length. [ 401.656754][ T9820] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1127'. [ 402.414094][ T49] ath6kl: Failed to submit usb control message: -110 [ 402.420900][ T49] ath6kl: unable to send the bmi data to the device: -110 [ 402.804966][ T30] audit: type=1400 audit(1751715227.939:836): avc: denied { write } for pid=9821 comm="syz.0.1136" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 402.867781][ T49] ath6kl: Unable to send get target info: -110 [ 402.905968][ T49] ath6kl: Failed to init ath6kl core: -110 [ 402.930533][ T49] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 403.273926][ T49] usb 3-1: USB disconnect, device number 23 [ 405.949740][ T9844] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1140'. [ 411.883504][ T5950] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 413.064969][ T5950] usb 4-1: Using ep0 maxpacket: 8 [ 413.084956][ T5950] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 413.160199][ T5950] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 413.204889][ T5950] usb 4-1: New USB device found, idVendor=0853, idProduct=0146, bcdDevice= 0.00 [ 413.231936][ T30] audit: type=1400 audit(1751715238.499:837): avc: denied { mount } for pid=9868 comm="syz.0.1150" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 413.337192][ T9872] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 414.080265][ T5950] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.142808][ T5950] usb 4-1: config 0 descriptor?? [ 414.183705][ T30] audit: type=1400 audit(1751715239.449:838): avc: denied { unmount } for pid=5828 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 414.606363][ T5950] usb 4-1: USB disconnect, device number 12 [ 414.688296][ T9880] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1153'. [ 423.305387][ T30] audit: type=1400 audit(1751715248.579:839): avc: denied { read } for pid=9905 comm="syz.0.1163" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 423.328021][ C1] vkms_vblank_simulate: vblank timer overrun [ 424.198049][ T30] audit: type=1400 audit(1751715248.609:840): avc: denied { open } for pid=9905 comm="syz.0.1163" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 424.222050][ T30] audit: type=1400 audit(1751715248.639:841): avc: denied { ioctl } for pid=9905 comm="syz.0.1163" path="/dev/binderfs/binder0" dev="binder" ino=16 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 424.247355][ C1] vkms_vblank_simulate: vblank timer overrun [ 424.262981][ T9910] binder: 9905:9910 ioctl 4018620d 0 returned -22 [ 424.285900][ T30] audit: type=1400 audit(1751715248.639:842): avc: denied { set_context_mgr } for pid=9905 comm="syz.0.1163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 424.411443][ T30] audit: type=1400 audit(1751715249.529:843): avc: denied { write } for pid=9905 comm="syz.0.1163" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 424.587549][ T30] audit: type=1400 audit(1751715249.529:844): avc: denied { map } for pid=9905 comm="syz.0.1163" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 424.611344][ C1] vkms_vblank_simulate: vblank timer overrun [ 429.872106][ T9939] netlink: 'syz.4.1170': attribute type 12 has an invalid length. [ 429.880222][ T9939] netlink: 9472 bytes leftover after parsing attributes in process `syz.4.1170'. [ 444.430227][T10005] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1189'. [ 445.342742][T10011] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1191'. [ 447.749058][T10027] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 450.955977][T10039] Cannot find add_set index 0 as target [ 451.012056][T10039] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 452.135181][ T30] audit: type=1400 audit(1751715277.389:845): avc: denied { setopt } for pid=10047 comm="syz.0.1204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 452.218003][ T30] audit: type=1400 audit(1751715277.389:846): avc: denied { ioctl } for pid=10047 comm="syz.0.1204" path="/dev/vbi1" dev="devtmpfs" ino=955 ioctlcmd=0x5631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 452.654152][ T30] audit: type=1400 audit(1751715277.929:847): avc: denied { create } for pid=10056 comm="syz.2.1208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 452.685863][ T30] audit: type=1400 audit(1751715277.949:848): avc: denied { bind } for pid=10056 comm="syz.2.1208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 452.711401][ T30] audit: type=1400 audit(1751715277.949:849): avc: denied { setopt } for pid=10056 comm="syz.2.1208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 452.766241][ T30] audit: type=1400 audit(1751715278.039:850): avc: denied { ioctl } for pid=10056 comm="syz.2.1208" path="socket:[22164]" dev="sockfs" ino=22164 ioctlcmd=0x42d2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 452.809345][ T30] audit: type=1400 audit(1751715278.079:851): avc: denied { read write } for pid=10056 comm="syz.2.1208" name="vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 452.908130][T10059] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1208'. [ 453.185026][ T30] audit: type=1400 audit(1751715278.079:852): avc: denied { open } for pid=10056 comm="syz.2.1208" path="/dev/vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 453.466557][T10067] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1203'. [ 453.521982][T10070] random: crng reseeded on system resumption [ 464.497719][ T5849] Bluetooth: hci4: command 0x0405 tx timeout [ 470.567686][T10089] Cannot find add_set index 0 as target [ 470.575774][T10089] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 473.830173][T10109] netlink: 'syz.4.1223': attribute type 12 has an invalid length. [ 473.838131][T10109] netlink: 9472 bytes leftover after parsing attributes in process `syz.4.1223'. [ 475.455720][T10121] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1224'. [ 476.063813][T10118] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1224'. [ 476.099167][T10118] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1224'. [ 478.003423][ T92] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 478.193319][ T92] usb 2-1: Using ep0 maxpacket: 8 [ 478.254977][ T92] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 478.397720][T10141] Cannot find add_set index 0 as target [ 478.408333][T10141] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 478.925931][ T92] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 478.951650][ T92] usb 2-1: New USB device found, idVendor=0853, idProduct=0146, bcdDevice= 0.00 [ 478.971534][ T92] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.992834][ T92] usb 2-1: config 0 descriptor?? [ 479.276620][ T5950] usb 2-1: USB disconnect, device number 15 [ 480.074985][T10152] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 480.089872][T10153] binder: BINDER_SET_CONTEXT_MGR already set [ 480.119676][T10153] binder: 10150:10153 ioctl 4018620d 200000000040 returned -16 [ 480.440124][T10155] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1237'. [ 480.593260][ T30] audit: type=1400 audit(1751715305.859:853): avc: denied { kexec_image_load } for pid=10136 comm="syz.4.1232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 489.385037][ T5849] Bluetooth: hci4: command 0x0405 tx timeout [ 489.687031][ T30] audit: type=1400 audit(1751715314.959:854): avc: denied { create } for pid=10171 comm="syz.3.1243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 492.745551][ T30] audit: type=1400 audit(1751715314.999:855): avc: denied { ioctl } for pid=10171 comm="syz.3.1243" path="socket:[22531]" dev="sockfs" ino=22531 ioctlcmd=0x89e9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 493.453610][T10179] Cannot find add_set index 0 as target [ 494.181233][T10179] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 495.205519][ T92] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 495.323280][ T5950] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 495.980181][ T5950] usb 2-1: Using ep0 maxpacket: 8 [ 496.941170][ T92] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 497.380810][ T5950] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 497.394230][ T92] usb 4-1: config 0 has no interface number 0 [ 497.456424][ T92] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 497.466033][ T5950] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 499.458975][ T5950] usb 2-1: New USB device found, idVendor=0853, idProduct=0146, bcdDevice= 0.00 [ 499.468448][ T92] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.624443][ T5950] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.750780][ T5950] usb 2-1: config 0 descriptor?? [ 499.756895][ T92] usb 4-1: config 0 descriptor?? [ 499.776968][ T5950] usb 2-1: can't set config #0, error -71 [ 499.794921][ T92] usb 4-1: can't set config #0, error -71 [ 499.836384][ T5950] usb 2-1: USB disconnect, device number 16 [ 499.860424][ T92] usb 4-1: USB disconnect, device number 13 [ 503.381004][ T5842] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 503.508212][ T5842] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 503.673936][ T5842] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 503.681920][ T5842] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 503.691608][ T5842] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 503.725459][ T30] audit: type=1400 audit(1751715328.979:856): avc: denied { mounton } for pid=10211 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 505.773471][ T5842] Bluetooth: hci5: command tx timeout [ 506.969874][ T30] audit: type=1400 audit(1751715332.079:857): avc: denied { create } for pid=10223 comm="syz.1.1258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 507.856409][ T5842] Bluetooth: hci5: command tx timeout [ 508.333363][ T30] audit: type=1400 audit(1751715333.259:858): avc: denied { write } for pid=10223 comm="syz.1.1258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 508.590286][ T30] audit: type=1400 audit(1751715333.679:859): avc: denied { setopt } for pid=10223 comm="syz.1.1258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 508.633678][ T49] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 508.893657][ T49] usb 3-1: Using ep0 maxpacket: 8 [ 509.066151][ T49] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 509.127538][ T49] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 509.173516][ T49] usb 3-1: New USB device found, idVendor=0853, idProduct=0146, bcdDevice= 0.00 [ 509.215067][ T49] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.224391][ T2906] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.947204][ T5842] Bluetooth: hci5: command tx timeout [ 510.392623][ T49] usb 3-1: config 0 descriptor?? [ 511.990508][ T49] usb 3-1: USB disconnect, device number 24 [ 512.033439][ T5842] Bluetooth: hci5: command tx timeout [ 513.300923][ T2906] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.731218][ T2906] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.823852][ T30] audit: type=1400 audit(1751715339.089:860): avc: denied { listen } for pid=10258 comm="syz.3.1268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 513.867591][ T30] audit: type=1400 audit(1751715339.089:861): avc: denied { ioctl } for pid=10258 comm="syz.3.1268" path="socket:[22740]" dev="sockfs" ino=22740 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 518.713610][ T2906] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.218014][T10279] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1273'. [ 519.249826][ T30] audit: type=1400 audit(1751715344.509:862): avc: denied { create } for pid=10278 comm="syz.2.1273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 519.673265][ T92] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 519.700829][ T30] audit: type=1400 audit(1751715344.519:863): avc: denied { bind } for pid=10278 comm="syz.2.1273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 519.788736][ T30] audit: type=1400 audit(1751715344.519:864): avc: denied { name_bind } for pid=10278 comm="syz.2.1273" src=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 519.841886][ T30] audit: type=1400 audit(1751715344.519:865): avc: denied { node_bind } for pid=10278 comm="syz.2.1273" saddr=2f23:2f6d:7372:: src=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 519.895187][ T92] usb 3-1: config 0 has an invalid interface number: 3 but max is 0 [ 523.113331][ T92] usb 3-1: config 0 has no interface number 0 [ 523.277505][ T5950] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 523.295093][ T92] usb 3-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 523.739228][ T92] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.401474][ T92] usb 3-1: config 0 descriptor?? [ 524.435403][ T92] usb 3-1: can't set config #0, error -71 [ 524.459248][T10211] chnl_net:caif_netlink_parms(): no params data found [ 524.481128][ T92] usb 3-1: USB disconnect, device number 25 [ 524.835453][ T30] audit: type=1400 audit(1751715350.109:866): avc: denied { connect } for pid=10287 comm="syz.1.1276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 525.012243][T10289] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1276'. [ 525.083352][ T30] audit: type=1400 audit(1751715350.279:867): avc: denied { read } for pid=10287 comm="syz.1.1276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 525.773840][ T2906] bridge_slave_1: left allmulticast mode [ 525.779888][ T2906] bridge_slave_1: left promiscuous mode [ 528.874995][ T2906] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.148155][ T2906] bridge_slave_0: left allmulticast mode [ 529.167741][ T2906] bridge_slave_0: left promiscuous mode [ 529.190752][ T2906] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.231734][T10313] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1283'. [ 531.247798][ T30] audit: type=1400 audit(1751715356.499:868): avc: denied { create } for pid=10312 comm="syz.3.1283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 531.339645][ T30] audit: type=1400 audit(1751715356.499:869): avc: denied { connect } for pid=10312 comm="syz.3.1283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 531.585404][ T5950] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 534.003535][ T5950] usb 4-1: device not accepting address 14, error -71 [ 535.814460][T10322] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1287'. [ 536.413261][ T92] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 539.297085][ T92] usb 2-1: device not accepting address 17, error -71 [ 662.613106][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 662.620211][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P92/1:b..l [ 662.628570][ C0] rcu: (detected by 0, t=10503 jiffies, g=33017, q=571 ncpus=2) [ 662.636302][ C0] task:kworker/1:2 state:R running task stack:25104 pid:92 tgid:92 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 662.651297][ C0] Workqueue: usb_hub_wq hub_event [ 662.656363][ C0] Call Trace: [ 662.659646][ C0] [ 662.662584][ C0] __schedule+0x116a/0x5de0 [ 662.667111][ C0] ? find_held_lock+0x2b/0x80 [ 662.671814][ C0] ? unwind_next_frame+0x3fe/0x20a0 [ 662.677026][ C0] ? __pfx___schedule+0x10/0x10 [ 662.681908][ C0] ? arch_stack_walk+0x94/0x100 [ 662.686762][ C0] ? mark_held_locks+0x49/0x80 [ 662.691538][ C0] ? irqentry_exit+0x3b/0x90 [ 662.696140][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 662.701347][ C0] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 662.707427][ C0] preempt_schedule_notrace+0x62/0xe0 [ 662.712810][ C0] preempt_schedule_notrace_thunk+0x16/0x30 [ 662.718716][ C0] rcu_is_watching+0x8e/0xc0 [ 662.723317][ C0] lock_acquire+0x2cd/0x350 [ 662.727836][ C0] ? kasan_quarantine_reduce+0x195/0x1e0 [ 662.733473][ C0] ? __kasan_slab_alloc+0x69/0x90 [ 662.738503][ C0] ? __kmalloc_cache_noprof+0x1f1/0x3e0 [ 662.744048][ C0] ? usb_control_msg+0xbc/0x4a0 [ 662.748882][ C0] ? hub_port_reset+0x725/0x1cb0 [ 662.753819][ C0] ? hub_port_init+0x1f6/0x3a70 [ 662.758685][ C0] __update_page_owner_free_handle.constprop.0+0x4d/0x4a0 [ 662.765809][ C0] ? __update_page_owner_free_handle.constprop.0+0x3c/0x4a0 [ 662.773103][ C0] __reset_page_owner+0x93/0x1a0 [ 662.778062][ C0] __free_frozen_pages+0x7fe/0x1180 [ 662.783276][ C0] __put_partials+0x16d/0x1c0 [ 662.787954][ C0] qlist_free_all+0x4d/0x120 [ 662.792537][ C0] kasan_quarantine_reduce+0x195/0x1e0 [ 662.798033][ C0] __kasan_slab_alloc+0x69/0x90 [ 662.802898][ C0] __kmalloc_cache_noprof+0x1f1/0x3e0 [ 662.808277][ C0] ? usb_control_msg+0xbc/0x4a0 [ 662.813146][ C0] usb_control_msg+0xbc/0x4a0 [ 662.817837][ C0] ? __pfx_usb_control_msg+0x10/0x10 [ 662.823124][ C0] ? hub_ext_port_status+0x1fa/0x670 [ 662.828447][ C0] hub_port_reset+0x725/0x1cb0 [ 662.833240][ C0] ? __pfx_hub_port_reset+0x10/0x10 [ 662.838457][ C0] hub_port_init+0x1f6/0x3a70 [ 662.843153][ C0] hub_event+0x2c67/0x4fa0 [ 662.847608][ C0] ? __pfx_hub_event+0x10/0x10 [ 662.852382][ C0] ? free_object_list.isra.0+0xf0/0x2a0 [ 662.857951][ C0] ? rcu_is_watching+0x12/0xc0 [ 662.862731][ C0] process_one_work+0x9cf/0x1b70 [ 662.867682][ C0] ? __pfx_nsim_dev_hwstats_traffic_work+0x10/0x10 [ 662.874190][ C0] ? __pfx_process_one_work+0x10/0x10 [ 662.879577][ C0] ? assign_work+0x1a0/0x250 [ 662.884167][ C0] worker_thread+0x6c8/0xf10 [ 662.888752][ C0] ? __kthread_parkme+0x19e/0x250 [ 662.893808][ C0] ? __pfx_worker_thread+0x10/0x10 [ 662.898937][ C0] kthread+0x3c2/0x780 [ 662.903017][ C0] ? __pfx_kthread+0x10/0x10 [ 662.907617][ C0] ? rcu_is_watching+0x12/0xc0 [ 662.912386][ C0] ? __pfx_kthread+0x10/0x10 [ 662.916970][ C0] ret_from_fork+0x5d4/0x6f0 [ 662.921553][ C0] ? __pfx_kthread+0x10/0x10 [ 662.926152][ C0] ret_from_fork_asm+0x1a/0x30 [ 662.930937][ C0] [ 662.933946][ C0] rcu: rcu_preempt kthread starved for 1819 jiffies! g33017 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 662.945027][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 662.954981][ C0] rcu: RCU grace-period kthread stack dump: [ 662.960863][ C0] task:rcu_preempt state:R running task stack:27368 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 662.974367][ C0] Call Trace: [ 662.977647][ C0] [ 662.980585][ C0] __schedule+0x116a/0x5de0 [ 662.985118][ C0] ? __pfx___schedule+0x10/0x10 [ 662.989989][ C0] ? find_held_lock+0x2b/0x80 [ 662.994669][ C0] ? schedule+0x2d7/0x3a0 [ 662.998998][ C0] schedule+0xe7/0x3a0 [ 663.003111][ C0] schedule_timeout+0x123/0x290 [ 663.007975][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 663.013372][ C0] ? __pfx_process_timeout+0x10/0x10 [ 663.018669][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 663.024483][ C0] ? prepare_to_swait_event+0xf5/0x480 [ 663.029956][ C0] rcu_gp_fqs_loop+0x1ea/0xb00 [ 663.034726][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 663.040040][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 663.045272][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 663.050213][ C0] ? rcu_gp_cleanup+0x7c1/0xd90 [ 663.055079][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 663.060924][ C0] rcu_gp_kthread+0x270/0x380 [ 663.065611][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 663.070815][ C0] ? rcu_is_watching+0x12/0xc0 [ 663.075587][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 663.080812][ C0] ? __kthread_parkme+0x19e/0x250 [ 663.085856][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 663.091064][ C0] kthread+0x3c2/0x780 [ 663.095128][ C0] ? __pfx_kthread+0x10/0x10 [ 663.099716][ C0] ? rcu_is_watching+0x12/0xc0 [ 663.104524][ C0] ? __pfx_kthread+0x10/0x10 [ 663.109125][ C0] ret_from_fork+0x5d4/0x6f0 [ 663.113733][ C0] ? __pfx_kthread+0x10/0x10 [ 663.118328][ C0] ret_from_fork_asm+0x1a/0x30 [ 663.123113][ C0] [ 663.126142][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 663.132465][ C0] Sending NMI from CPU 0 to CPUs 1: [ 663.137673][ C1] NMI backtrace for cpu 1 [ 663.137687][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.16.0-rc4-syzkaller-00308-ga79a588fc176 #0 PREEMPT(full) [ 663.137705][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 663.137713][ C1] RIP: 0010:__lock_acquire+0x267/0x1c90 [ 663.137732][ C1] Code: c4 00 00 00 4c 89 ef e8 77 b0 ff ff 44 0f b6 b8 c5 00 00 00 45 84 f6 0f 84 02 01 00 00 41 0f b6 4d 21 84 c9 0f 88 d0 04 00 00 <8b> b5 e8 0a 00 00 45 84 ff 45 0f 44 fe 41 89 f6 41 83 ee 01 0f 88 [ 663.137744][ C1] RSP: 0018:ffffc90000a07fe8 EFLAGS: 00000002 [ 663.137757][ C1] RAX: ffffffff95d77ed8 RBX: 0000000000000002 RCX: 0000000000000020 [ 663.137766][ C1] RDX: 0000000000000007 RSI: 0000000000000001 RDI: ffff88801e2b2f80 [ 663.137774][ C1] RBP: ffff88801e2b2440 R08: 0000000000000000 R09: 0000000000000000 [ 663.137783][ C1] R10: 0000000000000050 R11: 0000000000000001 R12: ffff88801e2b2f30 [ 663.137791][ C1] R13: ffff88801e2b2f80 R14: 0000000000000003 R15: 0000000000000001 [ 663.137800][ C1] FS: 0000000000000000(0000) GS:ffff888124815000(0000) knlGS:0000000000000000 [ 663.137814][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 663.137823][ C1] CR2: 000055a867e79070 CR3: 0000000060c3d000 CR4: 00000000003526f0 [ 663.137832][ C1] Call Trace: [ 663.137837][ C1] [ 663.137845][ C1] ? lock_acquire+0x179/0x350 [ 663.137859][ C1] lock_acquire+0x179/0x350 [ 663.137870][ C1] ? unwind_next_frame+0xbd/0x20a0 [ 663.137885][ C1] ? unwind_next_frame+0x3f4/0x20a0 [ 663.137902][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 663.137922][ C1] unwind_next_frame+0xd1/0x20a0 [ 663.137935][ C1] ? unwind_next_frame+0xbd/0x20a0 [ 663.137948][ C1] ? consume_skb+0xcc/0x100 [ 663.137971][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 663.137989][ C1] arch_stack_walk+0x94/0x100 [ 663.138005][ C1] ? consume_skb+0xcc/0x100 [ 663.138024][ C1] stack_trace_save+0x8e/0xc0 [ 663.138041][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 663.138059][ C1] ? __lock_acquire+0xb8a/0x1c90 [ 663.138072][ C1] kasan_save_stack+0x33/0x60 [ 663.138089][ C1] ? kasan_save_stack+0x33/0x60 [ 663.138105][ C1] ? kasan_save_track+0x14/0x30 [ 663.138120][ C1] ? kasan_save_free_info+0x3b/0x60 [ 663.138134][ C1] ? __kasan_slab_free+0x51/0x70 [ 663.138150][ C1] ? kmem_cache_free+0x2d1/0x4d0 [ 663.138166][ C1] ? kfree_skbmem+0x1a4/0x1f0 [ 663.138179][ C1] ? consume_skb+0xcc/0x100 [ 663.138209][ C1] kasan_save_track+0x14/0x30 [ 663.138225][ C1] kasan_save_free_info+0x3b/0x60 [ 663.138238][ C1] __kasan_slab_free+0x51/0x70 [ 663.138255][ C1] kmem_cache_free+0x2d1/0x4d0 [ 663.138274][ C1] ? kfree_skbmem+0x1a4/0x1f0 [ 663.138290][ C1] kfree_skbmem+0x1a4/0x1f0 [ 663.138303][ C1] consume_skb+0xcc/0x100 [ 663.138321][ C1] nft_synproxy_do_eval+0xa6b/0xd80 [ 663.138339][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 663.138358][ C1] ? __pfx_nft_synproxy_eval+0x10/0x10 [ 663.138373][ C1] nft_do_chain+0x2e9/0x1920 [ 663.138390][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 663.138403][ C1] ? ipt_do_table+0xd48/0x1ae0 [ 663.138421][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 663.138440][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 663.138457][ C1] ? ipt_do_table+0xd48/0x1ae0 [ 663.138478][ C1] nft_do_chain_inet+0x18a/0x340 [ 663.138492][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 663.138505][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 663.138520][ C1] ? __pfx_ipt_do_table+0x10/0x10 [ 663.138536][ C1] ? nf_nat_ipv4_local_in+0x181/0x720 [ 663.138555][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 663.138568][ C1] nf_hook_slow+0xbe/0x200 [ 663.138588][ C1] nf_hook.constprop.0+0x422/0x750 [ 663.138607][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 663.138626][ C1] ? __pfx_nf_hook.constprop.0+0x10/0x10 [ 663.138644][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 663.138663][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 663.138684][ C1] ip_local_deliver+0x169/0x1f0 [ 663.138701][ C1] ? __pfx_ip_local_deliver+0x10/0x10 [ 663.138719][ C1] ip_rcv+0x2c3/0x5d0 [ 663.138737][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 663.138754][ C1] __netif_receive_skb_one_core+0x197/0x1e0 [ 663.138771][ C1] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 663.138787][ C1] ? lock_acquire+0x179/0x350 [ 663.138801][ C1] ? process_backlog+0x3f0/0x15e0 [ 663.138816][ C1] __netif_receive_skb+0x1d/0x160 [ 663.138832][ C1] process_backlog+0x442/0x15e0 [ 663.138850][ C1] __napi_poll.constprop.0+0xb7/0x550 [ 663.138866][ C1] ? rcu_is_watching+0x12/0xc0 [ 663.138883][ C1] net_rx_action+0xa9f/0xfe0 [ 663.138906][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 663.138922][ C1] ? rcu_is_watching+0x12/0xc0 [ 663.138939][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 663.138955][ C1] ? tmigr_handle_remote+0x132/0x380 [ 663.138974][ C1] ? run_timer_base+0x121/0x190 [ 663.138993][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 663.139012][ C1] handle_softirqs+0x219/0x8e0 [ 663.139030][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 663.139047][ C1] __irq_exit_rcu+0x109/0x170 [ 663.139062][ C1] irq_exit_rcu+0x9/0x30 [ 663.139078][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 663.139095][ C1] [ 663.139100][ C1] [ 663.139104][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 663.139120][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 663.139137][ C1] Code: cb 6b 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 c0 21 00 fb f4 0c fb 02 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 663.139149][ C1] RSP: 0018:ffffc90000197df8 EFLAGS: 000002c6 [ 663.139159][ C1] RAX: 0000000002048f0d RBX: 0000000000000001 RCX: ffffffff8b884c69 [ 663.139168][ C1] RDX: 0000000000000000 RSI: ffffffff8de31723 RDI: ffffffff8c1587e0 [ 663.139176][ C1] RBP: ffffed1003c56488 R08: 0000000000000001 R09: ffffed10170a6645 [ 663.139184][ C1] R10: ffff8880b853322b R11: 0000000000000001 R12: 0000000000000001 [ 663.139192][ C1] R13: ffff88801e2b2440 R14: ffffffff90a97550 R15: 0000000000000000 [ 663.139203][ C1] ? ct_kernel_exit+0x139/0x190 [ 663.139223][ C1] default_idle+0x13/0x20 [ 663.139235][ C1] default_idle_call+0x6d/0xb0 [ 663.139247][ C1] do_idle+0x391/0x510 [ 663.139264][ C1] ? __pfx_do_idle+0x10/0x10 [ 663.139279][ C1] ? trace_sched_exit_tp+0x31/0x130 [ 663.139299][ C1] cpu_startup_entry+0x4f/0x60 [ 663.139315][ C1] start_secondary+0x21d/0x2b0 [ 663.139332][ C1] ? __pfx_start_secondary+0x10/0x10 [ 663.139351][ C1] common_startup_64+0x13e/0x148 [ 663.139368][ C1] [ 666.718495][ T5844] Bluetooth: hci5: command 0x0406 tx timeout