last executing test programs: 10.455644523s ago: executing program 0 (id=1128): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) syz_open_dev$swradio(&(0x7f0000000240), 0x0, 0x2) (async) r1 = syz_open_dev$swradio(&(0x7f0000000240), 0x0, 0x2) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r2, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) (async) write$dsp(r2, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x28000, 0x0) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448e2, &(0x7f0000000180)) r4 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) ioctl$SNDCTL_DSP_SUBDIVIDE(r2, 0xc0045009, &(0x7f0000000040)=0xffffffff) (async) ioctl$SNDCTL_DSP_SUBDIVIDE(r2, 0xc0045009, &(0x7f0000000040)=0xffffffff) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r2}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000040)={0x0, 0xb, 0x0, "fbda6b21f1d7479797795318a9b4b19471c838f51ef5dfaee256e99c476c937d", 0x2036315a}) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000fd1300010000000000000000002c000e000100ebf88e09738bbaae266300000000"], 0x24}}, 0x0) 10.414211128s ago: executing program 1 (id=1129): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) rseq(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x810, r0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f00000000c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x5453, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f00000001c0)={0x0, 0x8bc, 0x10001, 0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x9b0907, 0x2, '\x00', @value64=0x4}}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000380)={0xc}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xfffffffffffffc5d, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wg1\x00'}]}, 0x50}}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000011006bcc9e3be34c6e17aa310769876c1d0000007ea60864160af36514001ac004000202080002000600010076e6f06cea2618c3ecb525c89c32f292b156a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000180)={{0x12, 0x1, 0x110, 0x70, 0xb4, 0xc3, 0x10, 0x5c6, 0x9203, 0x7c38, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0xc, 0xf, 0x60, 0x9, [{{0x9, 0x4, 0x3, 0x0, 0x0, 0x31, 0xc6, 0x97, 0x5}}, {{0x9, 0x4, 0x6e, 0x40, 0x0, 0xff, 0x1, 0x1, 0x6}}]}}]}}, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9, 0x20, 0xf, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x4, {0x9, 0x21, 0x5, 0x2, 0x1, {0x22, 0x4d9}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xd6, 0x9, 0xae}}}}}]}}]}}, 0x0) 6.603438713s ago: executing program 2 (id=1139): socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000000180), 0xa7c, r0, 0x4}, 0x38) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) socket(0xa, 0x801, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@getqdisc={0x30, 0x26, 0x8, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0xa}, {0x0, 0x9}, {0xb, 0xfff1}}, [{0x4}, {0x4}, {0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x4000080) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) (async) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) (async) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) creat(&(0x7f0000000340)='./file0\x00', 0x62) setxattr$security_capability(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000000300), &(0x7f0000000380)=@v3={0x3000000, [{0x4, 0x7f}, {0x1, 0x9}]}, 0x18, 0x0) pipe(&(0x7f0000000200)) (async) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000340), 0x11000) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ptrace(0x10, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) (async) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r6 = syz_open_procfs(0x0, &(0x7f0000002400)='net/igmp\x00') sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001180)={&(0x7f00000022c0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="080005"], 0x164}, 0x1, 0x0, 0x0, 0x2b122a37adb94c4}, 0x1) 6.602656673s ago: executing program 1 (id=1140): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000012c0)=ANY=[@ANYBLOB="cc0000001b00d115000000000000000000000000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000f53b"], 0xcc}}, 0x0) (async) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_ext={0x1c, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1622, 0x0, 0x0, 0x0, 0x2b}}, &(0x7f00000003c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x102bf, r3, 0x0, 0x0, 0x0, 0x10, 0x4d, @void, @value}, 0x94) 6.352782838s ago: executing program 1 (id=1142): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb01001800000000000000580000005800000004000000040000000000001103000000000000000000000000000004000000000200000004000012020000000d0000000400000000000000030000000f002000050000000400000003000000020000002a00000e030000000000000000615f003c3ad9329c7afbdc9d372351da06c596aeb01c8408c321ad6d123b45379eff"], 0x0, 0x74, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000100)={0x0, 0x2, r0, 0x6}) syz_usb_connect(0x3, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x43, 0x46, 0xe1, 0x10, 0x7b8, 0x401a, 0x7bf0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x51, 0x0, 0x0, 0xf0, 0xce, 0x7e}}]}}]}}, 0x0) getsockopt$llc_int(r1, 0x10c, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) 5.8475523s ago: executing program 2 (id=1143): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) recvmsg$unix(0xffffffffffffffff, 0x0, 0x566e105bb7b0b1e4) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x8) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xb635773f06ebbeee, 0x11, r0, 0x85086000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f0000000480)=""/140, &(0x7f00000000c0)=0x8c) syz_emit_ethernet(0xae, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r5, @ANYRES8=r5], 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) close(0xffffffffffffffff) execve(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x48) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x26001) gettid() r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) write$rfkill(r7, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8) shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ffc000/0x4000)=nil) write$rfkill(r7, &(0x7f0000000340)={0x53, 0x8, 0x0, 0x1, 0xcc}, 0x8) 3.264816625s ago: executing program 1 (id=1150): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc626, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x2, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0xc}}}}}]}}]}}, 0x0) mkdir(&(0x7f0000000100)='./control\x00', 0x184) open(&(0x7f00000000c0)='./control\x00', 0x573382, 0x113) rmdir(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x24}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = gettid() timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r3, 0x545c, 0x3000000) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000540)={0x0, 0x6, 0x5, {0x5, 0x11, "46ff44"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xb0, 0xb4, 0x81, 0x8, 0x4b4, 0x2, 0xf9c4, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0xd7, 0x93}}]}}]}}, 0x0) 3.141992478s ago: executing program 3 (id=1151): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="180200000100000000000000000080008500000087000000180100002020732500000000e71f20207b1af8ff00000000bfa100000000400007feffffffffffffb702000008000000b7030000ff010000850000000600000095"], &(0x7f0000000080)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 3.074373589s ago: executing program 3 (id=1152): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs(0xffffffffffffffff, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0xffffffd8, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x64, 0x3, 0x300, 0x6e, 0xffffffad, 0x190, 0x190, 0x190, 0x268, 0x268, 0x268, 0x268, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0x0, 0x0, 'caif0\x00', 'ip6tnl0\x00'}, 0x0, 0x130, 0x190, 0xffffffc5, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x360) openat$selinux_access(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r5 = syz_init_net_socket$ax25(0x3, 0x3, 0xcb) r6 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000400)={0xf0f01c, 0x1}) connect$ax25(r5, &(0x7f00000001c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) r7 = socket$netlink(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)={0x58, r8, 0x1, 0x70bd28, 0x25dfdbfc, {}, [{{0x8, 0x1, r9}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffbfff9}}}]}}]}, 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000300)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) bind$tipc(r0, 0x0, 0x0) 2.952654976s ago: executing program 4 (id=1153): socket$nl_generic(0x10, 0x3, 0x10) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setstatus(r1, 0x4, 0x7c00) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000000)='5', 0xfdef}], 0x1) read$msr(r0, &(0x7f00000000c0)=""/166, 0xa6) rseq(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r3, 0x5453, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$admmidi(&(0x7f0000000000), 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0xfffffffffffffc5d, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wg1\x00'}]}, 0x50}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) pipe2(&(0x7f0000000080), 0x0) (async) fcntl$setstatus(r1, 0x4, 0x7c00) (async) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000000)='5', 0xfdef}], 0x1) (async) read$msr(r0, &(0x7f00000000c0)=""/166, 0xa6) (async) rseq(0x0, 0x0, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8d}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) (async) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$TIOCSSOFTCAR(r3, 0x5453, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) syz_open_dev$admmidi(&(0x7f0000000000), 0x1, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0xfffffffffffffc5d, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wg1\x00'}]}, 0x50}}, 0x0) (async) 2.910854118s ago: executing program 4 (id=1154): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x19) r1 = creat(&(0x7f00000000c0)='./file1\x00', 0x67) close(r1) r2 = socket$unix(0x1, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000001200), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) setxattr$security_capability(&(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r5, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e0f30fa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x14) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x2, 0x3}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}, 0x5}], 0x40002ff, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000880)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x4001) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x2) 2.485525327s ago: executing program 2 (id=1155): getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @loopback, @multicast1}, &(0x7f0000000240)=0xc) syz_io_uring_setup(0x237, &(0x7f0000000240)={0x0, 0xebcc, 0x0, 0x2, 0x252}, &(0x7f0000000040)=0x0, &(0x7f0000000380)=0x0) r2 = fsopen(&(0x7f0000000300)='jfs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0xa00, 0x63c, 0x1, 0x3, 0xd59f83, 0x19f2, 0x3f, 0x7, 0x3, 0x6, 0x2800, 0x2800, 0x2, 0xba2, 0x0, 0x38, {0x8, 0xffffffff}, 0xd0, 0x9}}) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) r5 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r5) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4}, 0x50) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0), 0x4) r6 = getpid() rt_tgsigqueueinfo(r6, r6, 0x14, &(0x7f0000000300)={0x23, 0x5, 0x7}) ptrace$ARCH_GET_GS(0x1e, r6, &(0x7f0000000140), 0x1004) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, 0x0, 0x0) shutdown(r7, 0x1) close_range(r2, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x4, @fd_index=0x3, 0x5, 0x0, 0x0, 0x16}) 2.17138464s ago: executing program 3 (id=1156): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x13, 0x6, @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="401746"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000ec0)=ANY=[@ANYBLOB="200f0d0000005e"], 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) (async) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) ioctl$TCSETAF(r2, 0x5408, &(0x7f0000000080)={0x49de, 0x0, 0x1, 0x7ff, 0xfc, "f528a1446105fcc1"}) write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e) (async, rerun: 64) r3 = syz_clone(0x800000, 0x0, 0xfffffffffffffedf, 0x0, 0x0, 0x0) (rerun: 64) ptrace(0x10, r3) ptrace(0x4208, r1) r4 = syz_pidfd_open(r3, 0x0) process_mrelease(r4, 0x700000000000000) (async) process_vm_readv(r3, &(0x7f0000000200)=[{&(0x7f0000000000)=""/27, 0x1b}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000340)=""/186, 0xba}], 0x1, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x0, 0x7, "0062ba7d820000a75e0000000000fcff00"}) (async) syz_open_pts(r2, 0x0) (async) r5 = dup3(0xffffffffffffffff, r2, 0x80000) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0x44) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) r6 = socket$packet(0x11, 0x2, 0x300) (rerun: 32) bind$packet(r6, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) (async) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, 0x0, 0x0) syz_emit_ethernet(0xe, 0x0, 0x0) (async) write(0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000540)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000880)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)={0x40, 0x1c, 0x1, 0x27}, 0x0, 0x0}) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) 2.033831451s ago: executing program 2 (id=1157): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)="180c4552", 0x4) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd000000005244534b00"}}) 2.022278187s ago: executing program 4 (id=1158): socket(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$sock_timeval(r0, 0x1, 0x42, 0x0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00'}) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) lsm_get_self_attr(0x64, 0xffffffffffffffff, &(0x7f0000000040)=0xfffffffffffffdb1, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x43) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x8000, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x2, 0x2d, &(0x7f0000004c00)={{0x12, 0x1, 0x250, 0x6, 0x9c, 0x4e, 0x8, 0x525, 0xa4a0, 0x3e5b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0xfd, 0x9, 0x40, 0xef, [{{0x9, 0x4, 0x8c, 0x0, 0x1, 0xe9, 0xd5, 0x1c, 0x3, [], [{{0x9, 0x5, 0x7, 0x17, 0x8, 0x1, 0x6, 0x59}}]}}]}}]}}, 0x0) setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x101, 0x5, 0x1, 0x9}, 0x14) 1.867383088s ago: executing program 2 (id=1159): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x81c0, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, 0x0, 0x0) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, 0x0) fanotify_mark(0xffffffffffffffff, 0x201, 0x48001003, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0x0, 0x0) read$FUSE(r5, &(0x7f00000051c0)={0x2020}, 0x2020) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='kfree\x00', r6, 0x0, 0x1000}, 0x18) r7 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r7, &(0x7f0000001940)=""/4086, 0xff6) keyctl$setperm(0x5, r7, 0x10502) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000040)=[{0x40, 0x0, 0x0, 0x401}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6, 0xfc, 0x0, 0x6}]}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYRES32=r10, @ANYBLOB="15000300030000c005000000f3a995360f3f662002000000"], 0x160}, 0x1, 0x0, 0x0, 0x45844}, 0x0) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) bind$bt_sco(r0, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xffffffffffffff65) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) 1.66696932s ago: executing program 0 (id=1160): openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x46800, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x40}}, {0x2, 0x4e22, @empty}, {0x2, 0x4e21, @private=0xa010101}, 0x20, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000040)='veth1_macvtap\x00', 0x6, 0x7, 0xfff9}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000100)={0x0, 0x1, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)={0x0, 0x1, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000180)={"786fcd15de599ffa814b35b355a9dd7de0d55d276c4945e53fcb972e5587d054", r2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, 0x0, 0x10, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5}]}, 0x24}}, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x4) r5 = accept4$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000380)=0x14, 0x40800) r7 = fcntl$dupfd(r5, 0x406, r0) sendmsg$nl_route_sched(r7, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)=@newqdisc={0x84, 0x24, 0x1, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xf, 0x6}, {0x8, 0xfff2}, {0xffff, 0xc}}, [@TCA_STAB={0x38, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xb, 0x39, 0x2, 0x5, 0x0, 0x10000, 0x8, 0x9}}, {0x16, 0x2, [0x0, 0x4, 0x1, 0x1ff, 0x57, 0x1, 0x6, 0x4, 0x738]}}]}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x3, 0x80, 0x2, 0x0, 0x4, 0x0, 0x1}}, {0x6, 0x2, [0x2]}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0x4000) read$FUSE(r7, &(0x7f0000000540)={0x2020}, 0x2020) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000002580)=@bloom_filter={0x1e, 0x3, 0x0, 0x4, 0x80, r7, 0x10, '\x00', r6, 0xffffffffffffffff, 0x1, 0x1, 0x0, 0xc, @void, @value, @void, @value}, 0x50) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000028c0)={r7, 0x20, &(0x7f0000002880)={&(0x7f00000027c0)=""/82, 0x52, 0x0, &(0x7f0000002840)=""/1, 0x1}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000002900)={0x14, 0x1c, &(0x7f0000002600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@map_idx_val={0x18, 0xe, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x80000001}, @cb_func={0x18, 0x9}, @map_idx={0x18, 0xa, 0x5, 0x0, 0xb}, @call={0x85, 0x0, 0x0, 0x8f}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000002700)='GPL\x00', 0xf362, 0x34, &(0x7f0000002740)=""/52, 0x40f00, 0x70, '\x00', r6, @lirc_mode2=0x10, r7, 0x8, &(0x7f0000002780)={0xa, 0x5}, 0x8, 0x10, 0x0, 0x0, r9, r7, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94) keyctl$setperm(0x5, 0x0, 0x100) sendmsg$L2TP_CMD_NOOP(r7, &(0x7f0000002a80)={&(0x7f00000029c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002a40)={&(0x7f0000002a00)={0x2c, 0x0, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) r10 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000002ac0), 0x608080, 0x0) ioctl$TUNSETOFFLOAD(r10, 0x400454d0, 0x0) getpeername$packet(r5, &(0x7f0000002b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002b40)=0x14) connect$inet(r0, &(0x7f0000002b80)={0x2, 0x4e22, @remote}, 0x10) r11 = openat$uinput(0xffffffffffffff9c, &(0x7f0000002bc0), 0x2, 0x0) ioctl$UI_BEGIN_FF_ERASE(r11, 0xc00c55ca, &(0x7f0000002c00)={0x4, 0x1, 0xd}) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000002c40)=0x4, 0x4) fcntl$setpipe(r8, 0x407, 0x700000000000) ioctl$VHOST_SET_VRING_KICK(r10, 0x4008af20, &(0x7f0000002c80)={0x3, r7}) socket$inet6(0xa, 0x800, 0x1) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000002e40)={&(0x7f0000002cc0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002e00)={&(0x7f0000002d80)={0x7c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_LEVEL={0x4c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x40}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x6}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x6}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x9}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x4}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_LEVEL={0xc, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x2}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) 1.503234994s ago: executing program 2 (id=1161): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() (async) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) (async) sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000000}, 0x6e) (async) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000000}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000ec0)=@newlink={0x6c, 0x10, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x34, 0x5, 0x0, 0x1, [@IFLA_BRPORT_UNICAST_FLOOD={0x5}, @IFLA_BRPORT_MCAST_TO_UCAST={0x5, 0x1c, 0x1}, @IFLA_BRPORT_PROXYARP={0x5}, @IFLA_BRPORT_PRIORITY={0x6, 0x2, 0xb1c3}, @IFLA_BRPORT_VLAN_TUNNEL={0x5}, @IFLA_BRPORT_GUARD={0x5}]}}}]}, 0x6c}}, 0x4004090) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$netlink(0x10, 0x3, 0x8000000004) (async) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYRES16=r1, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="15000000fe00000005"], 0x1) openat$cgroup_ro(r9, &(0x7f0000000380)='devices.list\x00', 0x0, 0x0) (async) r10 = openat$cgroup_ro(r9, &(0x7f0000000380)='devices.list\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) preadv(r10, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/140, 0x8c}], 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r8}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r8}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r11 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000000914010000007c0000000000080001"], 0x18}}, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_RES_GET(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000000914010000007c0000000000080001"], 0x18}}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x14, 0x0, &(0x7f0000000180)=[@acquire_done={0x40106309, 0x2}], 0x4, 0x0, &(0x7f0000000240)="af4fbc08"}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x14, 0x0, &(0x7f0000000180)=[@acquire_done={0x40106309, 0x2}], 0x4, 0x0, &(0x7f0000000240)="af4fbc08"}) syz_usb_connect(0x5, 0x2d, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000aa3a3740480b000000090453000127a1410009050b02000244b703"], 0x0) 1.436109713s ago: executing program 0 (id=1162): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="180200000100000000000000000080008500000087000000180100002020732500000000e71f20207b1af8ff00000000bfa100ffffff800007feffffffffffffb702000008000000b7030000ff010000850000000600000095"], &(0x7f0000000080)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.384083122s ago: executing program 0 (id=1163): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x10000000000) socket$nl_generic(0x10, 0x3, 0x10) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv6_newrule={0x1c, 0x1a, 0x1, 0x400000, 0x0, {0x81, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x1c}}, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000004c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347d1499097488fcad724a1"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000800)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 1.317360389s ago: executing program 4 (id=1164): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3c0, 0x210, 0x9403, 0x3002, 0x210, 0x2c0, 0x2f0, 0x3d8, 0x3d8, 0x2f0, 0x3d8, 0x3, 0x0, {[{{@ipv6={@private2, @remote, [0xffffff00, 0x0, 0xffffffff], [0xffffffff, 0xffffff00, 0xffffffff], 'macvlan1\x00', 'wg2\x00', {}, {0xa4c8dd0ffa9b1578}, 0x73, 0x9, 0x4, 0x48}, 0x0, 0x1c8, 0x210, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x80, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x0, 0x2}, {0x4, 0x5, 0x5}, {0x3, 0x4}, 0xbf, 0xb}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x47b) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000e40)=ANY=[@ANYBLOB="30010000", @ANYRES16=r2, @ANYBLOB="a18340000000000000000500000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900000000006700000008010e8004"], 0x130}}, 0x0) 1.195557558s ago: executing program 0 (id=1165): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = io_uring_setup(0x100, &(0x7f0000000340)={0x0, 0xfa90, 0x4000, 0x1, 0x4033}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000008000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, r3, 0x14, &(0x7f0000000000), 0x1, 0x10, &(0x7f0000000000)={0x0, 0x3}, 0xffffffffffffff1c, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) close_range(r1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES2(r0, 0xd, &(0x7f00000001c0)={0x1, 0x1, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)}], &(0x7f0000000180)=[0x5]}, 0x20) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x30, r7, 0x100, 0x0, 0x0, {}, [@GTPA_LINK={0x8}, @GTPA_TID={0xc}, @GTPA_VERSION={0x17, 0x2, 0xfffffffd}]}, 0x30}}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000000)=ANY=[@ANYBLOB="38010000105ba38dae7b4f00fead14600049a1000010000000000000ac1e01010000000000000000000000004e22000000420000020000008700"/76, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff010000000000000000000000000001000004d46c000000ac1e0001000000000000000000000000000000000000000001000000000001800000000000000000fcffffffffffffff0000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000d00000000000000de000000000000000000000006000000200000002bbd700000000000020004006500000000000000480003006465666c61746500"/240], 0x138}, 0x1, 0x0, 0x0, 0x20040891}, 0x40080) 1.193680081s ago: executing program 3 (id=1166): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs(0xffffffffffffffff, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0xffffffff, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x64, 0x3, 0x300, 0x6e, 0xffffffad, 0x190, 0x190, 0x190, 0x268, 0x268, 0x268, 0x268, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0x0, 0x0, 'caif0\x00', 'ip6tnl0\x00'}, 0x0, 0x130, 0x190, 0xffffffc5, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x360) openat$selinux_access(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r5 = syz_init_net_socket$ax25(0x3, 0x3, 0xcb) r6 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000400)={0xf0f01c, 0x1}) connect$ax25(r5, &(0x7f00000001c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) r7 = socket$netlink(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)={0x58, r8, 0x1, 0x70bd28, 0x25dfdbfc, {}, [{{0x8, 0x1, r9}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffbfff9}}}]}}]}, 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000300)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) bind$tipc(r0, 0x0, 0x0) 922.922789ms ago: executing program 0 (id=1167): io_setup(0x9, &(0x7f0000000b80)=0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) r2 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000544fb2f00090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000340)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb763e", 0x10, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x41}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}}}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xc38, &(0x7f00000000c0)=ANY=[]) creat(0x0, 0x0) io_submit(r0, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0xe}]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000009c0)) r3 = socket$inet(0x2b, 0x801, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000000)={0x84, @multicast2, 0xffff, 0x0, 'nq\x00'}, 0x2c) r4 = socket$inet(0x2b, 0x801, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0x0, 0x800, 0x0, 0x3}, 0x20) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000000)={0x5e, @private=0xa010100, 0x0, 0x0, 'fo\x00'}, 0x2c) r6 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r6, 0x5437, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r4, 0x0, 0x81, &(0x7f0000000080)={'filter\x00', 0x0, 0x0, 0x0, [0x1c2d, 0x40, 0x10, 0xc3, 0x8000000000000001], 0x6, &(0x7f0000000040), 0x0, [{}, {}, {}, {}, {}, {}]}, 0xd8) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100153a42908f00a71729188010203010902240001060000000904020002ffffff0009050b0000000000000905", @ANYRES16], 0x0) 247.490803ms ago: executing program 3 (id=1168): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x78}, 0x1, 0x0, 0x0, 0x840}, 0x0) 174.770281ms ago: executing program 1 (id=1169): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)="180c4552", 0x4) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00000000ff7a615000"}}) 174.121246ms ago: executing program 4 (id=1170): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) get_mempolicy(0x0, 0x0, 0x2, &(0x7f0000240000/0x1000)=nil, 0x3) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001940), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001980)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f00000019c0)={0x38, r3, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x38}, 0x1, 0x0, 0x0, 0x85}, 0x4000) mlock(&(0x7f00003c1000/0x4000)=nil, 0x4000) 44.082184ms ago: executing program 3 (id=1171): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x81c0, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, 0x0, 0x0) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, 0x0) fanotify_mark(0xffffffffffffffff, 0x201, 0x48001003, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0x0, 0x0) read$FUSE(r5, &(0x7f00000051c0)={0x2020}, 0x2020) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='kfree\x00', r6, 0x0, 0x1000}, 0x18) r7 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r7, &(0x7f0000001940)=""/4086, 0xff6) keyctl$setperm(0x5, r7, 0x10502) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000040)=[{0x40, 0x0, 0x0, 0x401}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6, 0xfc, 0x0, 0x6}]}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYRES32=r10, @ANYBLOB="15000300030000c005000000f3a995360f3f662002000000"], 0x160}, 0x1, 0x0, 0x0, 0x45844}, 0x0) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) bind$bt_sco(r0, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xffffffffffffff65) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) 29.865927ms ago: executing program 1 (id=1172): syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x59f240) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket(0x10, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) r0 = getpid() prlimit64(r0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) (async) prlimit64(r0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(r0, 0x6, &(0x7f0000000080)=0xc00) getpid() (async) r1 = getpid() sched_setscheduler(0x0, 0x3, &(0x7f0000000200)=0x566f) (async) sched_setscheduler(0x0, 0x3, &(0x7f0000000200)=0x566f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) (async) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shmget$private(0x0, 0x3000, 0x65d, &(0x7f0000ffa000/0x3000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8d}, 0x0) sched_setscheduler(r1, 0x1, 0x0) (async) sched_setscheduler(r1, 0x1, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x2}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x2}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x14, &(0x7f0000000140)={0xffffffffffffffff}, 0x106, 0x9}}, 0xd) write$RDMA_USER_CM_CMD_BIND_IP(r4, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x0, @remote, 0xf}, r5}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e24, 0x40003, @mcast1}, {0x2, 0xfff9, 0xc00, @remote, 0xffffffff}, r5, 0x9dffffff}}, 0x48) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000100)={0x13, 0x10, 0xfa00, {0x0, r5}}, 0x18) r6 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r8, &(0x7f00000001c0)=ANY=[@ANYBLOB="1500010065ffff00"], 0x15) dup(r6) (async) r9 = dup(r6) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3d69212524517ea54b2256e6812ffa07baa96fa4adcb83038bbdf7168be5f27129f248f412f935e7d17a6cce3844579a795612cfcc11584ff35c6eb2a3fbcef7f6588d08fa2e67d9bdb964d15ed936e1408c9eb085c36c9b99ac3b84", @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r9, @ANYBLOB=',k']) (async) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3d69212524517ea54b2256e6812ffa07baa96fa4adcb83038bbdf7168be5f27129f248f412f935e7d17a6cce3844579a795612cfcc11584ff35c6eb2a3fbcef7f6588d08fa2e67d9bdb964d15ed936e1408c9eb085c36c9b99ac3b84", @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r9, @ANYBLOB=',k']) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) 0s ago: executing program 4 (id=1173): openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = creat(0x0, 0x0) syz_emit_vhci(0x0, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={0x0, r2, 0x0, 0x3}}, 0x20) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x4c0800) r4 = semget$private(0x0, 0x207, 0x53) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000280)={0x7, 0x8, 0xfa00, {r2, 0x10c}}, 0x10) r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fremovexattr(r5, &(0x7f0000000f80)=ANY=[@ANYBLOB='s']) semctl$GETALL(r4, 0x0, 0xd, &(0x7f0000000040)=""/119) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000240)={0xaa, 0x611}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}}) ioctl$UFFDIO_WRITEPROTECT(r6, 0xc020aa08, 0x0) ioctl$UFFDIO_COPY(r5, 0xc028aa05, &(0x7f00000000c0)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3}) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000002c0)='htcp\x00', 0x1) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="03000800010000000000140000004500003014000000000190780a010100ac00907800000000450000000000000000110000ac1414aa7f00000100000000"], 0x3e) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) kernel console output (not intermixed with test programs): ass=file permissive=1 [ 289.991990][ T5891] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 290.002166][ T5891] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 290.010180][ T5891] usb 2-1: Product: syz [ 290.015693][ T5891] usb 2-1: Manufacturer: syz [ 290.020539][ T973] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 290.034222][ T5891] cdc_wdm 2-1:1.0: skipping garbage [ 290.039466][ T5891] cdc_wdm 2-1:1.0: skipping garbage [ 290.090773][ T5891] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 290.096715][ T5891] cdc_wdm 2-1:1.0: Unknown control protocol [ 290.208316][ T973] usb 5-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 290.227261][ T973] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.251920][ T973] usb 5-1: config 0 descriptor?? [ 290.483608][ T973] kaweth 5-1:0.0: Firmware present in device. [ 290.498360][ T5891] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 290.512518][ C1] cdc_wdm 2-1:1.0: Unexpected error -71 [ 290.519101][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 290.525933][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 290.532245][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 290.538841][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 290.546326][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 290.552932][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 290.559362][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 290.565971][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 290.572223][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 290.578832][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 290.585174][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 290.591788][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 290.599394][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 290.606008][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 290.612290][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 290.618884][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 290.625186][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 290.631780][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 290.638045][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 290.644641][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 290.671612][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 290.680494][ T5930] usb 2-1: USB disconnect, device number 27 [ 290.739181][ T5891] usb 3-1: device descriptor read/64, error -71 [ 290.969559][ T973] kaweth 5-1:0.0: Error reading configuration (-32), no net device created [ 290.980621][ T973] kaweth 5-1:0.0: probe with driver kaweth failed with error -5 [ 290.991757][ T973] usb 5-1: USB disconnect, device number 40 [ 291.020465][ T5891] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 291.170346][ T5891] usb 3-1: device descriptor read/64, error -71 [ 291.281565][ T5891] usb usb3-port1: attempt power cycle [ 292.060337][ T5891] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 292.100920][ T5891] usb 3-1: device descriptor read/8, error -71 [ 292.440642][ T5891] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 293.375127][ T5891] usb 3-1: device descriptor read/8, error -71 [ 293.434613][ T8844] netlink: 8 bytes leftover after parsing attributes in process `syz.3.676'. [ 293.460042][ T8844] netlink: 'syz.3.676': attribute type 30 has an invalid length. [ 293.495426][ T8844] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 293.504758][ T8844] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 293.514427][ T8844] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 293.523562][ T8844] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 293.539493][ T5891] usb usb3-port1: unable to enumerate USB device [ 293.660344][ T5865] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 293.821023][ T5865] usb 5-1: Using ep0 maxpacket: 8 [ 294.363069][ T5865] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 294.372445][ T5865] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.386923][ T5865] usb 5-1: Product: syz [ 294.410306][ T5865] usb 5-1: Manufacturer: syz [ 294.415059][ T5865] usb 5-1: SerialNumber: syz [ 294.427303][ T5865] usb 5-1: config 0 descriptor?? [ 294.577798][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 294.577831][ T30] audit: type=1400 audit(1747675758.217:900): avc: denied { open } for pid=8860 comm="syz.0.680" path="/dev/ttyq4" dev="devtmpfs" ino=379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 294.592121][ T8860] mmap: syz.0.680 (8860): VmData 37859328 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 294.643945][ T5865] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 294.741229][ T5930] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 294.751458][ T5891] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 294.879297][ T8868] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 294.892851][ T5865] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 294.915482][ T5930] usb 4-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 294.938601][ T5891] usb 3-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 294.983458][ T5930] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.002463][ T5891] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.094311][ T5891] usb 3-1: Product: syz [ 295.128892][ T5930] usb 4-1: config 0 descriptor?? [ 295.149411][ T5891] usb 3-1: Manufacturer: syz [ 295.216374][ T5891] usb 3-1: SerialNumber: syz [ 295.389398][ T5891] usb 3-1: config 0 descriptor?? [ 295.457829][ T5930] kaweth 4-1:0.0: Firmware present in device. [ 295.588295][ T951] usb 5-1: USB disconnect, device number 41 [ 295.760600][ T5930] kaweth 4-1:0.0: Error reading configuration (-32), no net device created [ 295.795513][ T5930] kaweth 4-1:0.0: probe with driver kaweth failed with error -5 [ 295.838844][ T8876] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=8876 comm=syz.4.684 [ 295.851583][ T30] audit: type=1400 audit(1747675759.467:901): avc: denied { bind } for pid=8873 comm="syz.4.684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 295.898602][ T5930] usb 4-1: USB disconnect, device number 39 [ 295.918222][ T30] audit: type=1400 audit(1747675759.467:902): avc: denied { listen } for pid=8873 comm="syz.4.684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 295.998950][ T30] audit: type=1400 audit(1747675759.467:903): avc: denied { write } for pid=8873 comm="syz.4.684" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 296.031614][ T30] audit: type=1400 audit(1747675759.477:904): avc: denied { read } for pid=8877 comm="syz.1.685" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 296.066250][ T30] audit: type=1400 audit(1747675759.477:905): avc: denied { open } for pid=8877 comm="syz.1.685" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 296.101874][ T30] audit: type=1400 audit(1747675759.697:906): avc: denied { sqpoll } for pid=8882 comm="syz.0.686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 296.115899][ T8889] loop6: detected capacity change from 0 to 524287999 [ 296.174918][ T5809] Buffer I/O error on dev loop6, logical block 0, async page read [ 296.175180][ T8890] Buffer I/O error on dev loop6, logical block 1048575, async page read [ 296.184066][ T5809] Buffer I/O error on dev loop6, logical block 0, async page read [ 296.206800][ T5809] Buffer I/O error on dev loop6, logical block 0, async page read [ 296.276355][ T5809] Buffer I/O error on dev loop6, logical block 0, async page read [ 296.291300][ T5809] Buffer I/O error on dev loop6, logical block 0, async page read [ 296.330578][ T30] audit: type=1400 audit(1747675759.757:907): avc: denied { append } for pid=8888 comm="syz.4.688" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 296.335290][ T5809] Buffer I/O error on dev loop6, logical block 0, async page read [ 296.569743][ T5891] usb 3-1: f81604_write: reg: 105 data: 65 failed: -EPROTO [ 296.622083][ T5891] f81604 3-1:0.0: Setting termination of CH#1 failed: -EPROTO [ 296.631205][ T5809] Buffer I/O error on dev loop6, logical block 0, async page read [ 296.639103][ T5891] f81604 3-1:0.0: probe with driver f81604 failed with error -71 [ 296.649281][ T5809] Buffer I/O error on dev loop6, logical block 0, async page read [ 296.655224][ T30] audit: type=1400 audit(1747675759.767:908): avc: denied { create } for pid=8882 comm="syz.0.686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 296.664489][ T5891] usb 3-1: USB disconnect, device number 56 [ 296.682649][ T5809] ldm_validate_partition_table(): Disk read failed. [ 296.690433][ T5809] Buffer I/O error on dev loop6, logical block 0, async page read [ 296.700778][ T30] audit: type=1400 audit(1747675759.767:909): avc: denied { read } for pid=8882 comm="syz.0.686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 296.702908][ T5809] Dev loop6: unable to read RDB block 0 [ 296.771625][ T5809] loop6: unable to read partition table [ 296.782522][ T8889] ldm_validate_partition_table(): Disk read failed. [ 296.814625][ T8889] Dev loop6: unable to read RDB block 0 [ 296.851160][ T8889] loop6: unable to read partition table [ 296.861035][ T8889] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 296.921593][ T5184] ldm_validate_partition_table(): Disk read failed. [ 296.938026][ T8901] netlink: 8 bytes leftover after parsing attributes in process `syz.0.690'. [ 296.947632][ T5184] Dev loop6: unable to read RDB block 0 [ 296.948976][ T8901] netlink: 4 bytes leftover after parsing attributes in process `syz.0.690'. [ 296.971956][ T5184] loop6: unable to read partition table [ 296.975254][ T8901] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 296.986461][ T8901] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 296.995396][ T8901] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 297.004257][ T8901] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 297.301784][ T8911] loop2: detected capacity change from 0 to 7 [ 297.353075][ T8911] Dev loop2: unable to read RDB block 7 [ 297.453368][ T8918] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 297.460759][ T8918] overlayfs: failed to set xattr on upper [ 297.466509][ T8918] overlayfs: ...falling back to redirect_dir=nofollow. [ 297.473462][ T8918] overlayfs: ...falling back to index=off. [ 297.479297][ T8918] overlayfs: ...falling back to uuid=null. [ 297.485588][ T8918] overlayfs: failed to clone lowerpath [ 297.628608][ T8911] loop2: unable to read partition table [ 297.747894][ T8911] loop2: partition table beyond EOD, truncated [ 297.807470][ T8911] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 298.626262][ T8921] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 299.828558][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 299.828590][ T30] audit: type=1400 audit(1747675763.467:921): avc: denied { bind } for pid=8970 comm="syz.4.710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 300.273069][ T30] audit: type=1400 audit(1747675763.467:922): avc: denied { read } for pid=8970 comm="syz.4.710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 300.449176][ T30] audit: type=1400 audit(1747675764.077:923): avc: denied { read } for pid=8981 comm="syz.3.713" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 300.543806][ T30] audit: type=1400 audit(1747675764.077:924): avc: denied { open } for pid=8981 comm="syz.3.713" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 300.569802][ T30] audit: type=1400 audit(1747675764.077:925): avc: denied { ioctl } for pid=8981 comm="syz.3.713" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 300.965899][ T30] audit: type=1400 audit(1747675764.607:926): avc: denied { bind } for pid=9002 comm="syz.1.717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 302.581696][ T30] audit: type=1400 audit(1747675766.217:927): avc: denied { ioctl } for pid=9020 comm="syz.0.723" path="socket:[20337]" dev="sockfs" ino=20337 ioctlcmd=0x8940 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 302.612278][ T9029] netlink: 'syz.2.725': attribute type 2 has an invalid length. [ 302.621218][ T9029] netlink: 'syz.2.725': attribute type 1 has an invalid length. [ 306.050065][ T5930] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 306.120987][ T9059] netlink: 6 bytes leftover after parsing attributes in process `syz.2.732'. [ 306.136554][ T30] audit: type=1400 audit(1747675769.777:928): avc: denied { read } for pid=9041 comm="syz.3.728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 306.161696][ T30] audit: type=1400 audit(1747675769.777:929): avc: denied { read write } for pid=9064 comm="syz.0.733" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 306.185022][ C1] vkms_vblank_simulate: vblank timer overrun [ 306.242642][ T30] audit: type=1400 audit(1747675769.777:930): avc: denied { open } for pid=9064 comm="syz.0.733" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 306.265900][ C1] vkms_vblank_simulate: vblank timer overrun [ 306.360363][ T5930] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 306.388942][ T5930] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 306.408330][ T9069] loop6: detected capacity change from 0 to 524287999 [ 306.619397][ T30] audit: type=1326 audit(1747675770.217:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9076 comm="syz.2.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30a298e969 code=0x7ffc0000 [ 306.831358][ T5930] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 306.857054][ T5930] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 306.866005][ T5930] usb 5-1: SerialNumber: syz [ 306.872928][ T30] audit: type=1326 audit(1747675770.217:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9076 comm="syz.2.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30a298e969 code=0x7ffc0000 [ 307.135303][ T5930] usb 5-1: 0:2 : does not exist [ 307.195278][ T30] audit: type=1326 audit(1747675770.467:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9076 comm="syz.2.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f30a298e969 code=0x7ffc0000 [ 307.218513][ C1] vkms_vblank_simulate: vblank timer overrun [ 307.278537][ T5930] usb 5-1: USB disconnect, device number 42 [ 307.443073][ T30] audit: type=1326 audit(1747675770.467:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9076 comm="syz.2.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30a298e969 code=0x7ffc0000 [ 307.466297][ C1] vkms_vblank_simulate: vblank timer overrun [ 307.492966][ T5997] udevd[5997]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 307.535298][ T30] audit: type=1326 audit(1747675770.497:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9076 comm="syz.2.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30a298e969 code=0x7ffc0000 [ 307.585693][ T30] audit: type=1326 audit(1747675770.497:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9076 comm="syz.2.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f30a298e969 code=0x7ffc0000 [ 307.615857][ T30] audit: type=1326 audit(1747675770.497:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9076 comm="syz.2.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30a298e969 code=0x7ffc0000 [ 308.495857][ T9099] dlm: no locking on control device [ 309.030327][ T5891] usb 5-1: new full-speed USB device number 43 using dummy_hcd [ 309.224466][ T5891] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 309.319188][ T5891] usb 5-1: config 0 interface 0 has no altsetting 0 [ 309.332654][ T5891] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 309.349015][ T5891] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.360278][ T5891] usb 5-1: Product: syz [ 309.364737][ T5891] usb 5-1: Manufacturer: syz [ 309.373491][ T5891] usb 5-1: SerialNumber: syz [ 309.390813][ T5891] usb 5-1: config 0 descriptor?? [ 309.408618][ T5891] usb 5-1: selecting invalid altsetting 0 [ 309.611454][ T5891] usb 5-1: USB disconnect, device number 43 [ 309.655640][ T10] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 309.910323][ T10] usb 4-1: device descriptor read/64, error -71 [ 309.980943][ T973] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 310.200728][ T10] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 310.670601][ T973] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 310.776897][ T973] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 310.836986][ T10] usb 4-1: device descriptor read/64, error -71 [ 310.858614][ T973] usb 3-1: config 220 has no interface number 2 [ 310.871696][ T973] usb 3-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 311.070751][ T10] usb usb4-port1: attempt power cycle [ 311.085394][ T973] usb 3-1: config 220 interface 0 has no altsetting 0 [ 311.100858][ T973] usb 3-1: config 220 interface 76 has no altsetting 0 [ 311.109019][ T973] usb 3-1: config 220 interface 1 has no altsetting 0 [ 311.118460][ T973] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 311.128936][ T973] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.141046][ T973] usb 3-1: Product: syz [ 311.402252][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 311.408606][ T30] audit: type=1400 audit(1747675775.037:979): avc: denied { write } for pid=9144 comm="syz.4.756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 311.512681][ T9158] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 312.314067][ T973] usb 3-1: Manufacturer: syz [ 312.318720][ T973] usb 3-1: SerialNumber: syz [ 312.402615][ T30] audit: type=1400 audit(1747675776.047:980): avc: denied { setopt } for pid=9160 comm="syz.1.759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 312.460610][ T5861] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 312.480030][ T30] audit: type=1400 audit(1747675776.117:981): avc: denied { ioctl } for pid=9160 comm="syz.1.759" path="socket:[21325]" dev="sockfs" ino=21325 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 312.576909][ T973] usb 3-1: selecting invalid altsetting 0 [ 312.600602][ T5861] usb 5-1: device descriptor read/64, error -71 [ 312.615832][ T973] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 312.631122][ T973] usb 3-1: No valid video chain found. [ 312.646709][ T973] usb 3-1: selecting invalid altsetting 0 [ 312.653277][ T973] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 312.668682][ T973] usb 3-1: USB disconnect, device number 57 [ 312.750893][ T10] usb usb4-port1: Cannot enable. Maybe the USB cable is bad? [ 313.379675][ T10] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 313.387357][ T5861] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 313.420871][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 313.429233][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 313.442757][ T10] usb 4-1: config index 0 descriptor too short (expected 7442, got 18) [ 313.453025][ T10] usb 4-1: config 4 has an invalid interface number: 255 but max is 0 [ 313.461889][ T10] usb 4-1: config 4 has no interface number 0 [ 313.462529][ T9176] fuse: Bad value for 'rootmode' [ 313.495240][ T10] usb 4-1: config 4 interface 255 has no altsetting 0 [ 313.506171][ T10] usb 4-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice= e.87 [ 313.550352][ T5861] usb 5-1: device descriptor read/64, error -71 [ 313.664076][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.665806][ T30] audit: type=1400 audit(1747675777.217:982): avc: denied { remount } for pid=9175 comm="syz.1.763" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 313.706767][ T5861] usb usb5-port1: attempt power cycle [ 313.712333][ T10] usb 4-1: Product: syz [ 313.716535][ T10] usb 4-1: Manufacturer: syz [ 313.738774][ T30] audit: type=1400 audit(1747675777.377:983): avc: denied { connect } for pid=9180 comm="syz.0.765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 313.753290][ T10] usb 4-1: SerialNumber: syz [ 313.821652][ T9182] ptrace attach of "./syz-executor exec"[5816] was attempted by "./syz-executor exec"[9182] [ 313.864254][ T9182] syz.0.765 (9182): /proc/9182/oom_adj is deprecated, please use /proc/9182/oom_score_adj instead. [ 314.250101][ T30] audit: type=1400 audit(1747675777.887:984): avc: denied { accept } for pid=9183 comm="syz.4.767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 314.374290][ T30] audit: type=1326 audit(1747675777.977:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9185 comm="syz.2.766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30a298e969 code=0x7ffc0000 [ 314.397615][ C1] vkms_vblank_simulate: vblank timer overrun [ 314.443139][ T9178] input: syz0 as /devices/virtual/input/input21 [ 314.644286][ T30] audit: type=1326 audit(1747675777.977:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9185 comm="syz.2.766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30a298e969 code=0x7ffc0000 [ 314.673203][ T10] usb 4-1: USB disconnect, device number 43 [ 314.691765][ T30] audit: type=1326 audit(1747675778.007:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9185 comm="syz.2.766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f30a298e969 code=0x7ffc0000 [ 314.718364][ T30] audit: type=1326 audit(1747675778.007:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9185 comm="syz.2.766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30a298e969 code=0x7ffc0000 [ 314.930660][ T9] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 315.080586][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 315.180122][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 102, changing to 7 [ 315.192160][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 10030, setting to 1024 [ 315.213729][ T9] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 315.225299][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.235071][ T9] usb 3-1: Product: syz [ 315.239310][ T9] usb 3-1: Manufacturer: syz [ 315.245550][ T9] usb 3-1: SerialNumber: syz [ 315.278575][ T9] usb 3-1: config 0 descriptor?? [ 315.303381][ T9199] FAULT_INJECTION: forcing a failure. [ 315.303381][ T9199] name failslab, interval 1, probability 0, space 0, times 0 [ 315.316356][ T9199] CPU: 0 UID: 0 PID: 9199 Comm: syz.3.770 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(full) [ 315.316380][ T9199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 315.316391][ T9199] Call Trace: [ 315.316398][ T9199] [ 315.316405][ T9199] dump_stack_lvl+0x16c/0x1f0 [ 315.316436][ T9199] should_fail_ex+0x512/0x640 [ 315.316460][ T9199] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 315.316481][ T9199] should_failslab+0xc2/0x120 [ 315.316500][ T9199] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 315.316517][ T9199] ? __alloc_skb+0x2b2/0x380 [ 315.316540][ T9199] __alloc_skb+0x2b2/0x380 [ 315.316558][ T9199] ? __pfx___alloc_skb+0x10/0x10 [ 315.316579][ T9199] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 315.316606][ T9199] netlink_alloc_large_skb+0x69/0x130 [ 315.316629][ T9199] netlink_sendmsg+0x6a1/0xdd0 [ 315.316656][ T9199] ? __pfx_netlink_sendmsg+0x10/0x10 [ 315.316687][ T9199] ____sys_sendmsg+0xa95/0xc70 [ 315.316713][ T9199] ? copy_msghdr_from_user+0x10a/0x160 [ 315.316732][ T9199] ? __pfx_____sys_sendmsg+0x10/0x10 [ 315.316763][ T9199] ? __lock_acquire+0xaa4/0x1ba0 [ 315.316797][ T9199] ___sys_sendmsg+0x134/0x1d0 [ 315.316818][ T9199] ? __pfx____sys_sendmsg+0x10/0x10 [ 315.316874][ T9199] __sys_sendmsg+0x16d/0x220 [ 315.316894][ T9199] ? __pfx___sys_sendmsg+0x10/0x10 [ 315.316931][ T9199] do_syscall_64+0xcd/0x260 [ 315.316959][ T9199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.316977][ T9199] RIP: 0033:0x7f674fb8e969 [ 315.316991][ T9199] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 315.317007][ T9199] RSP: 002b:00007f6750a7d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 315.317024][ T9199] RAX: ffffffffffffffda RBX: 00007f674fdb6160 RCX: 00007f674fb8e969 [ 315.317036][ T9199] RDX: 0000000024040840 RSI: 00002000000001c0 RDI: 000000000000000b [ 315.317047][ T9199] RBP: 00007f6750a7d090 R08: 0000000000000000 R09: 0000000000000000 [ 315.317058][ T9199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 315.317068][ T9199] R13: 0000000000000000 R14: 00007f674fdb6160 R15: 00007fff98191b18 [ 315.317093][ T9199] [ 315.575544][ T9] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 315.584875][ T9] em28xx 3-1:0.0: DVB interface 0 found: isoc [ 316.380358][ T9] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 316.568709][ T9] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 316.589041][ T9] em28xx 3-1:0.0: board has no eeprom [ 316.661949][ T9] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 316.680393][ T9] em28xx 3-1:0.0: dvb set to isoc mode. [ 316.687870][ T5861] em28xx 3-1:0.0: Binding DVB extension [ 316.860880][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.867232][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.920632][ T10] usb 4-1: new full-speed USB device number 44 using dummy_hcd [ 317.037969][ T9] usb 3-1: USB disconnect, device number 58 [ 317.064363][ T9] em28xx 3-1:0.0: Disconnecting em28xx [ 317.242423][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 317.254841][ T5861] em28xx 3-1:0.0: Registering input extension [ 317.262449][ T9] em28xx 3-1:0.0: Closing input extension [ 317.272440][ T10] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 317.280036][ T10] usb 4-1: can't read configurations, error -71 [ 317.288648][ T9225] netlink: 4 bytes leftover after parsing attributes in process `syz.4.778'. [ 317.303005][ T9225] netlink: 'syz.4.778': attribute type 4 has an invalid length. [ 317.305407][ T9] em28xx 3-1:0.0: Freeing device [ 317.620316][ T9] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 317.786323][ T9] usb 3-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 317.805372][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.814188][ T9] usb 3-1: Product: syz [ 317.818514][ T9] usb 3-1: Manufacturer: syz [ 317.823712][ T9] usb 3-1: SerialNumber: syz [ 317.851541][ T9] usb 3-1: config 0 descriptor?? [ 317.873888][ T9] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 319.246108][ T9] gspca_sq905c: sq905c_command: usb_control_msg failed (-110) [ 319.250297][ T30] kauditd_printk_skb: 108 callbacks suppressed [ 319.250313][ T30] audit: type=1400 audit(1747675782.087:1097): avc: denied { getopt } for pid=9231 comm="syz.4.781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 319.279179][ T9] sq905c 3-1:0.0: probe with driver sq905c failed with error -110 [ 319.630365][ T30] audit: type=1400 audit(1747675782.127:1098): avc: denied { read } for pid=9231 comm="syz.4.781" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 319.690447][ T30] audit: type=1400 audit(1747675782.127:1099): avc: denied { open } for pid=9231 comm="syz.4.781" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 319.720358][ T30] audit: type=1400 audit(1747675782.127:1100): avc: denied { ioctl } for pid=9231 comm="syz.4.781" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 319.771521][ T30] audit: type=1400 audit(1747675783.367:1101): avc: denied { compute_member } for pid=9240 comm="syz.4.784" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 319.792609][ T30] audit: type=1400 audit(1747675783.367:1102): avc: denied { accept } for pid=9240 comm="syz.4.784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 321.098073][ T9267] syz.0.788 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 321.110086][ T5891] usb 3-1: USB disconnect, device number 59 [ 321.401933][ T9269] netlink: 'syz.3.790': attribute type 1 has an invalid length. [ 321.466573][ T5863] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 321.545590][ T9274] netlink: 12 bytes leftover after parsing attributes in process `syz.4.792'. [ 321.557762][ T9274] netlink: 'syz.4.792': attribute type 5 has an invalid length. [ 321.591439][ T9274] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 321.600605][ T9274] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 321.609293][ T9274] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 321.618064][ T9274] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 321.628000][ T9274] vxlan0: entered promiscuous mode [ 321.634027][ T5863] usb 2-1: Using ep0 maxpacket: 8 [ 321.779981][ T9277] netlink: 'syz.2.791': attribute type 4 has an invalid length. [ 322.050354][ T9276] netlink: 4 bytes leftover after parsing attributes in process `syz.2.791'. [ 322.066470][ T5863] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 322.083309][ T5863] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 322.101984][ T5863] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 322.141956][ T5863] usb 2-1: Product: syz [ 322.296629][ T5863] usb 2-1: Manufacturer: syz [ 322.303869][ T5863] usb 2-1: SerialNumber: syz [ 322.677173][ T5863] usb 2-1: palm_os_3_probe - error -110 getting connection information [ 322.844730][ T5863] visor 2-1:1.0: probe with driver visor failed with error -110 [ 322.867373][ T5863] usb 2-1: USB disconnect, device number 28 [ 322.906514][ T9291] netlink: 12 bytes leftover after parsing attributes in process `syz.2.796'. [ 323.072650][ T9290] input: syz1 as /devices/virtual/input/input23 [ 323.096159][ T30] audit: type=1400 audit(1747675786.707:1103): avc: denied { map } for pid=9288 comm="syz.4.795" path="socket:[21860]" dev="sockfs" ino=21860 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 323.145737][ T9294] netlink: 48 bytes leftover after parsing attributes in process `syz.2.796'. [ 324.529280][ T30] audit: type=1400 audit(1747675788.167:1104): avc: denied { ioctl } for pid=9315 comm="syz.3.803" path="socket:[21903]" dev="sockfs" ino=21903 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 324.590808][ T9317] syz.4.802: attempt to access beyond end of device [ 324.590808][ T9317] nbd4: rw=0, sector=64, nr_sectors = 1 limit=0 [ 324.614556][ T9317] syz.4.802: attempt to access beyond end of device [ 324.614556][ T9317] nbd4: rw=0, sector=256, nr_sectors = 1 limit=0 [ 324.680462][ T9317] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 324.691587][ T9317] syz.4.802: attempt to access beyond end of device [ 324.691587][ T9317] nbd4: rw=0, sector=512, nr_sectors = 1 limit=0 [ 324.705769][ T9317] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 324.718101][ T9317] syz.4.802: attempt to access beyond end of device [ 324.718101][ T9317] nbd4: rw=0, sector=64, nr_sectors = 2 limit=0 [ 324.748375][ T9317] syz.4.802: attempt to access beyond end of device [ 324.748375][ T9317] nbd4: rw=0, sector=512, nr_sectors = 2 limit=0 [ 325.237473][ T9317] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 325.258216][ T9317] syz.4.802: attempt to access beyond end of device [ 325.258216][ T9317] nbd4: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 325.271299][ T9317] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 325.281428][ T9317] syz.4.802: attempt to access beyond end of device [ 325.281428][ T9317] nbd4: rw=0, sector=64, nr_sectors = 4 limit=0 [ 325.294644][ T9317] syz.4.802: attempt to access beyond end of device [ 325.294644][ T9317] nbd4: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 325.307876][ T9317] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 325.317794][ T9317] syz.4.802: attempt to access beyond end of device [ 325.317794][ T9317] nbd4: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 325.331105][ T9317] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 325.344300][ T9321] 9pnet_fd: Insufficient options for proto=fd [ 325.395478][ T9317] syz.4.802: attempt to access beyond end of device [ 325.395478][ T9317] nbd4: rw=0, sector=64, nr_sectors = 8 limit=0 [ 325.453018][ T9317] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 325.537027][ T9317] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 325.566493][ T9317] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 325.597500][ T9326] netlink: 8 bytes leftover after parsing attributes in process `syz.1.805'. [ 325.749568][ T9319] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 325.807738][ T9319] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 325.864582][ T9319] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 325.875780][ T9319] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 325.921495][ T9335] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 325.934543][ T9334] iommufd_mock iommufd_mock0: Adding to iommu group 1 [ 325.941670][ T30] audit: type=1400 audit(1747675789.577:1105): avc: denied { listen } for pid=9332 comm="syz.2.807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 325.962443][ T9319] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 325.979333][ T9335] veth0_vlan: entered allmulticast mode [ 325.979692][ T30] audit: type=1400 audit(1747675789.577:1106): avc: denied { ioctl } for pid=9332 comm="syz.2.807" path="socket:[21928]" dev="sockfs" ino=21928 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 325.989653][ T9319] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 326.009924][ T10] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 326.042206][ T9334] veth0_vlan: left promiscuous mode [ 326.048409][ T9334] veth0_vlan: entered promiscuous mode [ 326.100398][ T9319] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 326.110082][ T9319] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 326.133155][ T9319] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 326.197403][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 326.224324][ T10] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 326.266658][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.334608][ T10] usb 4-1: config 0 descriptor?? [ 326.540956][ T5930] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 327.000375][ T5930] usb 2-1: Using ep0 maxpacket: 16 [ 327.369347][ T5930] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 327.412069][ T5930] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 327.463791][ T5930] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 327.478230][ T5930] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 327.487671][ T5930] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 327.496024][ T5930] usb 2-1: Manufacturer: syz [ 327.510842][ T5930] usb 2-1: config 0 descriptor?? [ 328.138059][ T30] audit: type=1400 audit(1747675791.777:1107): avc: denied { create } for pid=9358 comm="syz.0.814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 328.979621][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 328.996196][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 329.019203][ T30] audit: type=1326 audit(1747675792.655:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9374 comm="syz.4.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b0358e969 code=0x7ffc0000 [ 329.032876][ T10] usb 4-1: USB disconnect, device number 46 [ 329.101889][ T30] audit: type=1326 audit(1747675792.655:1109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9374 comm="syz.4.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b0358e969 code=0x7ffc0000 [ 329.200381][ T30] audit: type=1326 audit(1747675792.695:1110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9374 comm="syz.4.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f9b0358e969 code=0x7ffc0000 [ 329.306514][ T9382] netlink: 112 bytes leftover after parsing attributes in process `syz.2.818'. [ 329.341521][ T30] audit: type=1326 audit(1747675792.695:1111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9374 comm="syz.4.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b0358e969 code=0x7ffc0000 [ 329.383168][ T30] audit: type=1326 audit(1747675792.695:1112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9374 comm="syz.4.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b0358e969 code=0x7ffc0000 [ 329.456909][ T9380] netlink: 4 bytes leftover after parsing attributes in process `syz.3.819'. [ 329.620426][ T30] audit: type=1326 audit(1747675792.695:1113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9374 comm="syz.4.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7f9b0358e969 code=0x7ffc0000 [ 329.647221][ T30] audit: type=1326 audit(1747675792.695:1114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9374 comm="syz.4.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b0358e969 code=0x7ffc0000 [ 329.684127][ T30] audit: type=1326 audit(1747675792.695:1115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9374 comm="syz.4.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b0358e969 code=0x7ffc0000 [ 329.707821][ T30] audit: type=1400 audit(1747675792.725:1116): avc: denied { shutdown } for pid=9377 comm="syz.3.819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 329.815035][ T30] audit: type=1400 audit(1747675793.455:1117): avc: denied { accept } for pid=9387 comm="syz.3.822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 329.980988][ T4485] Bluetooth: hci5: Frame reassembly failed (-84) [ 330.757039][ T5863] usb 2-1: USB disconnect, device number 29 [ 331.186344][ T30] audit: type=1326 audit(1747675794.795:1118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9414 comm="syz.3.829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f674fb8e969 code=0x7ffc0000 [ 331.218771][ T30] audit: type=1326 audit(1747675794.795:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9414 comm="syz.3.829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f674fb8e969 code=0x7ffc0000 [ 331.250635][ T30] audit: type=1326 audit(1747675794.795:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9414 comm="syz.3.829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f674fb8e969 code=0x7ffc0000 [ 331.322753][ T30] audit: type=1326 audit(1747675794.795:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9414 comm="syz.3.829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f674fb8e969 code=0x7ffc0000 [ 331.348148][ T30] audit: type=1326 audit(1747675794.795:1122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9414 comm="syz.3.829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f674fb8e969 code=0x7ffc0000 [ 331.992390][ T5823] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 332.626871][ T9422] syz.2.828 (9422): drop_caches: 2 [ 332.680619][ T5863] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 332.880438][ T10] usb 4-1: new low-speed USB device number 47 using dummy_hcd [ 332.890496][ T5863] usb 5-1: Using ep0 maxpacket: 32 [ 332.898003][ T5863] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 332.908559][ T5863] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 332.918395][ T5863] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 332.935344][ T5863] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 332.960841][ T5863] usb 5-1: config 1 has no interface number 0 [ 332.977353][ T5863] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 332.999917][ T5863] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.024195][ T5863] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 333.032639][ T10] usb 4-1: device descriptor read/64, error -71 [ 333.072127][ T5930] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 333.243621][ T5930] usb 3-1: Using ep0 maxpacket: 16 [ 333.440809][ T10] usb 4-1: new low-speed USB device number 48 using dummy_hcd [ 333.513608][ T5930] usb 3-1: config 1 interface 0 altsetting 4 bulk endpoint 0x82 has invalid maxpacket 32 [ 333.527657][ T5930] usb 3-1: config 1 interface 0 altsetting 4 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 333.543611][ T5930] usb 3-1: config 1 interface 0 has no altsetting 0 [ 333.553521][ T5930] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 333.563034][ T5930] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.571472][ T5930] usb 3-1: Product: ꊞ鴍뫏왺埨䇝ᅞ䩵ᐫႌՆ㆓ [ 333.576064][ T5863] snd_usb_pod 5-1:1.1: set_interface failed [ 333.578535][ T5930] usb 3-1: Manufacturer: ࠄ [ 333.588523][ T5863] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 333.591145][ T5930] usb 3-1: SerialNumber: 䠊 [ 333.596702][ T5863] snd_usb_pod 5-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 333.612897][ T9449] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 333.619122][ T5863] usb 5-1: USB disconnect, device number 47 [ 333.621906][ T9449] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 333.642985][ T10] usb 4-1: device descriptor read/64, error -71 [ 333.750645][ T10] usb usb4-port1: attempt power cycle [ 333.780477][ T5865] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 333.846300][ T5930] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 333.860760][ T5930] usb 3-1: USB disconnect, device number 60 [ 333.940312][ T5865] usb 2-1: Using ep0 maxpacket: 16 [ 333.946820][ T5865] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 333.955328][ T5865] usb 2-1: config 1 has no interface number 0 [ 333.962160][ T5865] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 333.972155][ T5865] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 333.982285][ T5865] usb 2-1: config 1 interface 105 has no altsetting 0 [ 333.990871][ T5865] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 333.999905][ T5865] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.008322][ T5865] usb 2-1: Product: syz [ 334.012583][ T5865] usb 2-1: Manufacturer: syz [ 334.017234][ T5865] usb 2-1: SerialNumber: syz [ 334.024965][ T9457] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 334.032189][ T9457] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 334.110586][ T10] usb 4-1: new low-speed USB device number 49 using dummy_hcd [ 334.142713][ T10] usb 4-1: device descriptor read/8, error -71 [ 334.267911][ T9465] tipc: Started in network mode [ 334.272942][ T9465] tipc: Node identity fffffffb, cluster identity 4711 [ 334.279765][ T9465] tipc: Node number set to 4294967291 [ 334.292552][ T5930] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 334.380448][ T10] usb 4-1: new low-speed USB device number 50 using dummy_hcd [ 334.411017][ T10] usb 4-1: device descriptor read/8, error -71 [ 334.478703][ T9457] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 334.486003][ T9457] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 334.520669][ T10] usb usb4-port1: unable to enumerate USB device [ 334.550519][ T5930] usb 3-1: Using ep0 maxpacket: 32 [ 334.576316][ T5930] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 249, changing to 11 [ 334.608307][ T9469] netlink: 4 bytes leftover after parsing attributes in process `syz.4.841'. [ 334.648789][ T9469] netlink: 'syz.4.841': attribute type 4 has an invalid length. [ 334.930404][ T30] kauditd_printk_skb: 76 callbacks suppressed [ 334.930421][ T30] audit: type=1400 audit(1747675798.275:1199): avc: denied { create } for pid=9466 comm="syz.4.841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 334.957751][ T5865] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -32 [ 334.968912][ T5930] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 334.978972][ T30] audit: type=1400 audit(1747675798.305:1200): avc: denied { name_bind } for pid=9466 comm="syz.4.841" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 335.001840][ T30] audit: type=1400 audit(1747675798.315:1201): avc: denied { node_bind } for pid=9466 comm="syz.4.841" saddr=127.0.0.1 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 335.002126][ T5930] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 335.034040][ T5865] aqc111 2-1:1.105: probe with driver aqc111 failed with error -32 [ 335.052675][ T5930] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 335.061791][ T5930] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.069776][ T5930] usb 3-1: Product: ࡃ [ 335.073987][ T5930] usb 3-1: Manufacturer: ᜡ䖘廓든渙퇚닟㺛䅽礅ⴽ婧㯠虣繍ൟ뇙媫⼙暱쒜䑵⓬☣壯縋ॹ葄㿸텕뵏梿ୂ뵆뒞쯴อ雜橹텷倆晃૥዗귦竬ꌤ痢￯ﮓ赱洣﹓槓纆ꌪￆᘠ쑴ⶫ빂龥ﳓ裠ݶᱍ뼣帓 [ 335.097029][ T5930] usb 3-1: SerialNumber: 牃圔骮후㢰⚙㔇联휨掄匆致쏠ᣝ䒑⣙쇧ᣋ鱶앓岥㽧㿿쌺淶ᢼ腮沏񶞱ᤚⰦ鍆簇ꅌ癿♐ᭂ䓼᳜윺䥟戂텊깗䙪휋弘ꭄ諐ॶ럥{㏥꠩ࡉླྀ紘걞萄䲸눲둹荚鯐馲욑堸 [ 335.267946][ T9471] FAULT_INJECTION: forcing a failure. [ 335.267946][ T9471] name failslab, interval 1, probability 0, space 0, times 0 [ 335.282443][ T9471] CPU: 1 UID: 0 PID: 9471 Comm: syz.4.842 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(full) [ 335.282467][ T9471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 335.282478][ T9471] Call Trace: [ 335.282484][ T9471] [ 335.282491][ T9471] dump_stack_lvl+0x16c/0x1f0 [ 335.282520][ T9471] should_fail_ex+0x512/0x640 [ 335.282547][ T9471] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 335.282569][ T9471] should_failslab+0xc2/0x120 [ 335.282588][ T9471] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 335.282605][ T9471] ? __alloc_skb+0x2b2/0x380 [ 335.282628][ T9471] __alloc_skb+0x2b2/0x380 [ 335.282646][ T9471] ? __pfx___alloc_skb+0x10/0x10 [ 335.282663][ T9471] ? selinux_socket_getpeersec_dgram+0x1a4/0x370 [ 335.282694][ T9471] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 335.282725][ T9471] netlink_alloc_large_skb+0x69/0x130 [ 335.282749][ T9471] netlink_sendmsg+0x6a1/0xdd0 [ 335.282775][ T9471] ? __pfx_netlink_sendmsg+0x10/0x10 [ 335.282808][ T9471] ____sys_sendmsg+0xa95/0xc70 [ 335.282834][ T9471] ? copy_msghdr_from_user+0x10a/0x160 [ 335.282853][ T9471] ? __pfx_____sys_sendmsg+0x10/0x10 [ 335.282890][ T9471] ___sys_sendmsg+0x134/0x1d0 [ 335.282911][ T9471] ? __pfx____sys_sendmsg+0x10/0x10 [ 335.282962][ T9471] __sys_sendmsg+0x16d/0x220 [ 335.282982][ T9471] ? __pfx___sys_sendmsg+0x10/0x10 [ 335.283019][ T9471] do_syscall_64+0xcd/0x260 [ 335.283046][ T9471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.283064][ T9471] RIP: 0033:0x7f9b0358e969 [ 335.283077][ T9471] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 335.283094][ T9471] RSP: 002b:00007f9b013f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 335.283110][ T9471] RAX: ffffffffffffffda RBX: 00007f9b037b5fa0 RCX: 00007f9b0358e969 [ 335.283121][ T9471] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000004 [ 335.283131][ T9471] RBP: 00007f9b013f6090 R08: 0000000000000000 R09: 0000000000000000 [ 335.283142][ T9471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 335.283151][ T9471] R13: 0000000000000000 R14: 00007f9b037b5fa0 R15: 00007ffdaaa89278 [ 335.283175][ T9471] [ 335.536744][ T10] usb 2-1: USB disconnect, device number 30 [ 335.549014][ T30] audit: type=1400 audit(1747675799.145:1202): avc: denied { setopt } for pid=9456 comm="syz.1.838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 335.700973][ T30] audit: type=1400 audit(1747675799.215:1203): avc: denied { setopt } for pid=9473 comm="syz.1.843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 335.730658][ T30] audit: type=1400 audit(1747675799.295:1204): avc: denied { create } for pid=9473 comm="syz.1.843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 335.753177][ T30] audit: type=1400 audit(1747675799.375:1205): avc: denied { create } for pid=9476 comm="syz.4.844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 336.095997][ T30] audit: type=1400 audit(1747675799.385:1206): avc: denied { create } for pid=9476 comm="syz.4.844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 336.117144][ T30] audit: type=1400 audit(1747675799.385:1207): avc: denied { create } for pid=9476 comm="syz.4.844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 336.150006][ T5930] cdc_ncm 3-1:1.0: bind() failure [ 336.181921][ T5930] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 336.219419][ T5930] cdc_ncm 3-1:1.1: bind() failure [ 336.233756][ T9483] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 336.268018][ T30] audit: type=1400 audit(1747675799.385:1208): avc: denied { create } for pid=9476 comm="syz.4.844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 336.390335][ T10] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 336.484769][ T5930] usb 3-1: USB disconnect, device number 61 [ 337.279625][ T9491] netlink: 20 bytes leftover after parsing attributes in process `syz.2.849'. [ 337.291972][ T9491] bond_slave_0: entered promiscuous mode [ 337.297803][ T9491] bond_slave_1: entered promiscuous mode [ 337.304311][ T9491] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 337.312180][ T9491] bond_slave_0: left promiscuous mode [ 337.317588][ T9491] bond_slave_1: left promiscuous mode [ 337.378339][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 337.413301][ T9492] netlink: 8 bytes leftover after parsing attributes in process `syz.2.849'. [ 337.549880][ T10] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 337.567195][ T10] usb 2-1: can't read configurations, error -71 [ 337.586470][ T9487] pim6reg1: entered promiscuous mode [ 337.596883][ T9487] pim6reg1: entered allmulticast mode [ 339.290930][ T9520] netlink: 12 bytes leftover after parsing attributes in process `syz.4.857'. [ 339.970785][ T5865] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 340.019091][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 340.019109][ T30] audit: type=1400 audit(1747675803.655:1242): avc: denied { setopt } for pid=9533 comm="syz.3.861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 340.690756][ T5865] usb 5-1: Using ep0 maxpacket: 8 [ 340.705570][ T5865] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 340.715787][ T5865] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.726586][ T30] audit: type=1400 audit(1747675804.365:1243): avc: denied { connect } for pid=9537 comm="syz.1.862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 340.726912][ T5865] usb 5-1: Product: syz [ 340.751371][ T5865] usb 5-1: Manufacturer: syz [ 340.756270][ T5865] usb 5-1: SerialNumber: syz [ 340.764786][ T5865] usb 5-1: config 0 descriptor?? [ 341.397399][ T5865] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 341.602745][ T30] audit: type=1400 audit(1747675805.245:1244): avc: denied { create } for pid=9546 comm="syz.3.865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 341.634805][ T30] audit: type=1400 audit(1747675805.265:1245): avc: denied { connect } for pid=9546 comm="syz.3.865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 341.655437][ T30] audit: type=1400 audit(1747675805.275:1246): avc: denied { write } for pid=9546 comm="syz.3.865" path="socket:[23303]" dev="sockfs" ino=23303 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 342.495207][ T5865] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 343.145291][ T30] audit: type=1400 audit(1747675806.775:1247): avc: denied { read write } for pid=9556 comm="syz.1.868" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 343.155898][ T9529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.194248][ T9529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.245462][ T30] audit: type=1400 audit(1747675806.775:1248): avc: denied { open } for pid=9556 comm="syz.1.868" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 343.271094][ T30] audit: type=1400 audit(1747675806.785:1249): avc: denied { map } for pid=9556 comm="syz.1.868" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 343.335555][ T9529] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 343.342419][ T9529] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 343.361764][ T5865] usb 5-1: USB disconnect, device number 48 [ 343.381619][ T30] audit: type=1400 audit(1747675806.785:1250): avc: denied { execute } for pid=9556 comm="syz.1.868" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 343.414604][ T30] audit: type=1400 audit(1747675806.955:1251): avc: denied { setopt } for pid=9528 comm="syz.4.860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 343.451098][ T5930] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 343.601893][ T5930] usb 3-1: Using ep0 maxpacket: 32 [ 343.609050][ T5930] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 343.620112][ T5891] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 343.641981][ T5930] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 343.660950][ T5930] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 343.670005][ T5930] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.684026][ T5930] usb 3-1: config 0 descriptor?? [ 343.701729][ T5930] hub 3-1:0.0: USB hub found [ 343.791084][ T5891] usb 4-1: Using ep0 maxpacket: 16 [ 343.811424][ T5891] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 343.822455][ T5891] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 343.832597][ T5891] usb 4-1: config 0 interface 0 has no altsetting 0 [ 343.839255][ T5891] usb 4-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 343.848649][ T5891] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.861333][ T5891] usb 4-1: config 0 descriptor?? [ 343.905296][ T5930] hub 3-1:0.0: 1 port detected [ 344.318119][ T5891] apple 0003:05AC:0247.0005: unexpected long global item [ 344.334705][ T9569] delete_channel: no stack [ 344.349730][ T5891] apple 0003:05AC:0247.0005: parse failed [ 344.359499][ T5891] apple 0003:05AC:0247.0005: probe with driver apple failed with error -22 [ 344.754166][ T5891] hub 3-1:0.0: activate --> -90 [ 344.767343][ T9562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 344.777667][ T9562] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 344.792845][ T9562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 344.803798][ T9562] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 344.958525][ T5891] hub 3-1:0.0: hub_ext_port_status failed (err = 0) [ 344.976084][ T5930] usb 4-1: USB disconnect, device number 51 [ 345.473544][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 345.473563][ T30] audit: type=1400 audit(1747675809.105:1258): avc: denied { write } for pid=9587 comm="syz.1.877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 345.600366][ T5891] usb 3-1: USB disconnect, device number 62 [ 345.616524][ T9591] xt_CT: You must specify a L4 protocol and not use inversions on it [ 346.636326][ T5930] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 347.198889][ T30] audit: type=1326 audit(1747675810.835:1259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9602 comm="syz.2.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30a298e969 code=0x7ffc0000 [ 347.233567][ T30] audit: type=1326 audit(1747675810.875:1260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9602 comm="syz.2.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30a298e969 code=0x7ffc0000 [ 347.370175][ T30] audit: type=1326 audit(1747675810.995:1261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9602 comm="syz.2.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f30a298e969 code=0x7ffc0000 [ 347.402473][ T5930] usb 4-1: Using ep0 maxpacket: 8 [ 347.422516][ T5930] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 347.441018][ T30] audit: type=1326 audit(1747675810.995:1262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9602 comm="syz.2.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30a298e969 code=0x7ffc0000 [ 347.443171][ T9611] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 347.464531][ T5930] usb 4-1: config 0 has no interface number 0 [ 347.491161][ T5930] usb 4-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=be.68 [ 347.858391][ T30] audit: type=1326 audit(1747675810.995:1263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9602 comm="syz.2.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f30a298e969 code=0x7ffc0000 [ 348.110549][ T10] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 348.179053][ T5930] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.320411][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 348.880316][ T5930] usb 4-1: Product: syz [ 348.885830][ T5930] usb 4-1: Manufacturer: syz [ 348.890555][ T5930] usb 4-1: SerialNumber: syz [ 348.897544][ T5930] usb 4-1: config 0 descriptor?? [ 348.902610][ T30] audit: type=1326 audit(1747675810.995:1264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9602 comm="syz.2.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30a298e969 code=0x7ffc0000 [ 348.926903][ T30] audit: type=1326 audit(1747675810.995:1265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9602 comm="syz.2.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f30a298e969 code=0x7ffc0000 [ 348.950273][ T30] audit: type=1326 audit(1747675810.995:1266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9602 comm="syz.2.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30a298e969 code=0x7ffc0000 [ 348.973695][ T10] usb 3-1: config 0 has an invalid interface number: 112 but max is 0 [ 348.973721][ T10] usb 3-1: config 0 has no interface number 0 [ 348.989182][ T5930] usb 4-1: can't set config #0, error -71 [ 349.007750][ T10] usb 3-1: New USB device found, idVendor=04dd, idProduct=8002, bcdDevice=d3.6c [ 349.010071][ T5930] usb 4-1: USB disconnect, device number 52 [ 349.044220][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.054771][ T10] usb 3-1: Product: syz [ 349.059296][ T10] usb 3-1: Manufacturer: syz [ 349.064348][ T10] usb 3-1: SerialNumber: syz [ 349.070590][ T30] audit: type=1326 audit(1747675810.995:1267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9602 comm="syz.2.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f30a298e969 code=0x7ffc0000 [ 349.158298][ T10] usb 3-1: config 0 descriptor?? [ 349.241587][ T9] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 349.605141][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 349.619199][ T9] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 349.640302][ T9] usb 2-1: can't read configurations, error -71 [ 349.900417][ T5930] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 350.152055][ T5930] usb 4-1: New USB device found, idVendor=046d, idProduct=08b6, bcdDevice=ca.8e [ 350.170196][ T5930] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.196952][ T5930] pwc: Logitech/Cisco VT Camera webcam detected. [ 350.638804][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 350.638837][ T30] audit: type=1400 audit(1747675814.275:1280): avc: denied { write } for pid=9626 comm="syz.3.887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 350.687575][ T5930] pwc: send_video_command error -71 [ 350.708045][ T5930] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 350.719990][ T30] audit: type=1400 audit(1747675814.275:1281): avc: denied { name_connect } for pid=9626 comm="syz.3.887" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 350.760393][ T5930] Philips webcam 4-1:127.0: probe with driver Philips webcam failed with error -71 [ 350.785424][ T5930] usb 4-1: USB disconnect, device number 53 [ 351.222242][ T10] safe_serial 3-1:0.112: safe_serial converter detected [ 351.231748][ T30] audit: type=1400 audit(1747675814.865:1282): avc: denied { unmount } for pid=5808 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 351.234089][ T10] safe_serial 3-1:0.112: probe with driver safe_serial failed with error -22 [ 351.254637][ T30] audit: type=1400 audit(1747675814.875:1283): avc: denied { unmount } for pid=5808 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 351.310551][ T10] usb 3-1: USB disconnect, device number 63 [ 352.003278][ T9664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.012818][ T9664] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 352.240458][ T10] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 352.324836][ T9674] netem: incorrect gi model size [ 352.339730][ T9674] netem: change failed [ 352.442679][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 352.452109][ T10] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 352.471564][ T10] usb 4-1: config 179 has no interface number 0 [ 352.478851][ T10] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 352.496213][ T10] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 352.507614][ T10] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 352.520006][ T9677] netlink: 4 bytes leftover after parsing attributes in process `syz.1.897'. [ 352.520020][ T10] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 352.542465][ T9677] netlink: 'syz.1.897': attribute type 4 has an invalid length. [ 352.717014][ T30] audit: type=1400 audit(1747675816.235:1284): avc: denied { mount } for pid=9673 comm="syz.4.900" name="/" dev="configfs" ino=1211 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 352.783579][ T30] audit: type=1400 audit(1747675816.245:1285): avc: denied { search } for pid=9673 comm="syz.4.900" name="/" dev="configfs" ino=1211 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 352.825609][ T30] audit: type=1400 audit(1747675816.245:1286): avc: denied { create } for pid=9673 comm="syz.4.900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 352.887311][ T30] audit: type=1400 audit(1747675816.255:1287): avc: denied { connect } for pid=9673 comm="syz.4.900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 352.902674][ T5863] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 352.915314][ T30] audit: type=1400 audit(1747675816.255:1288): avc: denied { read write } for pid=9673 comm="syz.4.900" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 352.918629][ T10] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 352.940915][ T30] audit: type=1400 audit(1747675816.255:1289): avc: denied { open } for pid=9673 comm="syz.4.900" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 352.952735][ T10] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 352.984313][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.995245][ T9663] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 353.204760][ T5891] usb 4-1: USB disconnect, device number 54 [ 353.204777][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 353.238957][ T5863] usb 3-1: Using ep0 maxpacket: 16 [ 353.245575][ T5863] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 353.257526][ T5863] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 353.268798][ T5863] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 353.284433][ T5863] usb 3-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 353.293663][ T5863] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.305689][ T5863] usb 3-1: Product: syz [ 353.309899][ T5863] usb 3-1: Manufacturer: syz [ 353.317458][ T5863] usb 3-1: SerialNumber: syz [ 353.325429][ T5863] usb 3-1: config 0 descriptor?? [ 353.338468][ T5863] appledisplay 3-1:0.0: Submitting URB failed [ 353.345102][ T5863] appledisplay 3-1:0.0: probe with driver appledisplay failed with error -5 [ 353.361178][ T5930] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 353.510779][ T5930] usb 2-1: device descriptor read/64, error -71 [ 353.580676][ T951] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 353.782532][ T5930] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 353.814044][ T951] usb 5-1: unable to get BOS descriptor or descriptor too short [ 353.887661][ T951] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 353.971403][ T951] usb 5-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 354.003045][ T5930] usb 2-1: device descriptor read/64, error -71 [ 354.105634][ T951] usb 5-1: config 1 interface 0 has no altsetting 1 [ 354.171962][ T5930] usb usb2-port1: attempt power cycle [ 354.223279][ T951] usb 5-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 354.310603][ T951] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.380983][ T951] usb 5-1: Product: syz [ 354.412483][ T951] usb 5-1: Manufacturer: syz [ 354.453063][ T951] usb 5-1: SerialNumber: syz [ 354.477164][ T5863] usb 3-1: USB disconnect, device number 64 [ 354.608597][ T951] smsusb:smsusb_probe: board id=8, interface number 0 [ 354.650361][ T5930] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 354.673560][ T5930] usb 2-1: device descriptor read/8, error -71 [ 355.117599][ T951] smsusb:smsusb_probe: usb_set_interface failed, rc -71 [ 355.130912][ T951] smsusb 5-1:1.0: probe with driver smsusb failed with error -71 [ 355.168262][ T951] usb 5-1: USB disconnect, device number 49 [ 355.174422][ T5930] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 355.202128][ T5930] usb 2-1: device descriptor read/8, error -71 [ 355.417872][ T5930] usb usb2-port1: unable to enumerate USB device [ 356.314481][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 356.314496][ T30] audit: type=1326 audit(1747675819.955:1300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9718 comm="syz.1.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6d718e969 code=0x7ffc0000 [ 356.380436][ T9720] loop2: detected capacity change from 0 to 7 [ 356.456049][ T30] audit: type=1326 audit(1747675819.955:1301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9718 comm="syz.1.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6d718e969 code=0x7ffc0000 [ 356.489243][ T9720] Dev loop2: unable to read RDB block 7 [ 356.489539][ T10] IPVS: starting estimator thread 0... [ 356.500306][ T9720] loop2: unable to read partition table [ 356.532882][ T9720] loop2: partition table beyond EOD, truncated [ 356.617124][ T9720] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 356.667573][ T30] audit: type=1326 audit(1747675819.985:1302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9718 comm="syz.1.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd6d718d41f code=0x7ffc0000 [ 356.667951][ T9728] IPVS: using max 44 ests per chain, 105600 per kthread [ 356.741850][ T9725] loop8: detected capacity change from 0 to 7 [ 356.825726][ T9725] Dev loop8: unable to read RDB block 7 [ 356.832307][ T9725] loop8: unable to read partition table [ 356.839035][ T9725] loop8: partition table beyond EOD, truncated [ 356.889093][ T9725] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 356.931112][ T30] audit: type=1326 audit(1747675819.985:1303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9718 comm="syz.1.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6d718e969 code=0x7ffc0000 [ 357.014607][ T30] audit: type=1326 audit(1747675819.985:1304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9718 comm="syz.1.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6d718e969 code=0x7ffc0000 [ 357.058101][ T30] audit: type=1326 audit(1747675819.985:1305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9718 comm="syz.1.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fd6d718e969 code=0x7ffc0000 [ 357.084819][ T30] audit: type=1326 audit(1747675819.985:1306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9718 comm="syz.1.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6d718e969 code=0x7ffc0000 [ 357.109453][ T30] audit: type=1326 audit(1747675819.985:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9718 comm="syz.1.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6d718e969 code=0x7ffc0000 [ 357.132936][ T30] audit: type=1326 audit(1747675819.985:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9718 comm="syz.1.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd6d718e969 code=0x7ffc0000 [ 357.156289][ T30] audit: type=1326 audit(1747675819.985:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9718 comm="syz.1.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6d718e969 code=0x7ffc0000 [ 357.241411][ T10] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 357.401340][ T5930] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 357.756347][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 357.770517][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 358.083069][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 358.095814][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 358.127209][ T10] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 358.171538][ T5930] usb 3-1: Using ep0 maxpacket: 32 [ 358.179128][ T5930] usb 3-1: config 0 has an invalid interface number: 235 but max is 0 [ 358.189027][ T5930] usb 3-1: config 0 has no interface number 0 [ 358.198659][ T10] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 358.208140][ T5930] usb 3-1: New USB device found, idVendor=085a, idProduct=0009, bcdDevice=a3.47 [ 358.217753][ T10] usb 4-1: Manufacturer: syz [ 358.218458][ T5930] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.235015][ T10] usb 4-1: config 0 descriptor?? [ 358.277584][ T5930] usb 3-1: Product: syz [ 358.288450][ T5930] usb 3-1: Manufacturer: syz [ 358.311047][ T5930] usb 3-1: SerialNumber: syz [ 358.336962][ T5930] usb 3-1: config 0 descriptor?? [ 358.642780][ T5930] kaweth 3-1:0.235: Firmware present in device. [ 358.925773][ T9774] loop2: detected capacity change from 0 to 7 [ 358.994973][ T5930] kaweth 3-1:0.235: Statistics collection: 344f9f49 [ 359.006614][ T5930] kaweth 3-1:0.235: Multicast filter limit: 6f6d [ 359.016801][ T5930] kaweth 3-1:0.235: MTU: 10689 [ 359.022236][ T5930] kaweth 3-1:0.235: Read MAC address 2c:3a:15:6b:35:03 [ 359.030110][ T5997] Dev loop2: unable to read RDB block 7 [ 359.038779][ T5997] loop2: unable to read partition table [ 359.046480][ T5997] loop2: partition table beyond EOD, truncated [ 359.055776][ T9774] Dev loop2: unable to read RDB block 7 [ 359.070650][ T9774] loop2: unable to read partition table [ 359.080002][ T9774] loop2: partition table beyond EOD, truncated [ 359.477166][ T9774] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 359.624140][ T9780] netlink: 8 bytes leftover after parsing attributes in process `syz.1.929'. [ 359.633278][ T9780] netlink: 8 bytes leftover after parsing attributes in process `syz.1.929'. [ 359.642769][ T9780] netlink: 8 bytes leftover after parsing attributes in process `syz.1.929'. [ 359.899551][ T5930] kaweth 3-1:0.235: kaweth interface created at eth1 [ 360.217200][ T5479] kaweth 3-1:0.235: resubmitting rx_urb -2 failed [ 360.537405][ T9] usb 4-1: USB disconnect, device number 55 [ 360.705929][ T9809] netlink: 'syz.3.935': attribute type 1 has an invalid length. [ 360.723961][ T9809] netlink: 224 bytes leftover after parsing attributes in process `syz.3.935'. [ 360.752362][ T9811] netlink: 4096 bytes leftover after parsing attributes in process `syz.4.934'. [ 361.381021][ T9812] netlink: 'syz.1.933': attribute type 4 has an invalid length. [ 361.762150][ T9815] netlink: 4 bytes leftover after parsing attributes in process `syz.1.933'. [ 361.776703][ T9] usb 3-1: USB disconnect, device number 65 [ 361.913692][ T30] kauditd_printk_skb: 66 callbacks suppressed [ 361.913709][ T30] audit: type=1400 audit(1747675825.552:1376): avc: denied { ioctl } for pid=9822 comm="syz.1.937" path="socket:[24839]" dev="sockfs" ino=24839 ioctlcmd=0x8923 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 361.972698][ T9825] can0: slcan on ttyprintk. [ 361.979458][ T9826] netlink: 'syz.2.936': attribute type 10 has an invalid length. [ 362.001858][ T9825] openvswitch: netlink: Message has 24 unknown bytes. [ 362.008681][ T9825] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 362.033125][ T9826] veth0_macvtap: left promiscuous mode [ 362.046066][ T30] audit: type=1400 audit(1747675825.662:1377): avc: denied { read write } for pid=9822 comm="syz.1.937" dev="sockfs" ino=24839 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 362.242463][ T9820] can0 (unregistered): slcan off ttyprintk. [ 362.259071][ T9832] netlink: 12 bytes leftover after parsing attributes in process `syz.3.939'. [ 362.293409][ T30] audit: type=1400 audit(1747675825.892:1378): avc: denied { create } for pid=9828 comm="syz.3.939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 362.649515][ T30] audit: type=1400 audit(1747675825.892:1379): avc: denied { write } for pid=9828 comm="syz.3.939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 362.655847][ T9832] netlink: 28 bytes leftover after parsing attributes in process `syz.3.939'. [ 362.669545][ C0] vkms_vblank_simulate: vblank timer overrun [ 362.700297][ T30] audit: type=1400 audit(1747675825.892:1380): avc: denied { nlmsg_write } for pid=9828 comm="syz.3.939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 362.770917][ T9832] netlink: 8 bytes leftover after parsing attributes in process `syz.3.939'. [ 362.797117][ T30] audit: type=1400 audit(1747675825.892:1381): avc: denied { read } for pid=9828 comm="syz.3.939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 362.888561][ T30] audit: type=1400 audit(1747675826.432:1382): avc: denied { create } for pid=9842 comm="syz.2.942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 362.968386][ T9849] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 363.034557][ T9849] bond1: entered promiscuous mode [ 363.040159][ T9849] bond1: entered allmulticast mode [ 363.045680][ T9849] 8021q: adding VLAN 0 to HW filter on device bond1 [ 363.714101][ T30] audit: type=1400 audit(1747675826.432:1383): avc: denied { ioctl } for pid=9842 comm="syz.2.942" path="socket:[23850]" dev="sockfs" ino=23850 ioctlcmd=0x8980 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 364.639493][ T30] audit: type=1400 audit(1747675826.622:1384): avc: denied { append } for pid=9842 comm="syz.2.942" name="ubi_ctrl" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 365.351506][ T30] audit: type=1400 audit(1747675828.982:1385): avc: denied { ioctl } for pid=9868 comm="syz.4.946" path="socket:[23898]" dev="sockfs" ino=23898 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 365.732831][ T9883] netlink: 4 bytes leftover after parsing attributes in process `syz.3.948'. [ 366.270400][ T9] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 367.144626][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 367.144637][ T30] audit: type=1400 audit(1747675830.782:1390): avc: denied { unmount } for pid=5813 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 367.187594][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 367.240345][ T9] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 367.268246][ T9] usb 2-1: can't read configurations, error -71 [ 367.320938][ T9911] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 367.510432][ T5930] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 367.591186][ T10] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 367.670330][ T5930] usb 4-1: Using ep0 maxpacket: 8 [ 367.677311][ T5930] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 367.687682][ T5930] usb 4-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 367.709581][ T5930] usb 4-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 367.719085][ T5930] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.727421][ T5930] usb 4-1: Product: syz [ 367.732121][ T5930] usb 4-1: Manufacturer: syz [ 367.822217][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 367.853731][ T5930] usb 4-1: SerialNumber: syz [ 367.861535][ T10] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 367.880361][ T10] usb 5-1: config 1 has an invalid descriptor of length 245, skipping remainder of the config [ 367.894173][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 368.012427][ T30] audit: type=1400 audit(1747675831.612:1391): avc: denied { connect } for pid=9915 comm="syz.1.957" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 368.339360][ T30] audit: type=1400 audit(1747675831.632:1392): avc: denied { setopt } for pid=9915 comm="syz.1.957" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 368.374219][ T10] usb 5-1: Dual-Role OTG device on HNP port [ 368.381129][ T10] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 368.391199][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.399193][ T10] usb 5-1: Product: 赃뼬㮖῝澁鲧䍭훑髛ୃꃀ췵﮼䖸弲ꤸ갼熸⡃䳝煹扸릝땚鲲쏿鸆恐榡乴쟾ꅑ藔း࿼ᾅ붎荙䣔쥠觬䛧餰儒ಱ엞횵ᙇ௻樱ჹ棾酄浪욑字蕪딄ꭲﭤᾯ㗓ⸯ푚漱礔姗 [ 368.423717][ T10] usb 5-1: Manufacturer: 㦔힇᧾랷஫૶믓냡㎺䦖뉯쾔췏ᙏ곢䱿呕ᒾ欄ﬡ餄 [ 368.434569][ T10] usb 5-1: SerialNumber: 윯翊᥀౒玐쀫쐘伊풉♵쒨嫷࢞璮쏥㖖缕뜌绲⁝䁋숫覺粈卨᳷䴚顬࣏༏⭆霄酢靖ꏐ偛痡䚈驣뭘鼏擞휱Ṽ떮朊颵偲⻛뤭ংⶭఒ彰꣥䌊떠쫟㢮浈킵䚖뒵ゥ儤쀢魀놌榱⇴Ꮃ냗㹍尢猵 [ 368.524835][ T30] audit: type=1400 audit(1747675832.162:1393): avc: denied { ioctl } for pid=9919 comm="syz.2.958" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x5520 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 368.732252][ T10] usb 5-1: 0:2 : does not exist [ 369.027564][ T10] usb 5-1: USB disconnect, device number 50 [ 369.164879][ T30] audit: type=1400 audit(1747675832.782:1394): avc: denied { read } for pid=9926 comm="syz.1.960" name="btrfs-control" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 369.360419][ T5861] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 369.541146][ T5823] Bluetooth: hci4: command 0x0406 tx timeout [ 369.562599][ T30] audit: type=1400 audit(1747675832.782:1395): avc: denied { open } for pid=9926 comm="syz.1.960" path="/dev/btrfs-control" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 369.673796][ T30] audit: type=1400 audit(1747675832.782:1396): avc: denied { ioctl } for pid=9926 comm="syz.1.960" path="/dev/btrfs-control" dev="devtmpfs" ino=1309 ioctlcmd=0x9405 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 369.717094][ T5809] udevd[5809]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 369.823283][ T5861] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 370.148387][ T5861] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 370.875914][ T30] audit: type=1400 audit(1747675834.132:1397): avc: denied { create } for pid=9936 comm="syz.1.961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 370.903848][ T10] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 370.918898][ T5861] usb 3-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 370.941270][ T9939] netlink: 4 bytes leftover after parsing attributes in process `syz.1.961'. [ 370.968593][ T5861] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.977774][ T30] audit: type=1400 audit(1747675834.542:1398): avc: denied { listen } for pid=9908 comm="syz.3.955" lport=33823 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 370.977821][ T30] audit: type=1400 audit(1747675834.542:1399): avc: denied { accept } for pid=9908 comm="syz.3.955" lport=33823 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 371.502410][ T9946] netlink: 4 bytes leftover after parsing attributes in process `syz.4.963'. [ 371.508057][ T5861] usb 3-1: config 0 descriptor?? [ 371.585822][ T9946] netlink: 12 bytes leftover after parsing attributes in process `syz.4.963'. [ 371.655349][ T5861] usbhid 3-1:0.0: can't add hid device: -71 [ 371.662613][ T5861] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 371.673306][ T5861] usb 3-1: USB disconnect, device number 66 [ 372.477385][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 372.477403][ T30] audit: type=1400 audit(1747675835.582:1403): avc: denied { write } for pid=9944 comm="syz.4.963" name="001" dev="devtmpfs" ino=724 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 372.521263][ T30] audit: type=1400 audit(1747675835.582:1404): avc: denied { ioctl } for pid=9944 comm="syz.4.963" path="socket:[25069]" dev="sockfs" ino=25069 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 372.734040][ T30] audit: type=1400 audit(1747675835.592:1405): avc: denied { ioctl } for pid=9944 comm="syz.4.963" path="net:[4026533025]" dev="nsfs" ino=4026533025 ioctlcmd=0x940c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 372.759240][ T30] audit: type=1400 audit(1747675836.222:1406): avc: denied { read } for pid=9980 comm="syz.4.967" name="vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 372.791937][ T30] audit: type=1400 audit(1747675836.222:1407): avc: denied { open } for pid=9980 comm="syz.4.967" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 373.429017][ T30] audit: type=1400 audit(1747675836.222:1408): avc: denied { ioctl } for pid=9980 comm="syz.4.967" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 373.456735][ T30] audit: type=1400 audit(1747675836.442:1409): avc: denied { watch watch_reads } for pid=9982 comm="syz.0.968" path="/199" dev="tmpfs" ino=1082 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 373.457732][ T5863] usb 4-1: USB disconnect, device number 56 [ 373.481941][ T30] audit: type=1400 audit(1747675836.442:1410): avc: denied { write } for pid=9982 comm="syz.0.968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 373.517527][ T30] audit: type=1400 audit(1747675837.022:1411): avc: denied { read } for pid=9980 comm="syz.4.967" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 373.548778][ T30] audit: type=1400 audit(1747675837.022:1412): avc: denied { open } for pid=9980 comm="syz.4.967" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 373.867069][T10004] ptrace attach of "./syz-executor exec"[5822] was attempted by "./syz-executor exec"[10004] [ 374.057393][ T5863] usb 3-1: new full-speed USB device number 67 using dummy_hcd [ 374.303852][ T5863] usb 3-1: unable to get BOS descriptor or descriptor too short [ 374.333398][ T5863] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 374.342546][ T5863] usb 3-1: can't read configurations, error -71 [ 375.440583][T10023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.462257][T10023] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.846302][T10030] netlink: 4 bytes leftover after parsing attributes in process `syz.3.978'. [ 375.871259][T10030] netlink: 'syz.3.978': attribute type 4 has an invalid length. [ 376.554978][T10023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.566108][T10023] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.065391][T10046] FAULT_INJECTION: forcing a failure. [ 377.065391][T10046] name failslab, interval 1, probability 0, space 0, times 0 [ 377.078486][T10046] CPU: 0 UID: 0 PID: 10046 Comm: syz.3.984 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(full) [ 377.078509][T10046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 377.078519][T10046] Call Trace: [ 377.078525][T10046] [ 377.078532][T10046] dump_stack_lvl+0x16c/0x1f0 [ 377.078561][T10046] should_fail_ex+0x512/0x640 [ 377.078585][T10046] ? __kvmalloc_node_noprof+0x122/0x600 [ 377.078621][T10046] should_failslab+0xc2/0x120 [ 377.078641][T10046] __kvmalloc_node_noprof+0x135/0x600 [ 377.078668][T10046] ? __pfx_copy_from_sockptr_offset+0x10/0x10 [ 377.078692][T10046] ? xt_alloc_table_info+0x3e/0xa0 [ 377.078721][T10046] ? xt_alloc_table_info+0x3e/0xa0 [ 377.078741][T10046] xt_alloc_table_info+0x3e/0xa0 [ 377.078763][T10046] do_ipt_set_ctl+0x50e/0xae0 [ 377.078794][T10046] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 377.078818][T10046] ? lockdep_hardirqs_on+0x7c/0x110 [ 377.078845][T10046] ? rcu_is_watching+0x12/0xc0 [ 377.078865][T10046] ? irqentry_exit+0x3b/0x90 [ 377.078899][T10046] ? nf_setsockopt+0x4b/0xf0 [ 377.078924][T10046] nf_setsockopt+0x8d/0xf0 [ 377.078947][T10046] ip_setsockopt+0xcb/0xf0 [ 377.078976][T10046] tcp_setsockopt+0xa7/0x100 [ 377.078995][T10046] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 377.079020][T10046] do_sock_setsockopt+0x221/0x470 [ 377.079044][T10046] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 377.079082][T10046] __sys_setsockopt+0x1a0/0x230 [ 377.079104][T10046] __x64_sys_setsockopt+0xbd/0x160 [ 377.079121][T10046] ? do_syscall_64+0x91/0x260 [ 377.079145][T10046] ? lockdep_hardirqs_on+0x7c/0x110 [ 377.079168][T10046] do_syscall_64+0xcd/0x260 [ 377.079195][T10046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.079213][T10046] RIP: 0033:0x7f674fb8e969 [ 377.079227][T10046] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 377.079244][T10046] RSP: 002b:00007f6750a7d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 377.079260][T10046] RAX: ffffffffffffffda RBX: 00007f674fdb6160 RCX: 00007f674fb8e969 [ 377.079272][T10046] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000007 [ 377.079282][T10046] RBP: 00007f6750a7d090 R08: 0000000000000360 R09: 0000000000000000 [ 377.079292][T10046] R10: 0000200000000380 R11: 0000000000000246 R12: 0000000000000001 [ 377.079303][T10046] R13: 0000000000000000 R14: 00007f674fdb6160 R15: 00007fff98191b18 [ 377.079332][T10046] [ 377.316458][ C0] vkms_vblank_simulate: vblank timer overrun [ 377.865702][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 377.865718][ T30] audit: type=1400 audit(1747675841.492:1418): avc: denied { read } for pid=10055 comm="syz.3.988" name="event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 377.895136][ C0] vkms_vblank_simulate: vblank timer overrun [ 378.224109][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.608803][ T5930] usb 4-1: new full-speed USB device number 57 using dummy_hcd [ 379.337043][ T5930] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 379.761248][ T5930] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 379.850335][ T5930] usb 4-1: config 0 interface 0 has no altsetting 0 [ 379.857003][ T5930] usb 4-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 379.868562][ T5930] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.986360][ T30] audit: type=1400 audit(1747675843.622:1419): avc: denied { write } for pid=10066 comm="syz.2.992" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 380.012604][ T5930] usb 4-1: config 0 descriptor?? [ 380.026776][T10056] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 380.833166][ T5930] logitech 0003:046D:C24F.0006: unbalanced collection at end of report description [ 380.892001][ T5930] logitech 0003:046D:C24F.0006: parse failed [ 380.918948][ T5930] logitech 0003:046D:C24F.0006: probe with driver logitech failed with error -22 [ 383.445007][ T951] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 383.474470][ T5930] usb 4-1: USB disconnect, device number 57 [ 383.561902][T10088] netlink: 161716 bytes leftover after parsing attributes in process `syz.1.999'. [ 383.571229][T10088] netlink: zone id is out of range [ 383.576327][T10088] netlink: zone id is out of range [ 383.581462][T10088] netlink: zone id is out of range [ 383.586541][T10088] netlink: zone id is out of range [ 383.591654][T10088] netlink: zone id is out of range [ 383.596732][T10088] netlink: zone id is out of range [ 383.601852][T10088] netlink: zone id is out of range [ 383.606947][T10088] netlink: zone id is out of range [ 383.612045][T10088] netlink: zone id is out of range [ 383.617136][T10088] netlink: zone id is out of range [ 383.623053][ T951] usb 3-1: device descriptor read/64, error -71 [ 383.679905][ T30] audit: type=1400 audit(1747675847.292:1420): avc: denied { ioctl } for pid=10091 comm="syz.3.1000" path="socket:[24245]" dev="sockfs" ino=24245 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 383.738681][T10095] netlink: 'syz.3.1000': attribute type 1 has an invalid length. [ 383.747138][T10095] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1000'. [ 383.758983][T10095] netlink: 'syz.3.1000': attribute type 1 has an invalid length. [ 383.767703][T10095] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1000'. [ 383.860393][ T951] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 384.020412][ T951] usb 3-1: device descriptor read/64, error -71 [ 384.141757][ T951] usb usb3-port1: attempt power cycle [ 384.342978][ T30] audit: type=1400 audit(1747675847.982:1421): avc: denied { create } for pid=10099 comm="syz.4.1003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 384.446417][ T30] audit: type=1400 audit(1747675848.082:1422): avc: denied { write } for pid=10104 comm="syz.2.1005" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 386.346714][ T30] audit: type=1400 audit(1747675849.982:1423): avc: denied { ioctl } for pid=10119 comm="syz.2.1009" path="socket:[25441]" dev="sockfs" ino=25441 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 387.455369][T10135] loop1: detected capacity change from 0 to 7 [ 387.472442][T10122] 8021q: adding VLAN 0 to HW filter on device bond2 [ 387.482514][T10135] Dev loop1: unable to read RDB block 7 [ 387.490501][T10135] loop1: AHDI p4 [ 387.632015][ T30] audit: type=1400 audit(1747675851.152:1424): avc: denied { create } for pid=10130 comm="syz.0.1013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 387.918155][ T5863] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 387.935480][T10135] loop1: partition table partially beyond EOD, truncated [ 387.961900][ T30] audit: type=1400 audit(1747675851.152:1425): avc: denied { write } for pid=10130 comm="syz.0.1013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 388.095574][ T5863] usb 3-1: New USB device found, idVendor=0545, idProduct=800d, bcdDevice= 3.0a [ 388.107699][ T5863] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.133499][ T5863] usb 3-1: config 0 descriptor?? [ 388.212670][ T5863] gspca_main: xirlink-cit-2.14.0 probing 0545:800d [ 388.243517][ T5863] input: xirlink-cit as /devices/platform/dummy_hcd.2/usb3/3-1/input/input25 [ 388.257786][ T30] audit: type=1400 audit(1747675851.892:1426): avc: denied { read } for pid=5169 comm="acpid" name="event4" dev="devtmpfs" ino=3238 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 388.351467][ T30] audit: type=1400 audit(1747675851.892:1427): avc: denied { open } for pid=5169 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3238 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 388.375650][ T30] audit: type=1400 audit(1747675851.892:1428): avc: denied { ioctl } for pid=5169 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3238 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 388.788741][T10147] loop2: detected capacity change from 0 to 7 [ 388.797263][ T5997] Dev loop2: unable to read RDB block 7 [ 388.803377][ T5997] loop2: unable to read partition table [ 388.809348][ T5997] loop2: partition table beyond EOD, truncated [ 388.817106][T10122] bond2 (unregistering): Released all slaves [ 388.825590][T10147] Dev loop2: unable to read RDB block 7 [ 388.831252][T10147] loop2: unable to read partition table [ 388.837179][T10147] loop2: partition table beyond EOD, truncated [ 388.844200][T10147] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 389.252420][ T30] audit: type=1400 audit(1747675852.872:1429): avc: denied { read } for pid=10152 comm="syz.3.1017" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 389.277663][ T30] audit: type=1400 audit(1747675852.872:1430): avc: denied { open } for pid=10152 comm="syz.3.1017" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 389.715328][ T30] audit: type=1326 audit(1747675853.352:1431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10159 comm="syz.1.1019" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd6d718e969 code=0x0 [ 389.928660][ T30] audit: type=1400 audit(1747675853.562:1432): avc: denied { getopt } for pid=10164 comm="syz.3.1021" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 390.053231][T10167] Cannot find del_set index 1 as target [ 390.109648][ T5863] usb 3-1: USB disconnect, device number 72 [ 390.890253][ T30] audit: type=1400 audit(1747675854.522:1433): avc: denied { mount } for pid=10172 comm="syz.3.1024" name="/" dev="autofs" ino=25586 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 391.138873][ T30] audit: type=1400 audit(1747675854.762:1434): avc: denied { write } for pid=10172 comm="syz.3.1024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 391.590683][ T5863] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 391.635812][ T30] audit: type=1400 audit(1747675855.272:1435): avc: denied { mount } for pid=10191 comm="syz.4.1029" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 391.670634][T10193] netlink: 'syz.0.1028': attribute type 21 has an invalid length. [ 391.678621][T10193] netlink: 'syz.0.1028': attribute type 1 has an invalid length. [ 391.687601][T10193] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1028'. [ 391.780484][ T30] audit: type=1400 audit(1747675855.422:1436): avc: denied { unmount } for pid=5822 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 391.800501][ T5863] usb 3-1: Using ep0 maxpacket: 8 [ 391.801849][ T5863] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 391.832496][ T5863] usb 3-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 391.852729][ T5863] usb 3-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 391.867861][ T5863] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.909777][ T5863] usb 3-1: Product: syz [ 391.993559][ T5863] usb 3-1: Manufacturer: syz [ 392.483582][ T30] audit: type=1400 audit(1747675856.122:1437): avc: denied { create } for pid=10197 comm="syz.0.1031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 392.512167][ T5863] usb 3-1: SerialNumber: syz [ 392.833843][ T30] audit: type=1400 audit(1747675856.132:1438): avc: denied { bind } for pid=10202 comm="syz.3.1032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 393.017908][T10215] input: syz1 as /devices/virtual/input/input26 [ 395.479629][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 395.479652][ T30] audit: type=1400 audit(1747675859.112:1444): avc: denied { write } for pid=10252 comm="syz.3.1045" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 396.119469][ T5863] usb 3-1: USB disconnect, device number 73 [ 396.151484][ T30] audit: type=1400 audit(1747675859.782:1445): avc: denied { create } for pid=10254 comm="syz.4.1046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 396.204502][ T30] audit: type=1400 audit(1747675859.842:1446): avc: denied { map } for pid=10259 comm="syz.3.1048" path="socket:[26767]" dev="sockfs" ino=26767 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 396.229216][ T30] audit: type=1400 audit(1747675859.842:1447): avc: denied { read } for pid=10259 comm="syz.3.1048" path="socket:[26767]" dev="sockfs" ino=26767 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 396.256740][ T30] audit: type=1400 audit(1747675859.842:1448): avc: denied { watch watch_reads } for pid=10259 comm="syz.3.1048" path="pipe:[4595]" dev="pipefs" ino=4595 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 396.834616][ T30] audit: type=1400 audit(1747675860.472:1449): avc: denied { connect } for pid=10272 comm="syz.2.1053" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 396.881742][ T30] audit: type=1400 audit(1747675860.472:1450): avc: denied { connect } for pid=10272 comm="syz.2.1053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 397.070485][ T951] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 397.300353][ T951] usb 3-1: device descriptor read/64, error -71 [ 397.923141][ T951] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 398.180280][ T951] usb 3-1: device descriptor read/64, error -71 [ 398.336402][ T951] usb usb3-port1: attempt power cycle [ 398.462233][T10301] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 398.468978][T10301] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 398.482355][T10301] vhci_hcd vhci_hcd.0: Device attached [ 398.664949][ T5930] vhci_hcd: vhci_device speed not set [ 398.706279][ T30] audit: type=1400 audit(1747675862.342:1451): avc: denied { execheap } for pid=10305 comm="syz.3.1062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 398.728770][ T30] audit: type=1400 audit(1747675862.362:1452): avc: denied { write } for pid=10305 comm="syz.3.1062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 398.740288][ T951] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 398.757445][ T5930] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 398.780726][ T951] usb 3-1: device descriptor read/8, error -71 [ 398.820470][T10307] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1062'. [ 399.020355][ T951] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 399.061916][ T951] usb 3-1: device descriptor read/8, error -71 [ 399.182812][ T951] usb usb3-port1: unable to enumerate USB device [ 399.241598][T10314] No source specified [ 399.425552][ T30] audit: type=1400 audit(1747675863.062:1453): avc: denied { execute } for pid=10316 comm="syz.0.1065" path="/dev/snd/seq" dev="devtmpfs" ino=1278 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 400.831104][ T5863] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 400.854960][ T30] audit: type=1400 audit(1747675864.492:1454): avc: denied { write } for pid=10332 comm="syz.2.1071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 400.990281][ T5863] usb 4-1: Using ep0 maxpacket: 16 [ 401.023079][ T5863] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 401.034074][ T5863] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 401.045243][ T5863] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 401.055057][ T5863] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 401.064790][ T5863] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 401.122744][T10338] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1072'. [ 401.132665][T10338] tipc: Can't bind to reserved service type 2 [ 401.213791][ T5863] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 401.224063][ T5863] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 401.234327][ T5863] usb 4-1: Manufacturer: syz [ 401.241195][ T5863] usb 4-1: config 0 descriptor?? [ 401.452361][T10302] vhci_hcd: connection reset by peer [ 401.466994][ T9964] vhci_hcd: stop threads [ 401.472862][ T9964] vhci_hcd: release socket [ 401.478550][ T9964] vhci_hcd: disconnect device [ 401.520442][ T5863] rc_core: IR keymap rc-hauppauge not found [ 401.530194][ T5863] Registered IR keymap rc-empty [ 401.536909][ T5863] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 401.565693][ T5863] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 401.591169][ T5863] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 401.605188][ T5863] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input28 [ 401.625108][ T5863] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 401.650376][ T5863] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 401.670435][ T5863] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 402.400372][ T5863] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 402.457595][ T5863] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 402.511377][ T5863] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 403.191859][ T5863] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 403.210357][ T5863] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 403.230397][ T5863] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 403.272070][ T5863] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 403.306350][ T5863] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 403.347734][ T5863] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 403.560047][ T5863] usb 4-1: USB disconnect, device number 58 [ 404.310295][ T5930] vhci_hcd: vhci_device speed not set [ 405.170837][ T30] audit: type=1400 audit(1747675868.701:1455): avc: denied { setopt } for pid=10387 comm="syz.1.1085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 407.372222][T10410] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1091'. [ 407.397937][T10412] loop2: detected capacity change from 0 to 7 [ 407.412922][T10412] Dev loop2: unable to read RDB block 7 [ 407.418585][T10412] loop2: unable to read partition table [ 407.424775][T10412] loop2: partition table beyond EOD, truncated [ 407.433084][T10412] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 407.544864][T10420] block nbd3: shutting down sockets [ 407.870367][ T5863] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 409.488436][ T30] audit: type=1400 audit(1747675873.121:1456): avc: denied { ioctl } for pid=10428 comm="syz.4.1098" path="socket:[27038]" dev="sockfs" ino=27038 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 409.516401][T10429] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1098'. [ 409.747828][ T5863] usb 3-1: Using ep0 maxpacket: 32 [ 409.811650][T10444] xt_TPROXY: Can be used only with -p tcp or -p udp [ 409.825172][T10444] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1100'. [ 409.834622][T10444] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1100'. [ 409.985768][T10448] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1102'. [ 410.054020][T10453] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1103'. [ 410.245985][ T30] audit: type=1400 audit(1747675873.871:1457): avc: denied { create } for pid=10456 comm="syz.1.1106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 410.277050][T10461] loop2: detected capacity change from 0 to 7 [ 410.285382][T10461] Dev loop2: unable to read RDB block 7 [ 410.293948][T10461] loop2: unable to read partition table [ 410.301943][T10461] loop2: partition table beyond EOD, truncated [ 410.321111][T10461] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 410.643009][T10472] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1110'. [ 410.659640][T10472] veth2: entered promiscuous mode [ 410.665523][T10472] veth2: entered allmulticast mode [ 410.778932][ T30] audit: type=1400 audit(1747675874.411:1458): avc: denied { append } for pid=10476 comm="syz.1.1112" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 411.014473][T10422] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 411.399815][ T5863] usb 3-1: unable to get BOS descriptor or descriptor too short [ 411.414361][ T5863] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 411.583145][ T5863] usb 3-1: can't read configurations, error -71 [ 411.604721][T10490] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1115'. [ 411.632408][T10490] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1115'. [ 412.180915][ T30] audit: type=1400 audit(1747675875.801:1459): avc: denied { write } for pid=10489 comm="syz.2.1115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 412.212772][T10500] loop2: detected capacity change from 0 to 7 [ 412.225448][T10500] Dev loop2: unable to read RDB block 7 [ 412.231742][T10500] loop2: unable to read partition table [ 412.246052][T10500] loop2: partition table beyond EOD, truncated [ 412.281996][T10500] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 412.522447][ T10] usb 4-1: new full-speed USB device number 59 using dummy_hcd [ 413.043735][ T10] usb 4-1: device descriptor read/64, error -71 [ 413.644740][ T30] audit: type=1400 audit(1747675877.281:1460): avc: denied { watch watch_reads } for pid=10520 comm="syz.0.1124" path="/dev/urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 413.711725][ T10] usb 4-1: new full-speed USB device number 60 using dummy_hcd [ 413.785986][ T30] audit: type=1400 audit(1747675877.351:1461): avc: denied { wake_alarm } for pid=10524 comm="syz.4.1125" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 413.924735][ T10] usb 4-1: device descriptor read/64, error -71 [ 414.163672][ T10] usb usb4-port1: attempt power cycle [ 414.523438][T10540] wg1: entered promiscuous mode [ 414.530270][T10540] wg1: entered allmulticast mode [ 414.557571][ T10] usb 4-1: new full-speed USB device number 61 using dummy_hcd [ 414.752573][ T10] usb 4-1: device descriptor read/8, error -71 [ 414.991272][ T10] usb 4-1: new full-speed USB device number 62 using dummy_hcd [ 415.020893][ T10] usb 4-1: device descriptor read/8, error -71 [ 415.395702][ T10] usb usb4-port1: unable to enumerate USB device [ 416.451185][ T30] audit: type=1400 audit(1747675880.081:1462): avc: denied { mounton } for pid=10548 comm="syz.2.1133" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 416.475349][T10552] ntfs3(nullb0): Primary boot signature is not NTFS. [ 416.501811][T10552] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 416.520984][T10552] ntfs3(nullb0): Primary boot signature is not NTFS. [ 416.528356][T10552] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 416.550088][T10552] ntfs3(nullb0): Primary boot signature is not NTFS. [ 416.559089][T10552] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 416.568692][T10552] ntfs3(nullb0): Primary boot signature is not NTFS. [ 416.581643][T10552] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 416.592477][T10552] ntfs3(nullb0): Primary boot signature is not NTFS. [ 416.603580][T10552] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 417.037577][ T30] audit: type=1400 audit(1747675880.671:1463): avc: denied { getopt } for pid=10562 comm="syz.3.1137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 418.076132][T10580] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1140'. [ 419.260326][ T5823] Bluetooth: hci4: command 0x0406 tx timeout [ 419.430893][ T951] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 419.730601][ T951] usb 3-1: Using ep0 maxpacket: 32 [ 419.738333][ T951] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 419.749701][ T951] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 419.759691][ T951] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 419.769197][ T951] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.779936][ T951] usb 3-1: config 0 descriptor?? [ 419.790288][ T10] usb 4-1: new full-speed USB device number 63 using dummy_hcd [ 419.952809][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 419.963104][ T10] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 419.971334][ T10] usb 4-1: can't read configurations, error -71 [ 420.207778][ T951] savu 0003:1E7D:2D5A.0007: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 420.576548][ T30] audit: type=1400 audit(1747675884.211:1464): avc: denied { execute } for pid=10605 comm="syz.3.1147" path="/204/cpu.stat" dev="tmpfs" ino=1106 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 420.993458][ T30] audit: type=1400 audit(1747675884.611:1465): avc: denied { read } for pid=10609 comm="syz.4.1149" name="/" dev="configfs" ino=1211 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 421.053904][ T30] audit: type=1400 audit(1747675884.611:1466): avc: denied { open } for pid=10609 comm="syz.4.1149" path="/" dev="configfs" ino=1211 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 421.076039][ C1] vkms_vblank_simulate: vblank timer overrun [ 421.619550][T10626] wg1: entered promiscuous mode [ 421.624501][T10626] wg1: entered allmulticast mode [ 421.773135][T10590] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 421.779322][T10590] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 421.794912][T10590] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 421.801407][T10590] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 421.822823][T10590] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 421.828773][T10590] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 421.851299][T10590] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 421.857221][T10590] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 422.059707][ T951] usb 3-1: USB disconnect, device number 80 [ 422.553092][T10643] loop2: detected capacity change from 0 to 7 [ 422.563174][T10632] Dev loop2: unable to read RDB block 7 [ 422.568798][T10632] loop2: unable to read partition table [ 422.577201][T10632] loop2: partition table beyond EOD, truncated [ 422.587652][T10643] Dev loop2: unable to read RDB block 7 [ 422.593590][T10643] loop2: unable to read partition table [ 422.599510][T10643] loop2: partition table beyond EOD, truncated [ 422.605744][T10643] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 422.700453][ T951] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 423.020862][ T951] usb 4-1: Using ep0 maxpacket: 8 [ 423.037230][ T951] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 423.049887][ T951] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.083340][ T951] usb 4-1: config 0 descriptor?? [ 423.117333][ T30] audit: type=1400 audit(1747675886.751:1467): avc: denied { read } for pid=10656 comm="syz.2.1161" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 423.145941][ T30] audit: type=1400 audit(1747675886.751:1468): avc: denied { open } for pid=10656 comm="syz.2.1161" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 423.185355][ T30] audit: type=1400 audit(1747675886.821:1469): avc: denied { ioctl } for pid=10661 comm="syz.0.1163" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 423.193722][T10662] binder_alloc: 10661: binder_alloc_buf, no vma [ 423.248247][ T30] audit: type=1400 audit(1747675886.821:1470): avc: denied { set_context_mgr } for pid=10661 comm="syz.0.1163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 423.323134][ T30] audit: type=1400 audit(1747675886.831:1471): avc: denied { map } for pid=10661 comm="syz.0.1163" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 423.372683][ T951] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 423.387472][ T30] audit: type=1400 audit(1747675886.831:1472): avc: denied { call } for pid=10661 comm="syz.0.1163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 423.395980][ T951] asix 4-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 423.417198][T10669] Cannot find del_set index 4 as target [ 423.487641][ T951] asix 4-1:0.0: probe with driver asix failed with error -71 [ 423.541223][ T951] usb 4-1: USB disconnect, device number 65 [ 424.383877][T10684] loop2: detected capacity change from 0 to 7 [ 424.393524][T10684] Dev loop2: unable to read RDB block 7 [ 424.411037][T10684] loop2: unable to read partition table [ 424.416836][T10684] loop2: partition table beyond EOD, truncated [ 424.440499][T10684] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 424.453943][ T30] audit: type=1400 audit(1747675888.091:1473): avc: denied { setopt } for pid=10685 comm="syz.4.1170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 529.600175][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 529.607139][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P10658/1:b..l P10690/1:b..l [ 529.616799][ C1] rcu: (detected by 1, t=10502 jiffies, g=34033, q=183 ncpus=2) [ 529.624508][ C1] task:syz-executor state:R running task stack:28872 pid:10690 tgid:10690 ppid:5807 task_flags:0x400040 flags:0x00000000 [ 529.638434][ C1] Call Trace: [ 529.641720][ C1] [ 529.644658][ C1] __schedule+0x116f/0x5de0 [ 529.649173][ C1] ? stack_trace_save+0x8e/0xc0 [ 529.654037][ C1] ? __lock_acquire+0x5ca/0x1ba0 [ 529.658989][ C1] ? __pfx___schedule+0x10/0x10 [ 529.663848][ C1] ? __lock_acquire+0x5ca/0x1ba0 [ 529.668802][ C1] ? mark_held_locks+0x49/0x80 [ 529.673571][ C1] preempt_schedule_irq+0x51/0x90 [ 529.678598][ C1] irqentry_exit+0x36/0x90 [ 529.683015][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 529.688991][ C1] RIP: 0010:unwind_next_frame+0x611/0x20a0 [ 529.694801][ C1] Code: 05 0f 85 cf 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 8b 14 24 48 c1 ea 03 80 3c 02 00 0f 85 0f 16 00 00 48 89 c8 4d 8b 7d 38 <48> ba 00 00 00 00 00 fc ff df 48 c1 e8 03 0f b6 34 10 48 8d 41 01 [ 529.714415][ C1] RSP: 0018:ffffc9000c327628 EFLAGS: 00000246 [ 529.720489][ C1] RAX: ffffffff915103c8 RBX: 0000000000000001 RCX: ffffffff915103c8 [ 529.728459][ C1] RDX: 1ffff92001864eda RSI: 0000000000000001 RDI: ffffffff90bb4698 [ 529.736429][ C1] RBP: ffffc9000c3276e0 R08: ffffffff915103cc R09: 0000000000000000 [ 529.744395][ C1] R10: 0000000000000003 R11: 0000000000038f92 R12: ffffc9000c3276e8 [ 529.752359][ C1] R13: ffffc9000c327698 R14: 0000000000000005 R15: ffffc9000c327b58 [ 529.760338][ C1] ? unwind_next_frame+0x2ec/0x20a0 [ 529.765537][ C1] ? tomoyo_path_perm+0x274/0x460 [ 529.770561][ C1] ? bpf_ksym_find+0x127/0x1c0 [ 529.775321][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 529.781477][ C1] arch_stack_walk+0x94/0x100 [ 529.786159][ C1] ? tomoyo_path_perm+0x274/0x460 [ 529.791182][ C1] ? tomoyo_encode2+0x100/0x3e0 [ 529.796033][ C1] stack_trace_save+0x8e/0xc0 [ 529.800706][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 529.806086][ C1] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 529.811806][ C1] ? stack_trace_save+0x8e/0xc0 [ 529.816657][ C1] kasan_save_stack+0x33/0x60 [ 529.821326][ C1] ? kasan_save_stack+0x33/0x60 [ 529.826165][ C1] ? kasan_save_track+0x14/0x30 [ 529.831006][ C1] ? __kasan_kmalloc+0xaa/0xb0 [ 529.835770][ C1] ? __kmalloc_noprof+0x223/0x510 [ 529.840785][ C1] ? tomoyo_encode2+0x100/0x3e0 [ 529.845636][ C1] ? tomoyo_encode+0x29/0x50 [ 529.850223][ C1] ? tomoyo_realpath_from_path+0x18f/0x6e0 [ 529.856029][ C1] ? tomoyo_path_perm+0x274/0x460 [ 529.861085][ C1] kasan_save_track+0x14/0x30 [ 529.865757][ C1] __kasan_kmalloc+0xaa/0xb0 [ 529.870349][ C1] __kmalloc_noprof+0x223/0x510 [ 529.875196][ C1] ? d_absolute_path+0x136/0x1a0 [ 529.880134][ C1] tomoyo_encode2+0x100/0x3e0 [ 529.884814][ C1] tomoyo_encode+0x29/0x50 [ 529.889229][ C1] tomoyo_realpath_from_path+0x18f/0x6e0 [ 529.894871][ C1] tomoyo_path_perm+0x274/0x460 [ 529.899717][ C1] ? tomoyo_path_perm+0x260/0x460 [ 529.904742][ C1] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 529.910110][ C1] ? __lock_acquire+0xaa4/0x1ba0 [ 529.915061][ C1] ? d_add+0x47a/0x780 [ 529.919141][ C1] ? __pfx_current_check_access_path+0x10/0x10 [ 529.925291][ C1] ? lookup_one_qstr_excl_raw.part.0+0xf9/0x160 [ 529.931531][ C1] ? lookup_dcache+0x66/0x170 [ 529.936210][ C1] tomoyo_path_symlink+0x97/0xe0 [ 529.941141][ C1] ? __pfx_tomoyo_path_symlink+0x10/0x10 [ 529.946765][ C1] ? find_held_lock+0x2b/0x80 [ 529.951437][ C1] ? __might_fault+0xe3/0x190 [ 529.956115][ C1] security_path_symlink+0x152/0x2e0 [ 529.961402][ C1] do_symlinkat+0x10d/0x310 [ 529.965904][ C1] ? __pfx_do_symlinkat+0x10/0x10 [ 529.970923][ C1] ? getname_flags.part.0+0x1c5/0x550 [ 529.976299][ C1] __x64_sys_symlinkat+0x93/0xc0 [ 529.981231][ C1] do_syscall_64+0xcd/0x260 [ 529.985738][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.991624][ C1] RIP: 0033:0x7fd6d718dee7 [ 529.996029][ C1] RSP: 002b:00007ffd3c5d2668 EFLAGS: 00000202 ORIG_RAX: 000000000000010a [ 530.004434][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd6d718dee7 [ 530.012396][ C1] RDX: 00007fd6d7212308 RSI: 00000000ffffff9c RDI: 00007ffd3c5d2700 [ 530.020358][ C1] RBP: 00007ffd3c5d26ac R08: 0000000000000017 R09: 00007ffd3c5d23b7 [ 530.028319][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 00000000000000fc [ 530.036284][ C1] R13: 00000000000927c0 R14: 0000000000067a1b R15: 00007ffd3c5d2700 [ 530.044260][ C1] [ 530.047272][ C1] task:syz.2.1161 state:R running task stack:26312 pid:10658 tgid:10656 ppid:5808 task_flags:0x40044c flags:0x00004002 [ 530.060758][ C1] Call Trace: [ 530.064028][ C1] [ 530.066956][ C1] __schedule+0x116f/0x5de0 [ 530.071469][ C1] ? __lock_acquire+0x4f0/0x1ba0 [ 530.076419][ C1] ? __pfx___schedule+0x10/0x10 [ 530.081274][ C1] ? mark_held_locks+0x49/0x80 [ 530.086041][ C1] ? irqentry_exit+0x3b/0x90 [ 530.090634][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 530.095832][ C1] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 530.101897][ C1] preempt_schedule_notrace+0x62/0xe0 [ 530.107270][ C1] preempt_schedule_notrace_thunk+0x16/0x30 [ 530.113165][ C1] rcu_is_watching+0x8e/0xc0 [ 530.117751][ C1] unwind_next_frame+0xa92/0x20a0 [ 530.122771][ C1] ? unmap_vmas+0x22c/0x490 [ 530.127275][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 530.133427][ C1] arch_stack_walk+0x94/0x100 [ 530.138104][ C1] ? exit_mmap+0x1b9/0xb90 [ 530.142524][ C1] stack_trace_save+0x8e/0xc0 [ 530.147200][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 530.152568][ C1] ? __lock_acquire+0x5ca/0x1ba0 [ 530.157511][ C1] save_stack+0x160/0x1f0 [ 530.161843][ C1] ? __pfx_save_stack+0x10/0x10 [ 530.166693][ C1] ? free_unref_folios+0x999/0x1630 [ 530.171892][ C1] ? folios_put_refs+0x56f/0x740 [ 530.176826][ C1] ? free_pages_and_swap_cache+0x245/0x4a0 [ 530.182634][ C1] ? __tlb_batch_free_encoded_pages+0xf9/0x290 [ 530.188786][ C1] ? tlb_flush_mmu+0xe9/0x590 [ 530.193460][ C1] ? unmap_page_range+0x1ed6/0x4390 [ 530.198654][ C1] ? unmap_single_vma+0x194/0x2a0 [ 530.203671][ C1] ? unmap_vmas+0x22c/0x490 [ 530.208179][ C1] ? page_ext_put+0x3e/0xd0 [ 530.212679][ C1] __reset_page_owner+0x84/0x1a0 [ 530.217610][ C1] free_unref_folios+0x999/0x1630 [ 530.222641][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 530.228449][ C1] folios_put_refs+0x56f/0x740 [ 530.233213][ C1] ? __pfx_folios_put_refs+0x10/0x10 [ 530.238498][ C1] ? trace_mm_page_alloc+0x11f/0x1a0 [ 530.243784][ C1] free_pages_and_swap_cache+0x245/0x4a0 [ 530.249419][ C1] ? __pfx_free_pages_and_swap_cache+0x10/0x10 [ 530.255610][ C1] ? __folio_rmap_sanity_checks+0x1a8/0x650 [ 530.261505][ C1] ? __pfx___might_resched+0x10/0x10 [ 530.266789][ C1] ? folio_remove_rmap_ptes+0x138/0x970 [ 530.272341][ C1] __tlb_batch_free_encoded_pages+0xf9/0x290 [ 530.278322][ C1] ? find_held_lock+0x2b/0x80 [ 530.282999][ C1] tlb_flush_mmu+0xe9/0x590 [ 530.287506][ C1] unmap_page_range+0x1ed6/0x4390 [ 530.292553][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 530.297926][ C1] ? mas_next_slot+0x12d3/0x21b0 [ 530.302874][ C1] ? uprobe_munmap+0x93/0x5c0 [ 530.307553][ C1] unmap_single_vma+0x194/0x2a0 [ 530.312406][ C1] unmap_vmas+0x22c/0x490 [ 530.316738][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 530.321592][ C1] ? mas_next_slot+0x12d3/0x21b0 [ 530.326545][ C1] exit_mmap+0x1b9/0xb90 [ 530.330792][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 530.335562][ C1] ? __lock_acquire+0xaa4/0x1ba0 [ 530.340520][ C1] __mmput+0x12a/0x410 [ 530.344589][ C1] mmput+0x62/0x70 [ 530.348308][ C1] do_exit+0x9d1/0x2c30 [ 530.352466][ C1] ? lock_acquire+0x179/0x350 [ 530.357144][ C1] ? find_held_lock+0x2b/0x80 [ 530.361823][ C1] ? __pfx_do_exit+0x10/0x10 [ 530.366415][ C1] ? find_held_lock+0x2b/0x80 [ 530.371096][ C1] do_group_exit+0xd3/0x2a0 [ 530.375600][ C1] get_signal+0x2673/0x26d0 [ 530.380110][ C1] ? __pfx_do_recvmmsg+0x10/0x10 [ 530.385043][ C1] ? selinux_netlbl_socket_connect+0x30/0x40 [ 530.391024][ C1] ? __pfx_get_signal+0x10/0x10 [ 530.395877][ C1] ? do_futex+0x122/0x350 [ 530.400213][ C1] arch_do_signal_or_restart+0x8f/0x7d0 [ 530.405760][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 530.411923][ C1] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 530.417465][ C1] ? rcu_is_watching+0x12/0xc0 [ 530.422232][ C1] syscall_exit_to_user_mode+0x150/0x2a0 [ 530.427866][ C1] do_syscall_64+0xda/0x260 [ 530.432371][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.438256][ C1] RIP: 0033:0x7f30a298e969 [ 530.442664][ C1] RSP: 002b:00007f30a37ad038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 530.451067][ C1] RAX: 0000000000010106 RBX: 00007f30a2bb6080 RCX: 00007f30a298e969 [ 530.459033][ C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000005 [ 530.466997][ C1] RBP: 00007f30a2a10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 530.474961][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 530.482940][ C1] R13: 0000000000000000 R14: 00007f30a2bb6080 R15: 00007ffe2871be58 [ 530.490928][ C1] [ 530.493938][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 10501 jiffies! g34033 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 530.506259][ C1] rcu: Possible timer handling issue on cpu=0 timer-softirq=25506 [ 530.514141][ C1] rcu: rcu_preempt kthread starved for 10502 jiffies! g34033 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 530.525509][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 530.535469][ C1] rcu: RCU grace-period kthread stack dump: [ 530.541344][ C1] task:rcu_preempt state:I stack:27704 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 530.553265][ C1] Call Trace: [ 530.556537][ C1] [ 530.559468][ C1] __schedule+0x116f/0x5de0 [ 530.563975][ C1] ? find_held_lock+0x2b/0x80 [ 530.568657][ C1] ? __lock_acquire+0x5ca/0x1ba0 [ 530.573600][ C1] ? __pfx___schedule+0x10/0x10 [ 530.578456][ C1] ? find_held_lock+0x2b/0x80 [ 530.583129][ C1] ? schedule+0x2d7/0x3a0 [ 530.587457][ C1] schedule+0xe7/0x3a0 [ 530.591525][ C1] schedule_timeout+0x123/0x290 [ 530.596371][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 530.601737][ C1] ? __pfx_process_timeout+0x10/0x10 [ 530.607025][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 530.612828][ C1] ? prepare_to_swait_event+0xf5/0x480 [ 530.618293][ C1] rcu_gp_fqs_loop+0x1ea/0xb00 [ 530.623064][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 530.628351][ C1] ? rcu_gp_init+0xc76/0x15a0 [ 530.633033][ C1] ? rcu_gp_cleanup+0x7c1/0xd90 [ 530.637891][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 530.643700][ C1] rcu_gp_kthread+0x270/0x380 [ 530.648378][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 530.653575][ C1] ? rcu_is_watching+0x12/0xc0 [ 530.658333][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 530.663535][ C1] ? __kthread_parkme+0x19e/0x250 [ 530.668564][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 530.673761][ C1] kthread+0x3c2/0x780 [ 530.677823][ C1] ? __pfx_kthread+0x10/0x10 [ 530.682406][ C1] ? __pfx_kthread+0x10/0x10 [ 530.686993][ C1] ? __pfx_kthread+0x10/0x10 [ 530.691581][ C1] ? __pfx_kthread+0x10/0x10 [ 530.696163][ C1] ? rcu_is_watching+0x12/0xc0 [ 530.700924][ C1] ? __pfx_kthread+0x10/0x10 [ 530.705511][ C1] ret_from_fork+0x45/0x80 [ 530.709920][ C1] ? __pfx_kthread+0x10/0x10 [ 530.714502][ C1] ret_from_fork_asm+0x1a/0x30 [ 530.719277][ C1] [ 530.722285][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 530.728592][ C1] Sending NMI from CPU 1 to CPUs 0: [ 530.733788][ C0] NMI backtrace for cpu 0 [ 530.733800][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(full) [ 530.733815][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 530.733823][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x66/0x70 [ 530.733838][ C0] Code: 82 18 16 00 00 83 f8 02 75 20 48 8b 8a 20 16 00 00 8b 92 1c 16 00 00 48 8b 01 48 83 c0 01 48 39 d0 73 07 48 89 01 48 89 34 c1 85 d2 b4 09 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 [ 530.733851][ C0] RSP: 0018:ffffc90000007df8 EFLAGS: 00000046 [ 530.733862][ C0] RAX: 0000000080010002 RBX: ffff8880599ad340 RCX: ffffffff8b695a58 [ 530.733871][ C0] RDX: ffffffff8e097740 RSI: ffffffff8b695a66 RDI: 0000000000000006 [ 530.733879][ C0] RBP: ffff8880599ad340 R08: 0000000000000006 R09: ffff8880599ad340 [ 530.733888][ C0] R10: ffff8880599ad340 R11: ffffffff9acfe850 R12: ffff8880b8427840 [ 530.733896][ C0] R13: 0000000000000000 R14: ffff8880599ad340 R15: 0000000000000001 [ 530.733905][ C0] FS: 0000000000000000(0000) GS:ffff8881249da000(0000) knlGS:0000000000000000 [ 530.733918][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 530.733927][ C0] CR2: 0000001b2ed1fffc CR3: 000000001bbd9000 CR4: 00000000003526f0 [ 530.733935][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 530.733943][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 530.733951][ C0] Call Trace: [ 530.733957][ C0] [ 530.733961][ C0] timerqueue_add+0x56/0x330 [ 530.733976][ C0] __hrtimer_run_queues+0x8ff/0xad0 [ 530.733994][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 530.734007][ C0] ? read_tsc+0x9/0x20 [ 530.734028][ C0] hrtimer_interrupt+0x397/0x8e0 [ 530.734047][ C0] __sysvec_apic_timer_interrupt+0x108/0x3f0 [ 530.734063][ C0] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 530.734080][ C0] [ 530.734084][ C0] [ 530.734089][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 530.734104][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 530.734120][ C0] Code: f5 61 02 e9 53 fc 02 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 c0 1c 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 530.734133][ C0] RSP: 0018:ffffffff8e007e10 EFLAGS: 000002c6 [ 530.734142][ C0] RAX: 00000000015a2b3f RBX: 0000000000000000 RCX: ffffffff8b6d3419 [ 530.734150][ C0] RDX: 0000000000000000 RSI: ffffffff8dbe41e5 RDI: ffffffff8bf4a220 [ 530.734159][ C0] RBP: fffffbfff1c12ee8 R08: 0000000000000001 R09: ffffed10170865bd [ 530.734167][ C0] R10: ffff8880b8432deb R11: 0000000000000000 R12: 0000000000000000 [ 530.734175][ C0] R13: ffffffff8e097740 R14: ffffffff90852e10 R15: 0000000000000000 [ 530.734186][ C0] ? ct_kernel_exit+0x139/0x190 [ 530.734206][ C0] default_idle+0x13/0x20 [ 530.734217][ C0] default_idle_call+0x6d/0xb0 [ 530.734229][ C0] do_idle+0x391/0x510 [ 530.734245][ C0] ? __pfx_do_idle+0x10/0x10 [ 530.734260][ C0] ? trace_sched_exit_tp+0x31/0x130 [ 530.734280][ C0] cpu_startup_entry+0x4f/0x60 [ 530.734296][ C0] rest_init+0x16b/0x2b0 [ 530.734308][ C0] ? acpi_subsystem_init+0x133/0x180 [ 530.734326][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 530.734339][ C0] start_kernel+0x3e9/0x4d0 [ 530.734352][ C0] x86_64_start_reservations+0x18/0x30 [ 530.734364][ C0] x86_64_start_kernel+0xb0/0xc0 [ 530.734376][ C0] common_startup_64+0x13e/0x148 [ 530.734396][ C0]