last executing test programs: 6m48.465981073s ago: executing program 0 (id=56): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair(0x1, 0x80001, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socket(0x2, 0x80805, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x7, &(0x7f0000000200)=0x1, 0x4) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000280)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, 0x0, 0x4004885) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000004c00)=""/102392, 0x18ff8) socket(0x2b, 0xd, 0x4) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f00000000c0)={0x1, 0x4000001, 0x24e, 0x20, 0x2f, &(0x7f0000000e40)}) pwrite64(r1, 0x0, 0x0, 0x7) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x40, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_GENERIC_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e24, 0x4e24}}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4044004) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 6m48.054714119s ago: executing program 0 (id=57): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f00000001c0)={0x0, 0x7, 0x10, 0x3ff, 0x1}, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @empty}, {0x0, @link_local}, 0x4a, {}, 'lo\x00'}) socket(0x10, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f00000002c0)={{0x2, 0x0, @broadcast}, {0x0, @dev}, 0x8, {0x2, 0x0, @empty}, 'lo\x00'}) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 6m47.912168417s ago: executing program 0 (id=58): openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$video(&(0x7f0000000040), 0x7, 0x80000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1358, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x80, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0}) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000500)='bbr\x00', 0x4) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r5, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2275, &(0x7f00000018c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee6, 0x8031, 0xffffffffffffffff, 0x0) 6m46.962735412s ago: executing program 0 (id=59): lseek(0xffffffffffffffff, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x1c, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@typed={0x8, 0x9, 0x0, 0x0, @binary="38eac21a"}]}, 0x1c}}, 0x20000000) 6m46.44612988s ago: executing program 0 (id=61): mkdir(&(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000440)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r2 = open(0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29, r2}, './file0\x00'}) 6m46.249524302s ago: executing program 0 (id=62): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r1, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) sendmmsg(r1, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 6m30.236932795s ago: executing program 32 (id=62): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r1, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) sendmmsg(r1, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 6m17.642309131s ago: executing program 1 (id=147): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="180000002400"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) recvmmsg(r0, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4077, 0xfed}], 0x1}, 0x9}], 0x1, 0x2000, 0x0) writev(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}], 0x1) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) 6m16.645261746s ago: executing program 1 (id=150): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000970e5b4035121800eef0000000010902120001000000000904"], 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f00000002c0)={{0x6003}, {}, [], {}, [], {}, {0x20, 0x7}}, 0x24, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 6m12.498861284s ago: executing program 1 (id=162): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="180100000000000000000000000000008500"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0xf3a, 0x0) write$binfmt_misc(r4, &(0x7f0000000980), 0xfdef) read$FUSE(r3, &(0x7f0000000980)={0x2020}, 0x2020) 6m11.404614119s ago: executing program 1 (id=166): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000406010100000000000000000700000a"], 0x38}, 0x1, 0x0, 0x0, 0x4000040}, 0x28000010) 6m11.193684265s ago: executing program 1 (id=167): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xf101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0xa0800, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000007c0)) ioctl$SIOCSIFHWADDR(r2, 0x8943, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"}) syz_usb_connect$printer(0x2, 0x0, 0x0, 0x0) r3 = fsopen(&(0x7f0000000180)='zonefs\x00', 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) getpid() socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x20001000, 0x957e, 0x1000, 0x3a}, 0x1c) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_init_net_socket$rose(0xb, 0x5, 0x0) 6m8.515651641s ago: executing program 1 (id=173): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x9, 0x4, 0x8, 0xb}, 0x50) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x100, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) close_range(r1, 0xffffffffffffffff, 0x0) 5m52.958271562s ago: executing program 33 (id=173): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x9, 0x4, 0x8, 0xb}, 0x50) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x100, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) close_range(r1, 0xffffffffffffffff, 0x0) 8.848001517s ago: executing program 4 (id=1404): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, 0xb, 0x6, 0x401, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20004804) 8.358805027s ago: executing program 4 (id=1408): close(0x3) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x15, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x54}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x1c, r4, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4008084}, 0x0) 7.088085262s ago: executing program 4 (id=1412): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x79, 0x11, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xc, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000280)={0x40, 0x0, 0x5, {0x5, 0x0, "5a7da3"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 7.008060818s ago: executing program 6 (id=1413): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r0, &(0x7f0000000080), 0x2000011a) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r2, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x190) syz_genetlink_get_family_id$tipc2(&(0x7f0000001600), r0) 6.969144702s ago: executing program 3 (id=1414): socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000003c0), 0x0) r1 = socket(0x10, 0x5, 0x2) getsockname$packet(r1, 0x0, &(0x7f00000003c0)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000040)) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ioctl$SNDRV_PCM_IOCTL_RESET(r6, 0x4141, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r6, 0xc0884113, &(0x7f0000000240)={0xfffffffc, 0x80, 0x200, 0x10001, 0x7fe, 0x8, 0x40009, 0x6, 0x4, 0x2c, 0x1}) ioctl$SNDRV_PCM_IOCTL_REWIND(r6, 0x40084146, &(0x7f0000000000)=0xb) 6.236850835s ago: executing program 6 (id=1416): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000400)={0xf0f080, 0x2}) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000480)={0x0, 0xfb8d, 0x1000, 0x10000001, 0xffdffffd}, &(0x7f00000000c0)=0x0, &(0x7f0000000340)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r2, 0x47f6, 0xffffffff, 0x4a, 0x0, 0x0) 5.268496694s ago: executing program 5 (id=1418): pwritev2(0xffffffffffffffff, &(0x7f0000003ac0)=[{&(0x7f0000000600)="1bbf3f40b22da6b158955ab656a8b6ae49855be8496b193dd94ffd21f0cb20bfec5c677d03df65cca13521f6877f3bc2b4013f4a618ce1bbaeca27b212fe9fa0e93b1f12443626d8d770a61d23303aad", 0x50}], 0x1, 0x0, 0x5, 0x4) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_misc(r0, &(0x7f0000000240), 0xfffffecc) 5.232825523s ago: executing program 6 (id=1419): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x48}, 0x1, 0x0, 0x0, 0x4000848}, 0x490) 4.979819651s ago: executing program 6 (id=1422): r0 = syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2, "b3f0"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000003c0)={0x1c, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 4.138669367s ago: executing program 5 (id=1423): ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x12, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000300)=0x14) sendmsg$inet6(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)=[@hopopts={{0x70, 0x29, 0x36, {0x2c, 0xa, '\x00', [@jumbo={0xc2, 0x4, 0xfff}, @hao={0xc9, 0x10, @mcast1}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x9}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @generic={0x9, 0x1a, "b625f7266b68d7c2a12b8b3d103bcf4726dc8536c652321cf9c6"}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@local, r3}}}, @hopopts_2292={{0x28, 0x29, 0x36, {0x8, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x8c, 0x800}}, @pad1]}}}, @dstopts={{0x60, 0x29, 0x37, {0x2c, 0x8, '\x00', [@calipso={0x7, 0x40, {0x2, 0xe, 0x1c, 0x0, [0xfffffffffffffffd, 0x4, 0x100, 0xcb9, 0xffffffffffff8001, 0x10, 0x3]}}]}}}, @rthdrdstopts={{0x78, 0x29, 0x37, {0x89, 0xb, '\x00', [@enc_lim={0x4, 0x1, 0x9}, @padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x3, 0x42, "2a95a3fe98f0dbbf0fd2cbd28fa12c2c0374c26d1d5afaeff8e386edad1575859fe3a621afc248c07893c8d027078799b533f4271c34e3a88c63d4ed4d5abb40b657"}]}}}], 0x198}, 0x4000015) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001, 0x81}, 0x8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @loopback={0xff00000000000000}, 0x10000}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 4.077360952s ago: executing program 2 (id=1424): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xa, 0x5, 0x2, 0x4}, 0x50) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000003c0)={r1, &(0x7f00000005c0), &(0x7f0000000000)=""/3, 0x2}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000140000e1850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x64, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$unix(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 3.709707539s ago: executing program 3 (id=1425): bpf$ENABLE_STATS(0x20, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) socket$rxrpc(0x21, 0x2, 0xa) mkdir(&(0x7f0000000140)='./file0\x00', 0xd2) socket$inet6_udplite(0xa, 0x2, 0x88) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000480)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x80, 0x0, 0x0, 0x0, 0x1}, 0x94) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001200), 0x8a42) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000001240)={{0x0, 0x3, 0x3, 0x3, 0xfffffffb}}) 3.68156412s ago: executing program 4 (id=1426): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r2, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r0}, 0x20) recvmmsg(r0, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000003d80)=[{&(0x7f0000002ac0)=""/4101, 0x1005}], 0x1}, 0x4}], 0x1, 0x2, 0x0) shutdown(r0, 0x1) 3.563644371s ago: executing program 2 (id=1427): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x31, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000200), 0x0, 0x40010, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000300)="3ce2de4d", 0x4, 0x805, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00') read$FUSE(r4, 0x0, 0x0) ioctl$RTC_UIE_OFF(r4, 0x7004) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x100000f) 3.450699047s ago: executing program 3 (id=1428): socket$alg(0x26, 0x5, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000003c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x1}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff2000/0xe000)=nil, 0xe000}, 0x3}) brk(0x200000ffa000) ioctl$UFFDIO_COPY(r5, 0xc028aa05, &(0x7f00000000c0)={&(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x2000, 0x2}) syz_genetlink_get_family_id$ethtool(0x0, r4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000380)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @dev={0xfe, 0x80, '\x00', 0xc}, 0x80, 0x8000, 0x2000001, 0x1}}) syslog(0x4, &(0x7f0000000500)=""/210, 0xd2) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) 3.428919045s ago: executing program 4 (id=1429): setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)=0x9, 0x4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r0, &(0x7f0000000080), 0x12) 3.249166358s ago: executing program 5 (id=1430): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000400)={0xf0f080, 0x2}) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000480)={0x0, 0xfb8d, 0x1000, 0x10000001, 0xffdffffd}, &(0x7f00000000c0)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x81}}) io_uring_enter(r2, 0x47f6, 0xffffffff, 0x4a, 0x0, 0x0) 2.146722182s ago: executing program 4 (id=1431): r0 = userfaultfd(0x80001) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r1, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000540)=@ethtool_coalesce={0xf, 0x6, 0x8, 0x9, 0xe, 0x4, 0xa, 0x7, 0x3, 0x9, 0x1, 0x4, 0x7, 0x8, 0x93a1, 0x51e5, 0x1, 0x137, 0xf, 0x8, 0x401, 0x8455, 0x4}}) openat$tun(0xffffffffffffff9c, 0x0, 0x10000, 0x0) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000014c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f000001aa40)=""/102400, 0x19000) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="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"/276], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = shmget$private(0x0, 0x9000, 0x4, &(0x7f0000ff7000/0x9000)=nil) r6 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c", 0x1e}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158", 0x65}], 0x3}], 0x1, 0x40800) shmctl$SHM_INFO(r5, 0xe, 0x0) 1.841335099s ago: executing program 2 (id=1432): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioprio_get$uid(0x3, 0x0) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 1.827485698s ago: executing program 3 (id=1433): writev(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x8, @loopback}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000200)={0x1, 0x7}, 0x8) listen(r0, 0x5) accept4(r0, &(0x7f0000000240)=@x25, 0x0, 0x80800) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @empty, 0xfffffffe}, 0x1c) 1.106901812s ago: executing program 5 (id=1434): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r0, 0x28, 0x6, &(0x7f0000001680)=""/59, &(0x7f0000000000)=0x3b) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map=r2, 0x26, 0x0, 0x0, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) 593.368311ms ago: executing program 5 (id=1435): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='syscall\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x77, 0x141301) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40043, 0x1fe) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mq_open(&(0x7f0000000100)=' \x01\x9c\x147\xb3\xcf\xfc\xc3\xa2W)\xebs\x93\xa7\xc7-\xeb\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00AWK\n\x8b!Q\x8f\xf6\xec\xa5fs\xf5l{T\x87r\xd2)r\xa7\xd6\bO\x9a\x98\xf52:\"\xf4\x12\xc0T+\xcd\x9fv|\x8d\xd5\xb2Dvc\x8e\x93\xd8\xd6\xa0\xc56\xd2x\xe3g:', 0x41, 0x80, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0xa, 0x1, 0x106) r1 = syz_io_uring_setup(0x2de0, &(0x7f0000000200)={0x0, 0x0, 0x40, 0x0, 0x1000224}, 0x0, 0x0) r2 = syz_io_uring_setup(0x42e6, &(0x7f00000002c0)={0x0, 0xac7c, 0x10100, 0x2002, 0x4000000, 0x0, r1}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x60, 0x11, r0, 0x0, 0x0, 0x0, 0x61, 0x1, {0x1}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r2, 0x7330, 0x0, 0x0, 0x0, 0x0) 565.40296ms ago: executing program 6 (id=1436): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x4001) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000001c0)={0x1c, r1, 0x800, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x6}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000400)="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", 0x3f1, 0x4000, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[0x8, 0x5, 0x1, 0x3, 0x9, 0x9, 0x9, 0x9, 0x21, 0x7, 0x9380000, 0x8, 0x6, 0x9, 0x1, 0x6], 0x80a0000, 0x291842}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="0f7512660fe0860800d9fa0f01cb660f38808403003ea40f16d50f20000f01c867d1d6", 0x23}], 0x1, 0x10, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={0x0, 0x21c}}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 413.158528ms ago: executing program 2 (id=1437): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x11}]]}, 0x34}}, 0x0) 355.516671ms ago: executing program 2 (id=1438): bpf$ENABLE_STATS(0x20, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) socket$rxrpc(0x21, 0x2, 0xa) mkdir(&(0x7f0000000140)='./file0\x00', 0xd2) socket$inet6_udplite(0xa, 0x2, 0x88) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000480)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x80, 0x0, 0x0, 0x0, 0x1}, 0x94) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001200), 0x8a42) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000001240)={{0x0, 0x3, 0x3, 0x3, 0xfffffffb}}) 309.855885ms ago: executing program 3 (id=1439): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x4c}}, 0x2048814) 278.857235ms ago: executing program 5 (id=1440): syz_open_dev$vim2m(0x0, 0x2000000f5, 0x2) syz_open_dev$sndpcmc(0x0, 0x0, 0xa340658bc40d4f52) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) getdents64(r0, &(0x7f0000000480)=""/243, 0xf3) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000800)=ANY=[@ANYBLOB="7c0000007d01000000630000000900000000010000000300000000000000000015290b000000ff07000000000000000000000300237d5d010026280073797374656d5f753a6f626a6563745f723a72656d6f7661626c655f646576696365d952bbd58141e8feb15b296fc49a5f743a7330000400235b212f040047504c00", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=r5], 0x7c) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f00000003c0)={0x0, 0x1, {0x2, 0x0, 0x9, 0x2, 0xb3}, 0x3}) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@allocspi={0x100, 0x16, 0x1, 0x70bd2b, 0x25dfdbfe, {{{@in=@private=0xa010101, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e23, 0x0, 0x4e24, 0x0, 0xa, 0x80, 0x20, 0x1d}, {@in6=@local, 0x4d9, 0x33}, @in=@dev={0xac, 0x14, 0x14, 0x10}, {0x8, 0x7b5, 0x0, 0x6, 0x9, 0xfffffffffffffffa, 0xffffffff, 0x3}, {0x2, 0x3, 0x1, 0xfffffffffffffffa}, {0x0, 0x10001, 0xfffffff9}, 0x70bd2a, 0x0, 0x0, 0x2, 0x6, 0x1}, 0x8, 0x74f}, [@XFRMA_IF_ID={0x8, 0x1f, 0x4}]}, 0x100}, 0x1, 0x0, 0x0, 0x10}, 0x400c8c0) connect$unix(r0, &(0x7f0000000340)=@abs={0x1, 0x0, 0x4e23}, 0x6e) setsockopt$inet_int(r4, 0x0, 0x22, &(0x7f00000001c0)=0x5, 0x4) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000003680)=@filter={'filter\x00', 0x42, 0x4, 0x460, 0xffffffff, 0x210, 0x318, 0x318, 0xffffffff, 0xffffffff, 0x408, 0x408, 0x408, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @private, 0x0, 0x0, 'wg1\x00', 'nr0\x00'}, 0x74000002, 0xe8, 0x210, 0x1ba, {0x46010000, 0x2c000000000000}, [@common=@unspec=@limit={{0x48}, {0x0, 0xdf6, 0x0, 0x0, 0x0, 0x9}}, @common=@addrtype={{0x30}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:removable_device_t:s0\x00'}}}, {{@uncond, 0x287, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@cpu={{0x28}}, @common=@unspec=@limit={{0x48}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c0) ioctl$FS_IOC_SETFLAGS(r0, 0x40186f40, &(0x7f0000000440)=0x1f) socket$nl_route(0x10, 0x3, 0x0) 241.990536ms ago: executing program 6 (id=1441): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$video(&(0x7f00000001c0), 0xa7, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0c01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x90e7d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = syz_open_dev$admmidi(0x0, 0x20, 0x0) read$midi(r5, 0x0, 0x14) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r6, 0x890b, 0x0) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setpriority(0x2, 0x0, 0x3) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x8000, 0x1, 0x56555941, 0x3, 0xa, [{0x3, 0x10001}, {0x54, 0x5}, {0x4, 0x7}, {0x2, 0x3}, {0x9, 0x5}, {0x2, 0x10000}, {0x8, 0x400}, {0xc, 0x3000000}], 0xd, 0x3, 0x3, 0x1, 0x7}}) socket$inet6_udplite(0xa, 0x2, 0x88) 1.273051ms ago: executing program 3 (id=1442): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x121003, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40081271, &(0x7f0000000980)=0x4000) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f00000001c0)='ntfs3\x00', 0x8000, 0x0) 0s ago: executing program 2 (id=1443): socket$alg(0x26, 0x5, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000003c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x1}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff2000/0xe000)=nil, 0xe000}, 0x3}) brk(0x200000ffa000) ioctl$UFFDIO_COPY(r5, 0xc028aa05, &(0x7f00000000c0)={&(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x2000, 0x2}) syz_genetlink_get_family_id$ethtool(0x0, r4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000380)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @dev={0xfe, 0x80, '\x00', 0xc}, 0x80, 0x8000, 0x2000001, 0x1}}) syslog(0x4, &(0x7f0000000500)=""/210, 0xd2) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) kernel console output (not intermixed with test programs): 128.504089][ T6709] netlink: 12 bytes leftover after parsing attributes in process `syz.2.191'. [ 128.762622][ T30] audit: type=1400 audit(1753818222.225:264): avc: denied { watch watch_reads } for pid=6711 comm="syz.4.192" path="/38" dev="tmpfs" ino=206 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 128.785939][ T30] audit: type=1400 audit(1753818222.235:265): avc: denied { execute } for pid=6711 comm="syz.4.192" path="/38/file1" dev="tmpfs" ino=211 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 128.977733][ T6718] overlayfs: failed to resolve './file0': -2 [ 129.406541][ T6705] netlink: 8 bytes leftover after parsing attributes in process `syz.5.190'. [ 129.415546][ T6705] IPVS: Error joining to the multicast group [ 129.568917][ T30] audit: type=1400 audit(1753818222.955:266): avc: denied { watch } for pid=6717 comm="syz.2.193" path="/46/bus/file1" dev="tmpfs" ino=269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 129.635297][ T30] audit: type=1400 audit(1753818222.955:267): avc: denied { watch_sb watch_reads } for pid=6717 comm="syz.2.193" path="/46/bus/file1" dev="tmpfs" ino=269 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 130.097642][ T6731] netlink: 16 bytes leftover after parsing attributes in process `syz.5.195'. [ 130.849506][ T6738] 9pnet_virtio: no channels available for device syz [ 132.059887][ T5967] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 132.394824][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.482063][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.661897][ T5967] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 132.693621][ T5967] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.206101][ T5967] usb 5-1: config 0 descriptor?? [ 133.749445][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 133.802977][ T6770] Invalid source name [ 133.807134][ T6770] UBIFS error (pid: 6770): cannot open "/dev/sg0", error -22 [ 134.139362][ T6777] fuse: Invalid rootmode [ 134.151603][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 134.186808][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.207978][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.238531][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 134.307851][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.401321][ T9] usb 4-1: config 0 descriptor?? [ 134.451918][ T9] hub 4-1:0.0: USB hub found [ 134.691128][ T6787] netlink: 8 bytes leftover after parsing attributes in process `syz.5.206'. [ 134.700578][ T6787] IPVS: Error joining to the multicast group [ 135.543227][ T5967] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 135.557986][ T5967] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 135.581521][ T9] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 135.599508][ T5967] asix 5-1:0.0: probe with driver asix failed with error -71 [ 135.621202][ T5967] usb 5-1: USB disconnect, device number 6 [ 135.802236][ C0] raw-gadget.1 gadget.3: ignoring, device is not running [ 135.832132][ C0] raw-gadget.1 gadget.3: ignoring, device is not running [ 135.839599][ C0] raw-gadget.1 gadget.3: ignoring, device is not running [ 135.880087][ T9] usbhid 4-1:0.0: can't add hid device: -32 [ 135.891599][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 136.041595][ T6800] 9pnet_virtio: no channels available for device syz [ 136.372394][ T30] audit: type=1400 audit(1753818229.825:268): avc: denied { name_bind } for pid=6796 comm="syz.4.210" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 136.381219][ T9] usb 4-1: USB disconnect, device number 6 [ 136.679594][ T30] audit: type=1400 audit(1753818229.835:269): avc: denied { node_bind } for pid=6796 comm="syz.4.210" saddr=ff01::1 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 136.983139][ T30] audit: type=1400 audit(1753818230.435:270): avc: denied { unmount } for pid=6318 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 137.171093][ T6812] tipc: Enabling of bearer rejected, failed to enable media [ 138.169655][ T6619] Set syz1 is full, maxelem 65536 reached [ 140.371533][ T30] audit: type=1400 audit(1753818233.805:271): avc: denied { write } for pid=6846 comm="syz.4.222" path="socket:[10815]" dev="sockfs" ino=10815 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 140.823200][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 140.841920][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 140.849845][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 140.860506][ T30] audit: type=1400 audit(1753818234.275:272): avc: denied { create } for pid=6854 comm="syz.3.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 140.904458][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 140.924580][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 140.965624][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.966895][ T6863] netlink: 'syz.3.224': attribute type 4 has an invalid length. [ 141.192953][ T6870] netlink: 28 bytes leftover after parsing attributes in process `syz.5.227'. [ 141.396560][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.505710][ T30] audit: type=1400 audit(1753818234.965:273): avc: denied { read write } for pid=6874 comm="syz.3.229" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 141.559182][ T30] audit: type=1400 audit(1753818234.965:274): avc: denied { open } for pid=6874 comm="syz.3.229" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 141.587194][ T30] audit: type=1400 audit(1753818234.965:275): avc: denied { ioctl } for pid=6874 comm="syz.3.229" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 141.750430][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 142.110596][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.383978][ T9] usb 4-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 142.400286][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.422331][ T9] usb 4-1: config 0 descriptor?? [ 142.430706][ T9] usb 4-1: selecting invalid altsetting 1 [ 142.567982][ T9] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 143.543643][ T50] Bluetooth: hci1: command tx timeout [ 143.763759][ T30] audit: type=1400 audit(1753818237.225:276): avc: denied { connect } for pid=6898 comm="syz.5.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 143.799043][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.809133][ T5827] udevd[5827]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 144.030519][ T5889] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 144.452328][ T5889] usb 5-1: Using ep0 maxpacket: 8 [ 144.487662][ T5889] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.532115][ T5889] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 144.564987][ T12] bridge_slave_1: left allmulticast mode [ 144.570396][ T6915] netlink: 12 bytes leftover after parsing attributes in process `syz.5.236'. [ 144.574752][ T5889] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.599126][ T12] bridge_slave_1: left promiscuous mode [ 144.609369][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.629377][ T5889] usb 5-1: config 0 descriptor?? [ 144.647991][ T12] bridge_slave_0: left allmulticast mode [ 144.679499][ T12] bridge_slave_0: left promiscuous mode [ 144.690062][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.802098][ T24] usb 4-1: USB disconnect, device number 7 [ 145.075350][ T6934] netlink: 'syz.2.239': attribute type 4 has an invalid length. [ 145.076628][ T5889] usbhid 5-1:0.0: can't add hid device: -71 [ 145.092098][ T5889] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 145.113859][ T5889] usb 5-1: USB disconnect, device number 7 [ 145.171432][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 145.182168][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 145.195207][ T12] bond0 (unregistering): Released all slaves [ 145.216578][ T6856] chnl_net:caif_netlink_parms(): no params data found [ 145.572455][ T6856] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.579748][ T6856] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.590449][ T50] Bluetooth: hci1: command tx timeout [ 145.603248][ T6856] bridge_slave_0: entered allmulticast mode [ 145.612393][ T6856] bridge_slave_0: entered promiscuous mode [ 145.637006][ T6856] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.655269][ T6856] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.665878][ T6856] bridge_slave_1: entered allmulticast mode [ 146.147532][ T6856] bridge_slave_1: entered promiscuous mode [ 146.289399][ T6958] fuse: Unknown parameter '00000000000000000000' [ 146.574332][ T6856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 146.601828][ T6856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 146.692822][ T12] hsr_slave_0: left promiscuous mode [ 146.700660][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 146.708996][ T12] hsr_slave_1: left promiscuous mode [ 146.723026][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.749935][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 146.773458][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.796392][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.845499][ T12] veth1_macvtap: left promiscuous mode [ 146.874902][ T12] veth0_macvtap: left promiscuous mode [ 146.885831][ T12] veth1_vlan: left promiscuous mode [ 146.894504][ T9] usb 6-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 146.902845][ T12] veth0_vlan: left promiscuous mode [ 146.909181][ T5967] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 146.946068][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.997189][ T9] usb 6-1: config 0 descriptor?? [ 147.105129][ T5967] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 147.166653][ T5967] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 147.187208][ T5967] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.236939][ T9] usb 6-1: selecting invalid altsetting 1 [ 147.257641][ T5967] usb 5-1: config 0 descriptor?? [ 147.302216][ T5967] pwc: Askey VC010 type 2 USB webcam detected. [ 147.341412][ T9] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 147.715737][ T50] Bluetooth: hci1: command tx timeout [ 148.123687][ T5967] pwc: recv_control_msg error -32 req 02 val 2b00 [ 148.137246][ T5967] pwc: recv_control_msg error -32 req 02 val 2700 [ 148.155278][ T5967] pwc: recv_control_msg error -32 req 02 val 2c00 [ 148.168302][ T5967] pwc: recv_control_msg error -71 req 04 val 1000 [ 148.188701][ T5967] pwc: recv_control_msg error -71 req 04 val 1300 [ 148.204281][ T5967] pwc: recv_control_msg error -71 req 04 val 1400 [ 148.220820][ T5967] pwc: recv_control_msg error -71 req 02 val 2000 [ 148.251303][ T5967] pwc: recv_control_msg error -71 req 02 val 2100 [ 148.262926][ T5967] pwc: recv_control_msg error -71 req 04 val 1500 [ 148.275775][ T5967] pwc: recv_control_msg error -71 req 02 val 2500 [ 148.290699][ T5967] pwc: recv_control_msg error -71 req 02 val 2400 [ 148.297586][ T5967] pwc: recv_control_msg error -71 req 02 val 2600 [ 148.311021][ T5967] pwc: recv_control_msg error -71 req 02 val 2900 [ 148.328030][ T5967] pwc: recv_control_msg error -71 req 02 val 2800 [ 148.335104][ T5967] pwc: recv_control_msg error -71 req 04 val 1100 [ 148.351259][ T5967] pwc: recv_control_msg error -71 req 04 val 1200 [ 148.361627][ T5967] pwc: Registered as video103. [ 148.383106][ T5967] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input5 [ 148.422958][ T30] audit: type=1400 audit(1753818241.885:277): avc: denied { read } for pid=5188 comm="acpid" name="event4" dev="devtmpfs" ino=2894 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 148.479166][ T5967] usb 5-1: USB disconnect, device number 8 [ 148.494631][ T30] audit: type=1400 audit(1753818241.885:278): avc: denied { open } for pid=5188 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2894 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 148.521308][ T30] audit: type=1400 audit(1753818241.885:279): avc: denied { ioctl } for pid=5188 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2894 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 148.524320][ T6991] netlink: 'syz.2.251': attribute type 4 has an invalid length. [ 148.693961][ T12] team0 (unregistering): Port device team_slave_1 removed [ 148.732828][ T6993] netlink: 12 bytes leftover after parsing attributes in process `syz.4.252'. [ 148.748979][ T12] team0 (unregistering): Port device team_slave_0 removed [ 149.089442][ T6856] team0: Port device team_slave_0 added [ 149.119425][ T6856] team0: Port device team_slave_1 added [ 149.199876][ T6856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.215545][ T6856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.269954][ T6856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.289315][ T6856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.305262][ T6856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.417656][ T6856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 149.501026][ T7003] tipc: Started in network mode [ 149.506021][ T7003] tipc: Node identity 7f000001, cluster identity 4711 [ 149.513497][ T7003] tipc: Enabled bearer , priority 10 [ 149.584377][ T5967] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 149.647427][ T5889] usb 6-1: USB disconnect, device number 2 [ 149.693224][ T30] audit: type=1400 audit(1753818243.145:280): avc: denied { create } for pid=7004 comm="syz.3.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 149.750477][ T50] Bluetooth: hci1: command tx timeout [ 149.773574][ T5967] usb 3-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 151.190530][ T30] audit: type=1400 audit(1753818244.155:281): avc: denied { ioctl } for pid=7004 comm="syz.3.256" path="/dev/input/event0" dev="devtmpfs" ino=918 ioctlcmd=0x4519 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 151.280285][ T5967] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.300861][ T5967] usb 3-1: config 0 descriptor?? [ 151.307215][ T10] tipc: Node number set to 2130706433 [ 151.337383][ T5967] usb 3-1: selecting invalid altsetting 1 [ 151.722607][ T7021] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=7021 comm=syz.2.254 [ 152.120203][ T6856] hsr_slave_0: entered promiscuous mode [ 152.127378][ T5967] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 152.148233][ T6856] hsr_slave_1: entered promiscuous mode [ 152.556334][ T7035] netlink: 'syz.3.263': attribute type 4 has an invalid length. [ 152.720660][ T24] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 152.892496][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 152.895248][ T6856] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 152.902567][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.943999][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.976330][ T6856] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 153.000347][ T24] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 153.025421][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.026522][ T6856] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 153.057350][ T24] usb 5-1: config 0 descriptor?? [ 153.073149][ T7044] netlink: 12 bytes leftover after parsing attributes in process `syz.5.265'. [ 153.094141][ T24] hub 5-1:0.0: USB hub found [ 153.099166][ T6856] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 153.214287][ T5889] usb 3-1: USB disconnect, device number 8 [ 153.527386][ T24] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 153.859460][ T24] usbhid 5-1:0.0: can't add hid device: -71 [ 153.892535][ T24] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 154.045577][ T24] usb 5-1: USB disconnect, device number 9 [ 154.099939][ T30] audit: type=1400 audit(1753818247.485:282): avc: denied { write } for pid=7062 comm="syz.2.268" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 154.139179][ T6856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.620408][ T5889] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 154.644317][ T30] audit: type=1400 audit(1753818247.485:283): avc: denied { open } for pid=7062 comm="syz.2.268" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 154.937028][ T5889] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 155.041306][ T6856] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.120051][ T5889] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 21568, setting to 1024 [ 155.134280][ T30] audit: type=1400 audit(1753818247.495:284): avc: denied { ioctl } for pid=7062 comm="syz.2.268" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 155.379796][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.386996][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.396139][ T5889] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 155.628346][ T5889] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 155.835363][ T5889] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.897116][ T986] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.904321][ T986] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.931599][ T5889] usb 3-1: Product: syz [ 155.935819][ T5889] usb 3-1: Manufacturer: syz [ 156.247772][ T5889] usb 3-1: SerialNumber: syz [ 156.271135][ T5889] usb 3-1: config 0 descriptor?? [ 156.292666][ T7064] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 156.320474][ T7064] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 156.876471][ T7086] hub 2-0:1.0: USB hub found [ 156.885278][ T7086] hub 2-0:1.0: 1 port detected [ 157.051138][ T7063] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 157.058406][ T7063] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 157.279418][ T5889] Error reading MAC address [ 157.321914][ T5889] usb 3-1: USB disconnect, device number 9 [ 157.453745][ T7099] tipc: Enabling of bearer rejected, already enabled [ 157.961562][ T7100] fuse: Unknown parameter 'user00000000000000000000' [ 158.082800][ T6856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 158.937294][ T7123] netlink: 12 bytes leftover after parsing attributes in process `syz.2.277'. [ 159.084831][ T7128] warning: `syz.3.278' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 160.048146][ T6856] veth0_vlan: entered promiscuous mode [ 160.128826][ T6856] veth1_vlan: entered promiscuous mode [ 160.693288][ T30] audit: type=1400 audit(1753818253.685:285): avc: denied { name_connect } for pid=7142 comm="syz.2.281" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 160.757875][ T6856] veth0_macvtap: entered promiscuous mode [ 160.773693][ T6856] veth1_macvtap: entered promiscuous mode [ 160.992760][ T6856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 161.008970][ T6856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 161.025663][ T6856] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.057353][ T6856] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.155666][ T5909] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 161.249548][ T30] audit: type=1400 audit(1753818254.675:286): avc: denied { write } for pid=7146 comm="syz.5.282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 161.326719][ T6856] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.337246][ T6856] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.477327][ T5909] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.510393][ T5909] usb 5-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 161.593122][ T5909] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.787671][ T5909] usb 5-1: config 0 descriptor?? [ 162.525455][ T5909] lenovo 0003:17EF:6047.0005: unknown main item tag 0x1 [ 162.550098][ T5909] lenovo 0003:17EF:6047.0005: item fetching failed at offset 2/5 [ 162.599020][ T5909] lenovo 0003:17EF:6047.0005: hid_parse failed [ 162.641769][ T986] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.689086][ T5909] lenovo 0003:17EF:6047.0005: probe with driver lenovo failed with error -22 [ 162.708424][ T986] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.858488][ T986] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.920651][ T986] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.223688][ T5909] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 163.240432][ T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 163.358644][ T7202] Invalid source name [ 163.362827][ T7202] UBIFS error (pid: 7202): cannot open "/dev/sg0", error -22 [ 163.491603][ T9] usb 6-1: config 0 has an invalid descriptor of length 231, skipping remainder of the config [ 163.548232][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 163.675443][ T9] usb 6-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 163.692237][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.715361][ T9] usb 6-1: Product: syz [ 163.720324][ T9] usb 6-1: Manufacturer: syz [ 163.727375][ T9] usb 6-1: SerialNumber: syz [ 164.280745][ T5909] usb 4-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 164.337655][ T9] usb 6-1: config 0 descriptor?? [ 164.376159][ T5909] usb 4-1: config 0 interface 0 has no altsetting 0 [ 164.387208][ T9] usb 5-1: USB disconnect, device number 10 [ 164.391773][ T5909] usb 4-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 164.495944][ T5909] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.562782][ T5889] usb 6-1: USB disconnect, device number 3 [ 164.606839][ T5909] usb 4-1: config 0 descriptor?? [ 164.897535][ T7191] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 165.029519][ T7220] netlink: 'syz.6.294': attribute type 4 has an invalid length. [ 165.037321][ T7220] netlink: 28 bytes leftover after parsing attributes in process `syz.6.294'. [ 165.046963][ T7220] netlink: 56 bytes leftover after parsing attributes in process `syz.6.294'. [ 165.057640][ T7220] tmpfs: Bad value for 'mpol' [ 165.064027][ T7220] netlink: 52 bytes leftover after parsing attributes in process `syz.6.294'. [ 165.312791][ T5909] usbhid 4-1:0.0: can't add hid device: -71 [ 165.328254][ T5909] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 165.363568][ T5909] usb 4-1: USB disconnect, device number 8 [ 165.881148][ T30] audit: type=1400 audit(1753818259.335:287): avc: denied { unmount } for pid=5826 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 166.008391][ T7250] netlink: 12 bytes leftover after parsing attributes in process `syz.3.302'. [ 167.631192][ T7279] Bluetooth: MGMT ver 1.23 [ 170.580029][ T30] audit: type=1400 audit(1753818264.005:288): avc: denied { ioctl } for pid=7309 comm="syz.3.311" path="socket:[13802]" dev="sockfs" ino=13802 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 170.870485][ T5967] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 170.911752][ T30] audit: type=1400 audit(1753818264.375:289): avc: denied { getopt } for pid=7320 comm="syz.3.313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 171.024178][ T5967] usb 3-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 171.161137][ T5967] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.721881][ T5967] usb 3-1: config 0 descriptor?? [ 171.759117][ T5967] usb 3-1: selecting invalid altsetting 1 [ 172.092998][ T5967] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 172.157553][ T5827] udevd[5827]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 172.187151][ T5967] usb 3-1: USB disconnect, device number 10 [ 172.254329][ T30] audit: type=1400 audit(1753818265.705:290): avc: denied { ioctl } for pid=7336 comm="syz.4.317" path="socket:[13842]" dev="sockfs" ino=13842 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 172.353641][ T7338] netlink: 8 bytes leftover after parsing attributes in process `syz.5.316'. [ 172.362577][ T7338] netlink: 4 bytes leftover after parsing attributes in process `syz.5.316'. [ 172.955207][ T30] audit: type=1400 audit(1753818266.405:291): avc: denied { write } for pid=7343 comm="syz.2.322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 173.162133][ T7345] kvm: kvm [7344]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x33 [ 173.163274][ T30] audit: type=1400 audit(1753818266.405:292): avc: denied { name_connect } for pid=7343 comm="syz.2.322" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 174.327491][ T7355] Can't find ip_set type hash:ip,ma [ 174.340357][ T30] audit: type=1400 audit(1753818267.655:293): avc: denied { write } for pid=7356 comm="syz.5.323" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 174.431531][ T30] audit: type=1400 audit(1753818267.825:294): avc: denied { bind } for pid=7356 comm="syz.5.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 175.541439][ T50] Bluetooth: Frame is too long (len 18, expected len 4) [ 176.734025][ T7390] netlink: 27 bytes leftover after parsing attributes in process `syz.6.327'. [ 176.782034][ T30] audit: type=1400 audit(1753818270.235:295): avc: denied { execute_no_trans } for pid=7386 comm="syz.4.328" path="/61/file0" dev="tmpfs" ino=331 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 176.846351][ T30] audit: type=1400 audit(1753818270.235:296): avc: denied { remount } for pid=7386 comm="syz.4.328" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 177.241820][ T7412] overlayfs: missing 'lowerdir' [ 178.350985][ T1207] hid-generic 0002:0081:0005.0006: item fetching failed at offset 7/27 [ 178.364568][ T1207] hid-generic 0002:0081:0005.0006: probe with driver hid-generic failed with error -22 [ 179.071798][ T7434] Can't find ip_set type hash:ip,ma [ 181.127397][ T7460] hub 2-0:1.0: USB hub found [ 181.132837][ T7460] hub 2-0:1.0: 1 port detected [ 181.510422][ T973] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 181.702399][ T973] usb 6-1: Using ep0 maxpacket: 32 [ 181.774824][ T973] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 181.797588][ T973] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.830104][ T973] usb 6-1: config 0 descriptor?? [ 182.113683][ T7491] netlink: 'syz.3.347': attribute type 4 has an invalid length. [ 182.121757][ T7491] netlink: 28 bytes leftover after parsing attributes in process `syz.3.347'. [ 182.191977][ T973] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 182.209599][ T973] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 182.216126][ T973] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 182.216177][ T973] usb 6-1: media controller created [ 182.230741][ T973] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 182.287077][ T30] audit: type=1400 audit(1753818275.735:297): avc: denied { create } for pid=7492 comm="syz.2.349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 182.495561][ T973] az6027: usb out operation failed. (-71) [ 182.510321][ T30] audit: type=1400 audit(1753818275.775:298): avc: denied { create } for pid=7472 comm="syz.4.345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 182.521585][ T973] az6027: usb out operation failed. (-71) [ 182.595070][ T7488] tmpfs: Bad value for 'mpol' [ 182.600459][ T7488] netlink: 52 bytes leftover after parsing attributes in process `syz.3.347'. [ 182.614890][ T973] stb0899_attach: Driver disabled by Kconfig [ 182.621112][ T973] az6027: no front-end attached [ 182.621112][ T973] [ 182.629391][ T973] az6027: usb out operation failed. (-71) [ 182.638348][ T973] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 182.651970][ T973] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input6 [ 182.707209][ T973] dvb-usb: schedule remote query interval to 400 msecs. [ 182.733944][ T973] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 182.804449][ T973] usb 6-1: USB disconnect, device number 4 [ 183.100410][ T30] audit: type=1400 audit(1753818276.555:299): avc: denied { setopt } for pid=7502 comm="syz.3.350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 184.200194][ T973] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 184.434883][ T7520] netlink: 8 bytes leftover after parsing attributes in process `syz.3.353'. [ 185.670477][ T7542] netlink: 8 bytes leftover after parsing attributes in process `syz.2.356'. [ 185.680354][ T7542] IPVS: Error joining to the multicast group [ 185.689750][ T5831] Bluetooth: hci4: command 0x0406 tx timeout [ 185.696018][ T5154] Bluetooth: hci3: command 0x0406 tx timeout [ 186.034718][ T5967] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 186.046146][ T30] audit: type=1400 audit(1753818279.505:300): avc: denied { create } for pid=7544 comm="syz.6.359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 186.420782][ T7555] netlink: 180 bytes leftover after parsing attributes in process `syz.5.361'. [ 187.035427][ T30] audit: type=1400 audit(1753818279.545:301): avc: denied { read } for pid=7544 comm="syz.6.359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 187.054815][ T30] audit: type=1400 audit(1753818279.655:302): avc: denied { listen } for pid=7549 comm="syz.5.361" lport=56385 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 187.077763][ T30] audit: type=1400 audit(1753818279.715:303): avc: denied { accept } for pid=7549 comm="syz.5.361" lport=56385 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 187.176503][ T5967] usb 5-1: Using ep0 maxpacket: 8 [ 187.186856][ T5967] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.197470][ T5967] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 187.206789][ T5967] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.350091][ T7552] sctp: failed to load transform for md5: -2 [ 187.351469][ T5967] usb 5-1: config 0 descriptor?? [ 188.217212][ T5967] usbhid 5-1:0.0: can't add hid device: -71 [ 188.238263][ T5967] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 188.295389][ T5967] usb 5-1: USB disconnect, device number 11 [ 188.763997][ T1207] hid-generic 0002:0081:0005.0007: item fetching failed at offset 7/27 [ 188.784903][ T1207] hid-generic 0002:0081:0005.0007: probe with driver hid-generic failed with error -22 [ 189.003789][ T7596] netlink: 12 bytes leftover after parsing attributes in process `syz.3.370'. [ 191.541335][ T5909] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 191.744271][ T5909] usb 4-1: config 0 has an invalid descriptor of length 231, skipping remainder of the config [ 191.790177][ T5909] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 192.040597][ T5909] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 192.054400][ T5909] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 192.064684][ T5909] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 193.841947][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.848327][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.950954][ T5909] usb 4-1: string descriptor 0 read error: -71 [ 194.957561][ T5909] usb 4-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 195.034302][ T5909] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.088927][ T5909] usb 4-1: config 0 descriptor?? [ 195.122914][ T5909] usb 4-1: can't set config #0, error -71 [ 195.189242][ T5909] usb 4-1: USB disconnect, device number 9 [ 195.568655][ T1207] hid-generic 0002:0081:0005.0008: item fetching failed at offset 7/27 [ 195.585629][ T1207] hid-generic 0002:0081:0005.0008: probe with driver hid-generic failed with error -22 [ 195.730613][ T5909] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 195.989729][ T5909] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 196.206160][ T5909] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 196.528852][ T30] audit: type=1400 audit(1753818289.765:304): avc: denied { write } for pid=7694 comm="syz.6.389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 196.750447][ T5909] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.753641][ T30] audit: type=1400 audit(1753818290.215:305): avc: denied { write } for pid=7700 comm="syz.6.391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 196.803813][ T5909] usb 4-1: config 0 descriptor?? [ 196.831409][ T5909] pwc: Askey VC010 type 2 USB webcam detected. [ 196.958097][ T30] audit: type=1400 audit(1753818290.415:306): avc: denied { create } for pid=7702 comm="syz.6.392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 197.073832][ T30] audit: type=1400 audit(1753818290.445:307): avc: denied { ioctl } for pid=7702 comm="syz.6.392" path="socket:[15428]" dev="sockfs" ino=15428 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 197.258972][ T5909] pwc: recv_control_msg error -32 req 02 val 2b00 [ 197.541377][ T5909] pwc: recv_control_msg error -32 req 02 val 2c00 [ 197.556086][ T5909] pwc: recv_control_msg error -71 req 04 val 1000 [ 197.646072][ T5909] pwc: recv_control_msg error -71 req 04 val 1300 [ 197.689323][ T5909] pwc: recv_control_msg error -71 req 04 val 1400 [ 197.714556][ T5909] pwc: recv_control_msg error -71 req 02 val 2000 [ 198.899044][ T5909] pwc: recv_control_msg error -71 req 02 val 2100 [ 199.056673][ T30] audit: type=1400 audit(1753818292.515:308): avc: denied { relabelfrom } for pid=7729 comm="syz.5.398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 199.206017][ T5909] pwc: recv_control_msg error -71 req 04 val 1500 [ 199.251108][ T30] audit: type=1400 audit(1753818292.545:309): avc: denied { relabelto } for pid=7729 comm="syz.5.398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 199.443290][ T5909] pwc: recv_control_msg error -71 req 02 val 2500 [ 199.476569][ T5909] pwc: recv_control_msg error -71 req 02 val 2400 [ 199.515184][ T5909] pwc: recv_control_msg error -71 req 02 val 2600 [ 199.539379][ T5909] pwc: recv_control_msg error -71 req 02 val 2900 [ 199.611196][ T30] audit: type=1400 audit(1753818292.575:310): avc: denied { setopt } for pid=7717 comm="syz.4.396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 199.627880][ T5909] pwc: recv_control_msg error -71 req 02 val 2800 [ 199.678157][ T5909] pwc: recv_control_msg error -71 req 04 val 1100 [ 199.705286][ T5909] pwc: recv_control_msg error -71 req 04 val 1200 [ 199.743666][ T5909] pwc: Registered as video103. [ 199.779337][ T5909] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input7 [ 199.884105][ T5909] usb 4-1: USB disconnect, device number 10 [ 200.278064][ T30] audit: type=1400 audit(1753818293.725:311): avc: denied { block_suspend } for pid=7744 comm="syz.4.400" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 201.214478][ T30] audit: type=1400 audit(1753818293.735:312): avc: denied { ioctl } for pid=7744 comm="syz.4.400" path="socket:[15461]" dev="sockfs" ino=15461 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 204.092735][ T5967] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 204.255205][ T5967] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 204.272001][ T5967] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 204.294174][ T5967] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.319947][ T5967] usb 7-1: config 0 descriptor?? [ 204.334051][ T5967] pwc: Askey VC010 type 2 USB webcam detected. [ 204.826126][ T5967] pwc: recv_control_msg error -32 req 02 val 2b00 [ 205.076095][ T5967] pwc: recv_control_msg error -32 req 02 val 2c00 [ 205.091822][ T5967] pwc: recv_control_msg error -71 req 04 val 1000 [ 205.117122][ T5967] pwc: recv_control_msg error -71 req 04 val 1300 [ 205.185499][ T5967] pwc: recv_control_msg error -71 req 04 val 1400 [ 205.238471][ T5967] pwc: recv_control_msg error -71 req 02 val 2000 [ 205.277998][ T5967] pwc: recv_control_msg error -71 req 02 val 2100 [ 205.334490][ T5967] pwc: recv_control_msg error -71 req 04 val 1500 [ 205.372325][ T5967] pwc: recv_control_msg error -71 req 02 val 2500 [ 205.402325][ T5967] pwc: recv_control_msg error -71 req 02 val 2400 [ 205.456209][ T5967] pwc: recv_control_msg error -71 req 02 val 2600 [ 205.463431][ T5967] pwc: recv_control_msg error -71 req 02 val 2900 [ 205.491587][ T5967] pwc: recv_control_msg error -71 req 02 val 2800 [ 205.503675][ T5967] pwc: recv_control_msg error -71 req 04 val 1100 [ 205.546152][ T5967] pwc: recv_control_msg error -71 req 04 val 1200 [ 205.560009][ T5967] pwc: Registered as video103. [ 205.575496][ T5967] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input8 [ 205.733291][ T5967] usb 7-1: USB disconnect, device number 2 [ 205.739682][ T7791] netlink: 27 bytes leftover after parsing attributes in process `syz.4.410'. [ 205.977429][ T7798] overlayfs: failed to resolve './file1': -2 [ 206.726306][ T7808] fuse: Unknown parameter '0x0000000000000003' [ 206.778107][ T5839] Bluetooth: hci2: unexpected cc 0x203e length: 2 > 1 [ 207.740316][ T30] audit: type=1326 audit(1753818301.125:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7820 comm="syz.4.418" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f930dd8e9a9 code=0x0 [ 207.792382][ T5839] Bluetooth: hci2: unexpected cc 0x0c58 length: 4 > 2 [ 208.450424][ T10] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 208.617839][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 208.638254][ T10] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 208.658787][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.683180][ T10] usb 3-1: config 0 descriptor?? [ 208.703465][ T10] pwc: Askey VC010 type 2 USB webcam detected. [ 208.970412][ T7854] 9pnet_virtio: no channels available for device syz [ 209.562732][ T10] pwc: recv_control_msg error -32 req 02 val 2b00 [ 209.589568][ T30] audit: type=1400 audit(1753818303.045:314): avc: denied { sqpoll } for pid=7857 comm="syz.5.425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 209.820892][ T10] pwc: recv_control_msg error -32 req 02 val 2c00 [ 210.572104][ T10] pwc: recv_control_msg error -71 req 04 val 1000 [ 210.590305][ T10] pwc: recv_control_msg error -71 req 04 val 1300 [ 210.600674][ T10] pwc: recv_control_msg error -71 req 04 val 1400 [ 210.611666][ T10] pwc: recv_control_msg error -71 req 02 val 2000 [ 210.618729][ T10] pwc: recv_control_msg error -71 req 02 val 2100 [ 210.626197][ T10] pwc: recv_control_msg error -71 req 04 val 1500 [ 211.467706][ T10] pwc: recv_control_msg error -71 req 02 val 2500 [ 211.490384][ T10] pwc: recv_control_msg error -71 req 02 val 2400 [ 211.502832][ T10] pwc: recv_control_msg error -71 req 02 val 2600 [ 211.509792][ T10] pwc: recv_control_msg error -71 req 02 val 2900 [ 211.518542][ T10] pwc: recv_control_msg error -71 req 02 val 2800 [ 211.830403][ T5839] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 211.838996][ T5839] Bluetooth: hci2: Injecting HCI hardware error event [ 211.847239][ T50] Bluetooth: hci2: hardware error 0x00 [ 211.853084][ T10] pwc: recv_control_msg error -71 req 04 val 1100 [ 211.881911][ T10] pwc: recv_control_msg error -71 req 04 val 1200 [ 211.926205][ T10] pwc: Registered as video103. [ 211.936561][ T7875] netlink: 12 bytes leftover after parsing attributes in process `syz.6.429'. [ 211.947178][ T10] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input9 [ 211.991003][ T7877] fuse: Unknown parameter '0x0000000000000003' [ 211.995089][ T10] usb 3-1: USB disconnect, device number 11 [ 212.620074][ T30] audit: type=1400 audit(1753818306.015:315): avc: denied { getopt } for pid=7895 comm="syz.4.433" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 212.856553][ T30] audit: type=1400 audit(1753818306.115:316): avc: denied { ioctl } for pid=7895 comm="syz.4.433" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 212.942018][ T7901] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 213.007213][ T7901] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 214.062429][ T50] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 215.110730][ T10] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 215.334616][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 215.399165][ T10] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 215.430290][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.454561][ T10] usb 6-1: config 0 descriptor?? [ 215.488927][ T10] pwc: Askey VC010 type 2 USB webcam detected. [ 216.072370][ T10] pwc: recv_control_msg error -32 req 02 val 2b00 [ 216.257615][ T7947] netlink: 12 bytes leftover after parsing attributes in process `syz.3.445'. [ 216.309071][ T10] pwc: recv_control_msg error -32 req 02 val 2c00 [ 216.401187][ T10] pwc: recv_control_msg error -71 req 04 val 1000 [ 216.431091][ T10] pwc: recv_control_msg error -71 req 04 val 1300 [ 216.456160][ T10] pwc: recv_control_msg error -71 req 04 val 1400 [ 216.593939][ T10] pwc: recv_control_msg error -71 req 02 val 2000 [ 216.640195][ T10] pwc: recv_control_msg error -71 req 02 val 2100 [ 216.723372][ T10] pwc: recv_control_msg error -71 req 04 val 1500 [ 216.924347][ T10] pwc: recv_control_msg error -71 req 02 val 2500 [ 216.954577][ T10] pwc: recv_control_msg error -71 req 02 val 2400 [ 216.972117][ T7964] fuse: Unknown parameter '0x0000000000000005' [ 216.983567][ T10] pwc: recv_control_msg error -71 req 02 val 2600 [ 217.020364][ T10] pwc: recv_control_msg error -71 req 02 val 2900 [ 217.039082][ T10] pwc: recv_control_msg error -71 req 02 val 2800 [ 217.111097][ T10] pwc: recv_control_msg error -71 req 04 val 1100 [ 217.132671][ T10] pwc: recv_control_msg error -71 req 04 val 1200 [ 217.165742][ T10] pwc: Registered as video103. [ 217.241868][ T10] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input10 [ 217.299013][ T10] usb 6-1: USB disconnect, device number 5 [ 217.474669][ T30] audit: type=1400 audit(1753818310.935:317): avc: denied { mount } for pid=7979 comm="syz.6.453" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 217.516366][ T7980] netlink: 20 bytes leftover after parsing attributes in process `syz.6.453'. [ 217.947808][ T30] audit: type=1400 audit(1753818311.405:318): avc: denied { unmount } for pid=6856 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 219.636421][ T30] audit: type=1400 audit(1753818313.085:319): avc: denied { create } for pid=7976 comm="syz.2.452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 219.940448][ T50] Bluetooth: Frame is too long (len 18, expected len 4) [ 220.310347][ T5909] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 220.492661][ T5909] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 220.542270][ T5909] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 220.600773][ T5909] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.648010][ T5909] usb 7-1: config 0 descriptor?? [ 220.675439][ T5909] pwc: Askey VC010 type 2 USB webcam detected. [ 221.084844][ T5909] pwc: recv_control_msg error -32 req 02 val 2b00 [ 221.336507][ T5909] pwc: recv_control_msg error -32 req 02 val 2c00 [ 221.488848][ T5909] pwc: recv_control_msg error -71 req 04 val 1000 [ 221.555629][ T5909] pwc: recv_control_msg error -71 req 04 val 1300 [ 221.569817][ T5909] pwc: recv_control_msg error -71 req 04 val 1400 [ 221.603307][ T5909] pwc: recv_control_msg error -71 req 02 val 2000 [ 221.637757][ T5909] pwc: recv_control_msg error -71 req 02 val 2100 [ 221.668259][ T5909] pwc: recv_control_msg error -71 req 04 val 1500 [ 221.697655][ T5909] pwc: recv_control_msg error -71 req 02 val 2500 [ 221.722274][ T5909] pwc: recv_control_msg error -71 req 02 val 2400 [ 221.743744][ T5909] pwc: recv_control_msg error -71 req 02 val 2600 [ 221.770332][ T5909] pwc: recv_control_msg error -71 req 02 val 2900 [ 221.803007][ T5909] pwc: recv_control_msg error -71 req 02 val 2800 [ 221.844317][ T5909] pwc: recv_control_msg error -71 req 04 val 1100 [ 221.873137][ T5909] pwc: recv_control_msg error -71 req 04 val 1200 [ 222.176156][ T8051] 9pnet_virtio: no channels available for device syz [ 222.499693][ T5909] pwc: Registered as video103. [ 222.548633][ T5909] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input11 [ 222.753115][ T5909] usb 7-1: USB disconnect, device number 3 [ 223.053244][ T8068] fuse: Unknown parameter '0x0000000000000003' [ 223.290324][ T50] Bluetooth: Frame is too long (len 18, expected len 4) [ 223.796438][ T30] audit: type=1400 audit(1753818317.065:320): avc: denied { bind } for pid=8073 comm="syz.3.473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 224.051516][ T30] audit: type=1400 audit(1753818317.515:321): avc: denied { map } for pid=8080 comm="syz.4.475" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 224.091022][ T5967] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 224.121450][ T30] audit: type=1400 audit(1753818317.515:322): avc: denied { execute } for pid=8080 comm="syz.4.475" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 224.501881][ T5967] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 224.526822][ T5967] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 224.541107][ T5967] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 224.552771][ T5967] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.691086][ T5967] usb 4-1: config 0 descriptor?? [ 226.362140][ T5967] usb 4-1: USB disconnect, device number 11 [ 226.807711][ T8134] fuse: Unknown parameter '0x0000000000000003' [ 227.007756][ T8140] netlink: 4 bytes leftover after parsing attributes in process `syz.3.482'. [ 227.069959][ T8140] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.078975][ T8140] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.087823][ T8140] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.096882][ T8140] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.112244][ T8140] vxlan0: entered promiscuous mode [ 228.295655][ T30] audit: type=1400 audit(1753818321.185:323): avc: denied { append } for pid=8147 comm="syz.6.487" name="comedi3" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 229.021546][ T8161] fuse: Unknown parameter '0x0000000000000005' [ 229.064412][ T30] audit: type=1400 audit(1753818322.525:324): avc: denied { create } for pid=8158 comm="syz.4.491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 230.254792][ T8184] ubi31: attaching mtd0 [ 230.438174][ T8184] ubi31: scanning is finished [ 230.443073][ T8184] ubi31: empty MTD device detected [ 230.863052][ T8184] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 232.690749][ T8205] 9pnet: Found fid 0 not clunked [ 233.919679][ T8218] fuse: Unknown parameter 'fd0x0000000000000003' [ 234.129919][ T30] audit: type=1400 audit(1753818327.585:325): avc: denied { setopt } for pid=8221 comm="syz.2.511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 234.670043][ T8234] Invalid source name [ 234.674288][ T8234] UBIFS error (pid: 8234): cannot open "/dev/sg0", error -22 [ 235.426443][ T50] Bluetooth: Frame is too long (len 18, expected len 4) [ 237.977420][ T8268] netlink: 'syz.4.527': attribute type 64 has an invalid length. [ 237.985277][ T8268] netlink: 'syz.4.527': attribute type 4 has an invalid length. [ 237.993009][ T8268] netlink: 152 bytes leftover after parsing attributes in process `syz.4.527'. [ 239.126003][ T30] audit: type=1400 audit(1753818332.585:326): avc: denied { name_bind } for pid=8283 comm="syz.4.530" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 239.362325][ T8290] capability: warning: `syz.4.530' uses 32-bit capabilities (legacy support in use) [ 240.162245][ T50] Bluetooth: Frame is too long (len 18, expected len 4) [ 246.761853][ T8360] Invalid source name [ 246.765979][ T8360] UBIFS error (pid: 8360): cannot open "/dev/sg0", error -22 [ 249.230274][ T5889] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 249.232147][ T8384] Invalid ELF header magic: != ELF [ 249.251770][ T30] audit: type=1400 audit(1753818342.695:327): avc: denied { module_load } for pid=8383 comm="syz.3.560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 249.480665][ T5889] usb 6-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 249.515911][ T5889] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.583015][ T5889] usb 6-1: config 0 descriptor?? [ 250.974286][ T5889] usb 6-1: selecting invalid altsetting 1 [ 251.015210][ T5889] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 251.144130][ T5827] udevd[5827]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 251.305324][ T8375] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=8375 comm=syz.5.557 [ 251.362360][ T5889] usb 6-1: USB disconnect, device number 6 [ 251.639297][ T8403] 9pnet: Found fid 0 not clunked [ 252.360276][ T5967] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 252.522793][ T5967] usb 6-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 252.586811][ T5967] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.669560][ T5967] usb 6-1: config 0 descriptor?? [ 252.762223][ T5967] usb 6-1: selecting invalid altsetting 1 [ 252.852787][ T5967] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 253.163569][ T5909] usb 6-1: USB disconnect, device number 7 [ 253.444803][ T8432] netlink: 4 bytes leftover after parsing attributes in process `syz.2.573'. [ 253.472615][ T8432] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.481375][ T8432] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.490077][ T8432] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.498963][ T8432] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.509828][ T8432] vxlan0: entered promiscuous mode [ 254.353110][ T50] Bluetooth: hci1: unexpected cc 0x0c58 length: 4 > 2 [ 254.859697][ T8454] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 255.284856][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.291419][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.533190][ T8474] ubi31: attaching mtd0 [ 255.549858][ T8474] ubi31: scanning is finished [ 256.156183][ T8477] netlink: 4 bytes leftover after parsing attributes in process `syz.2.586'. [ 256.596054][ T8474] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 256.825200][ T50] Bluetooth: hci4: unexpected cc 0x0c58 length: 4 > 2 [ 256.832707][ T50] Bluetooth: hci4: unexpected event for opcode 0x0c58 [ 258.390591][ T50] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 258.400029][ T50] Bluetooth: hci1: Injecting HCI hardware error event [ 258.408172][ T50] Bluetooth: hci1: hardware error 0x00 [ 258.532295][ T5967] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 258.876947][ T9] hid-generic 0002:0081:0005.0009: item fetching failed at offset 7/27 [ 258.916728][ T9] hid-generic 0002:0081:0005.0009: probe with driver hid-generic failed with error -22 [ 259.000371][ T5967] usb 4-1: Using ep0 maxpacket: 32 [ 259.340681][ T5967] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.412903][ T8519] afs: Unknown parameter '' [ 259.859307][ T5967] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 259.869488][ T5967] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 259.889095][ T5967] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.900149][ T5967] usb 4-1: config 0 descriptor?? [ 259.907738][ T5967] hub 4-1:0.0: USB hub found [ 260.530318][ T50] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 260.544201][ T5967] hub 4-1:0.0: 1 port detected [ 261.621862][ T50] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 261.633219][ T50] Bluetooth: hci4: Injecting HCI hardware error event [ 261.647504][ T50] Bluetooth: hci4: hardware error 0x00 [ 261.916490][ T5967] hub 4-1:0.0: activate --> -90 [ 262.109887][ T8541] netlink: 44 bytes leftover after parsing attributes in process `syz.5.607'. [ 262.155826][ T5889] usb 4-1: USB disconnect, device number 12 [ 262.159506][ T5967] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 263.020804][ T8555] netlink: 8 bytes leftover after parsing attributes in process `syz.6.609'. [ 263.030924][ T8555] IPVS: Error joining to the multicast group [ 264.115426][ T50] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 264.197758][ T8564] afs: Unknown parameter '' [ 266.033723][ T8586] netlink: 'syz.5.620': attribute type 1 has an invalid length. [ 266.041752][ T8586] netlink: 224 bytes leftover after parsing attributes in process `syz.5.620'. [ 266.900476][ T5967] hid-generic 0002:0081:0005.000A: item fetching failed at offset 7/27 [ 266.970738][ T5967] hid-generic 0002:0081:0005.000A: probe with driver hid-generic failed with error -22 [ 268.591886][ T8610] fuse: Bad value for 'fd' [ 270.672826][ T8621] 9pnet: Found fid 0 not clunked [ 272.722078][ T8654] netlink: 180 bytes leftover after parsing attributes in process `syz.2.638'. [ 273.267982][ T8651] sctp: failed to load transform for md5: -2 [ 274.258197][ T30] audit: type=1400 audit(1753818367.025:328): avc: denied { connect } for pid=8660 comm="syz.4.639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 274.310901][ T5967] hid-generic 0002:0081:0005.000B: item fetching failed at offset 7/27 [ 274.319667][ T5967] hid-generic 0002:0081:0005.000B: probe with driver hid-generic failed with error -22 [ 274.378206][ T30] audit: type=1400 audit(1753818367.025:329): avc: denied { write } for pid=8660 comm="syz.4.639" path="socket:[17376]" dev="sockfs" ino=17376 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 274.490015][ T30] audit: type=1400 audit(1753818367.035:330): avc: denied { read } for pid=8660 comm="syz.4.639" path="socket:[17376]" dev="sockfs" ino=17376 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 274.599293][ T8673] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 274.720306][ T5889] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 275.010256][ T5889] usb 5-1: Using ep0 maxpacket: 32 [ 275.016985][ T5889] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 275.032119][ T5889] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 276.020501][ T5889] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 276.040234][ T5889] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.226395][ T5889] usb 5-1: config 0 descriptor?? [ 276.379469][ T5889] hub 5-1:0.0: USB hub found [ 276.396323][ T8694] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.405216][ T8694] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.703156][ T5889] hub 5-1:0.0: 1 port detected [ 277.698636][ T5889] usb 5-1: USB disconnect, device number 12 [ 278.121706][ T8716] ubi31: attaching mtd0 [ 278.179906][ T8716] ubi31: scanning is finished [ 280.270248][ T30] audit: type=1400 audit(1753818373.435:331): avc: denied { getopt } for pid=8725 comm="syz.4.659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 280.371795][ T8716] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 280.655026][ T8740] netlink: 8 bytes leftover after parsing attributes in process `syz.2.663'. [ 280.750269][ T8741] hub 2-0:1.0: USB hub found [ 280.788292][ T8741] hub 2-0:1.0: 1 port detected [ 281.300351][ T8751] overlayfs: failed to resolve './file0': -2 [ 281.355829][ T8752] overlayfs: missing 'lowerdir' [ 281.741708][ T8757] Invalid ELF section header size [ 282.254549][ T5889] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 282.503490][ T5889] usb 3-1: Using ep0 maxpacket: 32 [ 282.577824][ T5889] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.699288][ T5889] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 282.786857][ T5889] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 283.088146][ T5889] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.123218][ T5889] usb 3-1: config 0 descriptor?? [ 283.157154][ T5889] hub 3-1:0.0: USB hub found [ 283.468783][ T5889] hub 3-1:0.0: 1 port detected [ 283.554203][ T8776] netlink: 12 bytes leftover after parsing attributes in process `syz.4.673'. [ 283.999864][ T8790] overlayfs: missing 'lowerdir' [ 284.011259][ T24] hub 3-1:0.0: activate --> -90 [ 284.090308][ T5889] usb 7-1: new low-speed USB device number 4 using dummy_hcd [ 284.217364][ T24] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 284.225174][ T24] usb 3-1: USB disconnect, device number 12 [ 284.231483][ T78] usb 3-1: Failed to suspend device, error -19 [ 284.238072][ T5889] usb 7-1: device descriptor read/64, error -71 [ 284.520324][ T5889] usb 7-1: new low-speed USB device number 5 using dummy_hcd [ 284.660302][ T5889] usb 7-1: device descriptor read/64, error -71 [ 284.780684][ T5889] usb usb7-port1: attempt power cycle [ 285.211092][ T8801] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 285.421213][ T8803] overlayfs: failed to resolve './file0': -2 [ 285.477105][ T8804] overlayfs: missing 'lowerdir' [ 285.547121][ T5889] usb 7-1: new low-speed USB device number 6 using dummy_hcd [ 285.649748][ T5889] usb 7-1: device descriptor read/8, error -71 [ 285.882284][ T8808] netlink: 8 bytes leftover after parsing attributes in process `syz.2.681'. [ 285.892494][ T8808] IPVS: Error joining to the multicast group [ 286.369389][ T5889] usb 7-1: new low-speed USB device number 7 using dummy_hcd [ 286.404409][ T5889] usb 7-1: device descriptor read/8, error -71 [ 286.570558][ T5967] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 286.690471][ T1207] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 286.822779][ T5967] usb 4-1: Using ep0 maxpacket: 8 [ 286.853626][ T5889] usb usb7-port1: unable to enumerate USB device [ 286.960094][ T5967] usb 4-1: config index 0 descriptor too short (expected 6427, got 27) [ 287.058277][ T5967] usb 4-1: config 0 has an invalid interface number: 21 but max is 0 [ 287.081087][ T1207] usb 6-1: Using ep0 maxpacket: 16 [ 287.135949][ T5967] usb 4-1: config 0 has no interface number 0 [ 287.221351][ T5967] usb 4-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0x12, changing to 0x2 [ 287.362250][ T5967] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x2 has an invalid bInterval 162, changing to 11 [ 287.392598][ T1207] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 287.469113][ T5967] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x2 has invalid maxpacket 17903, setting to 1024 [ 287.511471][ T1207] usb 6-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 287.606764][ T5967] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 287.620496][ T1207] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.652207][ T5967] usb 4-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 287.664046][ T1207] usb 6-1: config 0 descriptor?? [ 288.299639][ T1207] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 288.497887][ T5967] usb 4-1: Product: syz [ 288.512300][ T5967] usb 4-1: Manufacturer: syz [ 288.524801][ T5967] usb 4-1: config 0 descriptor?? [ 288.531139][ T8810] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 288.901682][ T78] usb 4-1: USB disconnect, device number 13 [ 289.070404][ T1207] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 289.230295][ T1207] usb 5-1: Using ep0 maxpacket: 32 [ 289.237248][ T1207] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 289.250167][ T1207] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 289.261309][ T1207] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 289.270400][ T1207] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.280562][ T1207] usb 5-1: config 0 descriptor?? [ 289.288272][ T1207] hub 5-1:0.0: USB hub found [ 289.489394][ T1207] hub 5-1:0.0: 1 port detected [ 289.567319][ T78] usb 6-1: USB disconnect, device number 8 [ 290.692506][ T5967] hub 5-1:0.0: activate --> -90 [ 290.894738][ T5889] usb 5-1: USB disconnect, device number 13 [ 291.168887][ T8913] overlayfs: failed to resolve './file0': -2 [ 291.223661][ T8914] overlayfs: missing 'lowerdir' [ 292.966465][ T30] audit: type=1400 audit(1753818386.415:332): avc: denied { getopt } for pid=8921 comm="syz.2.704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 293.576183][ T30] audit: type=1400 audit(1753818387.035:333): avc: denied { ioctl } for pid=8929 comm="syz.4.706" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0xaed5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 294.000271][ T5889] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 294.119716][ T8954] ubi31: attaching mtd0 [ 294.132492][ T8954] ubi31: scanning is finished [ 294.149740][ T30] audit: type=1400 audit(1753818387.535:334): avc: denied { read } for pid=8947 comm="syz.6.713" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 294.595340][ T30] audit: type=1400 audit(1753818387.535:335): avc: denied { open } for pid=8947 comm="syz.6.713" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 294.623262][ T30] audit: type=1400 audit(1753818387.565:336): avc: denied { ioctl } for pid=8947 comm="syz.6.713" path="socket:[19501]" dev="sockfs" ino=19501 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 294.722200][ T8954] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 294.729808][ T8954] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 294.737190][ T8954] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 294.744271][ T8954] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 294.751726][ T8954] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 294.758549][ T8954] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 294.766606][ T8954] ubi31: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 3076403364 [ 294.776727][ T8954] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 294.787591][ T8958] ubi31: background thread "ubi_bgt31d" started, PID 8958 [ 294.881384][ T5889] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 294.892670][ T5889] usb 4-1: config 0 has no interfaces? [ 294.898132][ T5889] usb 4-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 294.945190][ T5889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.978406][ T5889] usb 4-1: config 0 descriptor?? [ 295.011828][ T8960] netlink: 34 bytes leftover after parsing attributes in process `syz.6.714'. [ 295.062998][ T8960] netlink: 12 bytes leftover after parsing attributes in process `syz.6.714'. [ 295.199262][ T5889] usb 4-1: USB disconnect, device number 14 [ 296.480455][ T8981] netlink: 'syz.2.719': attribute type 1 has an invalid length. [ 296.906473][ T8981] netlink: 224 bytes leftover after parsing attributes in process `syz.2.719'. [ 298.316543][ T30] audit: type=1400 audit(1753818391.775:337): avc: denied { write } for pid=9002 comm="syz.3.724" lport=46753 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 298.341483][ T9004] netlink: 180 bytes leftover after parsing attributes in process `syz.3.724'. [ 298.740502][ T1207] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 298.787694][ T30] audit: type=1400 audit(1753818392.245:338): avc: denied { write } for pid=9030 comm="syz.4.729" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 298.902429][ T1207] usb 4-1: Using ep0 maxpacket: 16 [ 298.922963][ T1207] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 298.961013][ T1207] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 299.752245][ T1207] usb 4-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 299.761768][ T1207] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.772325][ T1207] usb 4-1: config 0 descriptor?? [ 299.802843][ T1207] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 301.301861][ T78] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 301.480302][ T78] usb 3-1: Using ep0 maxpacket: 32 [ 301.493535][ T78] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 301.506507][ T78] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 301.524329][ T78] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 301.741420][ T1207] usb 4-1: USB disconnect, device number 15 [ 301.875328][ T78] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.464036][ T9075] netlink: 8 bytes leftover after parsing attributes in process `syz.6.737'. [ 303.480946][ T78] usb 3-1: config 0 descriptor?? [ 303.505138][ T78] usb 3-1: can't set config #0, error -71 [ 303.670373][ T78] usb 3-1: USB disconnect, device number 13 [ 310.206967][ T9] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 310.661890][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 310.671726][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 310.692775][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 310.703304][ T9] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 310.713610][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.729732][ T9] usb 7-1: config 0 descriptor?? [ 310.742122][ T9] hub 7-1:0.0: USB hub found [ 311.204205][ T9] hub 7-1:0.0: 1 port detected [ 312.310138][ T9] hub 7-1:0.0: hub_ext_port_status failed (err = -71) [ 312.311823][ T78] usb 7-1: USB disconnect, device number 8 [ 312.724581][ T9195] netlink: 'syz.2.776': attribute type 4 has an invalid length. [ 312.732256][ T9195] netlink: 28 bytes leftover after parsing attributes in process `syz.2.776'. [ 312.785439][ T9196] netlink: 56 bytes leftover after parsing attributes in process `syz.2.776'. [ 312.892835][ T9202] tmpfs: Bad value for 'mpol' [ 312.927508][ T9195] netlink: 52 bytes leftover after parsing attributes in process `syz.2.776'. [ 313.000556][ T1207] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 313.194435][ T1207] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 313.206715][ T1207] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 313.260275][ T1207] usb 5-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 313.269375][ T1207] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.330708][ T1207] usb 5-1: config 0 descriptor?? [ 313.581048][ T1207] usb 5-1: USB disconnect, device number 14 [ 313.773936][ T9209] 9pnet: Found fid 0 not clunked [ 314.072329][ T30] audit: type=1400 audit(1753818407.525:339): avc: denied { mounton } for pid=9217 comm="syz.2.783" path="/proc/551/task" dev="proc" ino=19251 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 316.730912][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.050276][ T5967] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 317.253669][ T5967] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 317.273171][ T5967] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 317.297331][ T5967] usb 6-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 317.310875][ T5967] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.326314][ T5967] usb 6-1: config 0 descriptor?? [ 317.813040][ T1207] usb 6-1: USB disconnect, device number 9 [ 317.944711][ T30] audit: type=1400 audit(1753818411.405:340): avc: denied { append } for pid=9271 comm="syz.6.799" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 318.628379][ T9281] netlink: 20 bytes leftover after parsing attributes in process `syz.5.803'. [ 318.628430][ T9285] 9pnet_fd: Insufficient options for proto=fd [ 318.663476][ T9281] netlink: 4 bytes leftover after parsing attributes in process `syz.5.803'. [ 318.786107][ T9292] netlink: 'syz.6.807': attribute type 1 has an invalid length. [ 318.794091][ T9292] netlink: 224 bytes leftover after parsing attributes in process `syz.6.807'. [ 319.097513][ T9296] tipc: Enabling of bearer rejected, already enabled [ 321.121176][ T24] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 321.457112][ T9321] 9pnet: Found fid 0 not clunked [ 321.483147][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 321.494310][ T24] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 321.508471][ T24] usb 3-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 321.593681][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.696932][ T24] usb 3-1: config 0 descriptor?? [ 321.924451][ T1207] usb 3-1: USB disconnect, device number 14 [ 322.288625][ T9340] netlink: 27 bytes leftover after parsing attributes in process `syz.4.820'. [ 322.854234][ T24] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 324.256256][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 324.270505][ T24] usb 4-1: config index 0 descriptor too short (expected 6427, got 27) [ 324.312694][ T24] usb 4-1: config 0 has an invalid interface number: 21 but max is 0 [ 324.322092][ T24] usb 4-1: config 0 has no interface number 0 [ 324.328434][ T24] usb 4-1: config 0 interface 21 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 324.362746][ T24] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 324.388464][ T24] usb 4-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 324.410258][ T24] usb 4-1: Product: syz [ 324.420276][ T24] usb 4-1: Manufacturer: syz [ 324.437632][ T24] usb 4-1: config 0 descriptor?? [ 325.046113][ T5967] usb 4-1: USB disconnect, device number 16 [ 325.415204][ T9378] 9pnet: Found fid 0 not clunked [ 325.816793][ T9385] Invalid source name [ 325.821260][ T9385] UBIFS error (pid: 9385): cannot open "/dev/sg0", error -22 [ 327.003416][ T50] Bluetooth: hci3: unexpected event for opcode 0x0000 [ 328.520446][ T5967] usb 5-1: new low-speed USB device number 15 using dummy_hcd [ 328.682228][ T5967] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 328.718648][ T5967] usb 5-1: config 0 has no interfaces? [ 328.737065][ T5967] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 328.769163][ T5967] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.812962][ T5967] usb 5-1: config 0 descriptor?? [ 329.815743][ T9433] netlink: 27 bytes leftover after parsing attributes in process `syz.3.850'. [ 330.307857][ T5967] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 330.319653][ T9444] hub 2-0:1.0: USB hub found [ 330.324446][ T9444] hub 2-0:1.0: 1 port detected [ 330.463700][ T5967] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 330.475290][ T5967] usb 3-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 330.490338][ T5967] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.600096][ T5967] usb 3-1: config 0 descriptor?? [ 331.030363][ T50] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 331.039670][ T50] Bluetooth: hci3: Injecting HCI hardware error event [ 331.048796][ T5839] Bluetooth: hci3: hardware error 0x00 [ 331.366862][ T5967] nintendo 0003:057E:200E.000C: item fetching failed at offset 3/7 [ 331.515969][ T5967] nintendo 0003:057E:200E.000C: HID parse failed [ 332.172762][ T5967] nintendo 0003:057E:200E.000C: probe - fail = -22 [ 332.181815][ T1207] usb 5-1: USB disconnect, device number 15 [ 332.404722][ T5967] nintendo 0003:057E:200E.000C: probe with driver nintendo failed with error -22 [ 332.941718][ T9457] tipc: Enabling of bearer rejected, already enabled [ 333.004197][ T5967] usb 3-1: USB disconnect, device number 15 [ 333.572618][ T9474] : entered promiscuous mode [ 334.070293][ T5839] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 335.450956][ T78] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 335.471381][ T9497] netlink: 20 bytes leftover after parsing attributes in process `syz.2.870'. [ 335.491390][ T9497] netlink: 4 bytes leftover after parsing attributes in process `syz.2.870'. [ 335.622406][ T78] usb 4-1: Using ep0 maxpacket: 32 [ 335.639649][ T78] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 335.649599][ T9499] netlink: 27 bytes leftover after parsing attributes in process `syz.2.871'. [ 335.662165][ T5967] usb 7-1: new low-speed USB device number 9 using dummy_hcd [ 335.676097][ T78] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 335.714841][ T78] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 335.728752][ T78] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.756015][ T78] usb 4-1: config 0 descriptor?? [ 335.779538][ T78] hub 4-1:0.0: USB hub found [ 335.851362][ T5967] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 335.875350][ T5967] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 335.896224][ T5967] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 335.909324][ T5967] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.496701][ T5967] usb 7-1: config 0 descriptor?? [ 336.633493][ T78] hub 4-1:0.0: 1 port detected [ 336.876906][ T9517] netlink: 'syz.5.876': attribute type 1 has an invalid length. [ 336.884829][ T9517] netlink: 224 bytes leftover after parsing attributes in process `syz.5.876'. [ 337.266620][ T5889] hub 4-1:0.0: activate --> -90 [ 337.471330][ T5967] usb 4-1: USB disconnect, device number 17 [ 338.113798][ T5947] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 339.130240][ T5947] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 339.139345][ T5947] usb 5-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 339.153587][ T5947] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.180289][ T1207] usb 7-1: USB disconnect, device number 9 [ 339.191925][ T5947] usb 5-1: config 0 descriptor?? [ 339.391619][ T5947] IPVS: starting estimator thread 0... [ 339.403280][ T1207] usb 5-1: USB disconnect, device number 16 [ 339.490972][ T9549] IPVS: using max 72 ests per chain, 172800 per kthread [ 339.971325][ T9558] netlink: 27 bytes leftover after parsing attributes in process `syz.4.885'. [ 340.341953][ T9564] Bluetooth: MGMT ver 1.23 [ 342.025846][ T9585] hub 2-0:1.0: USB hub found [ 342.609923][ T9585] hub 2-0:1.0: 1 port detected [ 342.734464][ T9588] netlink: 27 bytes leftover after parsing attributes in process `syz.2.897'. [ 343.747434][ T9608] netlink: 40 bytes leftover after parsing attributes in process `syz.4.901'. [ 345.280067][ T5889] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 345.990410][ T5889] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 346.010473][ T5889] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 346.019694][ T5889] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 346.029284][ T5889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.041052][ T5889] usb 4-1: config 0 descriptor?? [ 347.398352][ T1207] usb 4-1: USB disconnect, device number 18 [ 347.704321][ T5909] IPVS: starting estimator thread 0... [ 347.800300][ T9654] IPVS: using max 38 ests per chain, 91200 per kthread [ 348.099190][ T9663] 9pnet: Found fid 0 not clunked [ 349.014953][ T9670] Invalid source name [ 349.018967][ T9670] UBIFS error (pid: 9670): cannot open "/dev/sg0", error -22 [ 352.704219][ T9721] Invalid source name [ 352.715807][ T9721] UBIFS error (pid: 9721): cannot open "/dev/sg0", error -22 [ 353.253091][ T9730] netlink: 'syz.3.937': attribute type 1 has an invalid length. [ 353.269393][ T9730] netlink: 224 bytes leftover after parsing attributes in process `syz.3.937'. [ 353.841130][ T9738] overlayfs: failed to resolve './file0': -2 [ 353.896052][ T9739] overlayfs: missing 'lowerdir' [ 354.804735][ T9757] overlayfs: failed to resolve './file0': -2 [ 355.289717][ T9760] Invalid source name [ 355.293998][ T9760] UBIFS error (pid: 9760): cannot open "/dev/sg0", error -22 [ 357.006089][ T9782] netlink: 'syz.6.954': attribute type 1 has an invalid length. [ 357.021561][ T9782] netlink: 224 bytes leftover after parsing attributes in process `syz.6.954'. [ 357.384640][ T9781] overlayfs: failed to resolve './file0': -2 [ 357.972520][ T9802] 9pnet_fd: Insufficient options for proto=fd [ 358.041344][ T9803] ubi: mtd0 is already attached to ubi31 [ 359.494038][ T9819] Invalid ELF section header size [ 360.340622][ T78] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 360.540951][ T78] usb 7-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 360.554478][ T78] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.571441][ T78] usb 7-1: config 0 descriptor?? [ 360.682459][ T78] usb 7-1: selecting invalid altsetting 1 [ 360.944284][ T78] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 361.451266][ T5827] udevd[5827]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 362.917203][ T9860] netlink: 'syz.5.977': attribute type 4 has an invalid length. [ 362.925081][ T9860] netlink: 28 bytes leftover after parsing attributes in process `syz.5.977'. [ 362.980459][ T78] usb 7-1: USB disconnect, device number 10 [ 363.119456][ T9863] netlink: 56 bytes leftover after parsing attributes in process `syz.5.977'. [ 363.166328][ T9859] tmpfs: Bad value for 'mpol' [ 363.175672][ T9859] netlink: 52 bytes leftover after parsing attributes in process `syz.5.977'. [ 364.365041][ T30] audit: type=1400 audit(1753818457.815:341): avc: denied { create } for pid=9885 comm="syz.4.988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 364.640749][ T5967] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 365.255581][ T5967] usb 5-1: Using ep0 maxpacket: 16 [ 365.266144][ T5967] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 365.289318][ T5967] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 365.332783][ T5967] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 365.345900][ T9900] netlink: 27 bytes leftover after parsing attributes in process `syz.6.991'. [ 365.370779][ T5967] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 365.403597][ T5967] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.434584][ T5967] usb 5-1: config 0 descriptor?? [ 365.734266][ T9908] ubi: mtd0 is already attached to ubi31 [ 366.399737][ T9910] netlink: 'syz.6.993': attribute type 4 has an invalid length. [ 366.407783][ T9910] netlink: 28 bytes leftover after parsing attributes in process `syz.6.993'. [ 366.485964][ T9910] netlink: 56 bytes leftover after parsing attributes in process `syz.6.993'. [ 366.520339][ T9910] tmpfs: Bad value for 'mpol' [ 366.534258][ T9910] netlink: 52 bytes leftover after parsing attributes in process `syz.6.993'. [ 367.044279][ T9918] random: crng reseeded on system resumption [ 368.270302][ T30] audit: type=1400 audit(1753818460.405:342): avc: denied { read } for pid=9885 comm="syz.4.988" path="socket:[22063]" dev="sockfs" ino=22063 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 368.311750][ T30] audit: type=1400 audit(1753818460.505:343): avc: denied { read write } for pid=9885 comm="syz.4.988" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 368.344214][ T30] audit: type=1400 audit(1753818460.505:344): avc: denied { ioctl open } for pid=9885 comm="syz.4.988" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 369.343343][ T9933] netlink: 8 bytes leftover after parsing attributes in process `syz.6.999'. [ 369.582080][ T9937] Invalid source name [ 369.586118][ T9937] UBIFS error (pid: 9937): cannot open "/dev/sg0", error -22 [ 369.690831][ T5967] usbhid 5-1:0.0: can't add hid device: -71 [ 369.701657][ T5967] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 369.732126][ T5967] usb 5-1: USB disconnect, device number 17 [ 369.740258][ T5947] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 370.250310][ T5947] usb 3-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 370.259481][ T5947] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.941097][ T5947] usb 3-1: config 0 descriptor?? [ 371.012444][ T5947] usb 3-1: selecting invalid altsetting 1 [ 371.038509][ T5947] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 371.068557][ T5827] udevd[5827]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 371.460263][ T5947] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 371.702747][ T5947] usb 4-1: config 0 interface 0 altsetting 12 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 371.718728][ T5947] usb 4-1: config 0 interface 0 altsetting 12 endpoint 0x81 has invalid wMaxPacketSize 0 [ 371.736062][ T5947] usb 4-1: config 0 interface 0 has no altsetting 0 [ 372.255514][ T5947] usb 4-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 372.264927][ T5947] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.281849][ T5947] usb 4-1: config 0 descriptor?? [ 372.721379][ T5947] usbhid 4-1:0.0: can't add hid device: -71 [ 372.754144][ T5947] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 372.792535][ T5947] usb 4-1: USB disconnect, device number 19 [ 372.935781][ T9976] Invalid source name [ 372.939884][ T9976] UBIFS error (pid: 9976): cannot open "/dev/sg0", error -22 [ 373.435974][ T9981] overlayfs: failed to resolve './file0': -2 [ 374.015854][ T78] usb 3-1: USB disconnect, device number 16 [ 374.964117][T10000] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1020'. [ 375.210261][ T78] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 375.353298][T10015] 9pnet_virtio: no channels available for device syz [ 375.752199][ T78] usb 3-1: Using ep0 maxpacket: 32 [ 375.759034][ T78] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 375.770547][ T78] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 375.780887][ T78] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 375.790094][ T78] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.803860][ T78] usb 3-1: config 0 descriptor?? [ 375.812437][ T78] hub 3-1:0.0: USB hub found [ 376.012501][ T78] hub 3-1:0.0: 1 port detected [ 376.656759][ T5909] hub 3-1:0.0: activate --> -90 [ 376.862728][ T5967] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 377.059720][ T5967] usb 6-1: config 0 interface 0 altsetting 12 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 377.094422][ T78] usb 3-1: USB disconnect, device number 17 [ 377.099959][ T5967] usb 6-1: config 0 interface 0 altsetting 12 endpoint 0x81 has invalid wMaxPacketSize 0 [ 377.371385][ T5967] usb 6-1: config 0 interface 0 has no altsetting 0 [ 377.379390][ T5967] usb 6-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 377.401315][ T5909] usb 3-1-port1: config error [ 377.443239][T10032] netlink: 'syz.4.1031': attribute type 4 has an invalid length. [ 377.451233][T10032] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1031'. [ 377.483206][ T5967] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.494222][T10032] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1031'. [ 377.543270][T10032] tmpfs: Bad value for 'mpol' [ 377.563751][T10032] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1031'. [ 377.716553][ T5967] usb 6-1: config 0 descriptor?? [ 378.158727][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.187496][ T5967] usbhid 6-1:0.0: can't add hid device: -71 [ 378.193637][ T5967] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 378.212819][ T5967] usb 6-1: USB disconnect, device number 10 [ 378.250786][ T78] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 378.376187][T10051] 9pnet_virtio: no channels available for device syz [ 378.440186][ T78] usb 3-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 378.749139][ T78] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.778109][ T78] usb 3-1: config 0 descriptor?? [ 378.794915][ T78] usb 3-1: selecting invalid altsetting 1 [ 378.878483][ T5827] udevd[5827]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 378.881923][ T78] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 380.320995][T10067] ubi: mtd0 is already attached to ubi31 [ 380.849870][T10072] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=10072 comm=syz.5.1046 [ 381.643733][ T5967] usb 3-1: USB disconnect, device number 18 [ 381.791131][T10084] netlink: 'syz.5.1047': attribute type 4 has an invalid length. [ 381.799059][T10084] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1047'. [ 382.193128][T10087] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1047'. [ 382.253788][T10084] tmpfs: Bad value for 'mpol' [ 382.273759][T10084] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1047'. [ 382.761622][T10096] 9pnet_virtio: no channels available for device syz [ 383.518872][T10103] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1055'. [ 384.240081][ T30] audit: type=1400 audit(1753818477.695:345): avc: denied { mount } for pid=10108 comm="syz.4.1057" name="/" dev="configfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 384.338388][ T30] audit: type=1400 audit(1753818477.795:346): avc: denied { search } for pid=10108 comm="syz.4.1057" name="/" dev="configfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 384.640253][ T5967] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 384.855356][ T5967] usb 7-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 384.887883][T10129] overlayfs: failed to resolve './file0': -2 [ 384.940924][ T5967] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.284292][ T5967] usb 7-1: config 0 descriptor?? [ 385.308220][ T5967] usb 7-1: selecting invalid altsetting 1 [ 385.425456][ T5967] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 385.582511][T10136] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1065'. [ 388.184061][T10158] 9pnet: Found fid 0 not clunked [ 388.311539][ T5967] usb 7-1: USB disconnect, device number 11 [ 388.821904][T10171] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1076'. [ 388.989088][T10173] overlayfs: failed to resolve './file0': -2 [ 389.045407][T10175] overlayfs: missing 'lowerdir' [ 391.341512][T10200] 9pnet: Found fid 0 not clunked [ 391.720352][ T78] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 392.352225][ T78] usb 7-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 392.372174][T10217] 9pnet_fd: Insufficient options for proto=fd [ 392.514881][ T78] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.689047][T10226] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1089'. [ 393.105354][ T78] usb 7-1: config 0 descriptor?? [ 393.121304][ T78] usb 7-1: selecting invalid altsetting 1 [ 393.196489][ T78] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 393.267458][ T5827] udevd[5827]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 393.799488][ T30] audit: type=1400 audit(1753818487.255:347): avc: denied { setopt } for pid=10239 comm="syz.2.1097" lport=57833 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 393.900726][T10245] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1097'. [ 394.668755][ T30] audit: type=1400 audit(1753818488.125:348): avc: denied { read write } for pid=10246 comm="syz.2.1098" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 394.695944][ T24] usb 7-1: USB disconnect, device number 12 [ 394.702235][ T30] audit: type=1400 audit(1753818488.125:349): avc: denied { open } for pid=10246 comm="syz.2.1098" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 394.740358][ T30] audit: type=1400 audit(1753818488.155:350): avc: denied { ioctl } for pid=10246 comm="syz.2.1098" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x7040 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 394.872366][T10251] hub 2-0:1.0: USB hub found [ 394.877154][T10251] hub 2-0:1.0: 1 port detected [ 395.231137][T10266] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1103'. [ 395.636953][ T5967] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 395.973614][ T5967] usb 6-1: Using ep0 maxpacket: 16 [ 396.038025][ T5967] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 396.168462][T10272] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1106'. [ 397.334644][ T5967] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 397.344818][ T5967] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 397.357955][ T5967] usb 6-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 397.367069][ T5967] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.411016][ T5967] usb 6-1: config 0 descriptor?? [ 397.554951][ T30] audit: type=1400 audit(1753818491.015:351): avc: denied { unmount } for pid=5842 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 397.835626][ T5967] hid-multitouch 0003:0457:07DA.000D: unknown main item tag 0x0 [ 397.949596][ T5967] hid-multitouch 0003:0457:07DA.000D: unknown main item tag 0x0 [ 397.966426][ T5967] hid-multitouch 0003:0457:07DA.000D: unknown main item tag 0x0 [ 397.982545][ T5967] hid-multitouch 0003:0457:07DA.000D: unknown main item tag 0x0 [ 397.998799][ T5967] hid-multitouch 0003:0457:07DA.000D: unknown main item tag 0x0 [ 398.017962][ T5967] hid-multitouch 0003:0457:07DA.000D: unknown main item tag 0x0 [ 398.044656][ T5967] hid-multitouch 0003:0457:07DA.000D: unknown main item tag 0x0 [ 398.060268][ T5967] hid-multitouch 0003:0457:07DA.000D: unknown main item tag 0x0 [ 398.068132][ T5967] hid-multitouch 0003:0457:07DA.000D: unknown main item tag 0x0 [ 398.076906][ T5967] hid-multitouch 0003:0457:07DA.000D: unknown main item tag 0x0 [ 398.091094][ T5967] hid-multitouch 0003:0457:07DA.000D: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.5-1/input0 [ 398.382878][ T5967] usb 6-1: USB disconnect, device number 11 [ 398.773903][T10299] hub 2-0:1.0: USB hub found [ 398.778700][T10299] hub 2-0:1.0: 1 port detected [ 399.030775][ T30] audit: type=1400 audit(1753818492.425:352): avc: denied { append } for pid=10297 comm="syz.5.1115" name="sg0" dev="devtmpfs" ino=770 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 405.534473][T10381] netlink: 'syz.4.1138': attribute type 1 has an invalid length. [ 405.542466][T10381] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1138'. [ 407.290676][T10401] 9pnet: Found fid 0 not clunked [ 407.690309][ T1207] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 408.361864][ T1207] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 408.380340][ T1207] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 408.389480][ T1207] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 408.399173][ T1207] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.416052][ T1207] usb 6-1: config 0 descriptor?? [ 409.428466][ T30] audit: type=1400 audit(1753818502.875:353): avc: denied { bind } for pid=10426 comm="syz.3.1157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 409.985534][ T30] audit: type=1400 audit(1753818503.445:354): avc: denied { write } for pid=10426 comm="syz.3.1157" path="socket:[24120]" dev="sockfs" ino=24120 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 410.550441][ T30] audit: type=1400 audit(1753818503.955:355): avc: denied { write } for pid=10439 comm="syz.2.1158" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 410.891659][ T1207] usb 6-1: USB disconnect, device number 12 [ 412.430371][ T1207] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 412.735545][ T1207] usb 5-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 412.755664][T10473] overlayfs: failed to resolve './file0': -2 [ 413.187047][ T1207] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.237989][ T1207] usb 5-1: config 0 descriptor?? [ 413.258294][ T1207] usb 5-1: selecting invalid altsetting 1 [ 413.333433][ T1207] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 413.434992][ T5827] udevd[5827]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 413.508240][T10478] ubi: mtd0 is already attached to ubi31 [ 413.614213][T10481] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1169'. [ 414.980007][ T24] IPVS: starting estimator thread 0... [ 415.070216][T10492] IPVS: using max 44 ests per chain, 105600 per kthread [ 415.184121][ T1207] usb 5-1: USB disconnect, device number 18 [ 415.646170][ T1207] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 416.212398][ T1207] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 416.235682][ T1207] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.244085][ T1207] usb 5-1: Product: syz [ 416.248281][ T1207] usb 5-1: Manufacturer: syz [ 416.253652][ T1207] usb 5-1: SerialNumber: syz [ 416.280012][ T1207] usb 5-1: config 0 descriptor?? [ 416.297131][ T1207] ch341 5-1:0.0: ch341-uart converter detected [ 417.142590][T10517] vxcan1: MTU too low for tipc bearer [ 417.150487][T10517] tipc: Enabling of bearer rejected, failed to enable media [ 417.862189][ T1207] usb 5-1: ch341-uart converter now attached to ttyUSB0 [ 418.081163][ T24] usb 5-1: USB disconnect, device number 19 [ 418.133155][ T24] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 418.183501][ T24] ch341 5-1:0.0: device disconnected [ 419.340641][ T1207] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 419.569319][ T1207] usb 6-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 419.595674][ T1207] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.963664][ T1207] usb 6-1: config 0 descriptor?? [ 419.976590][ T1207] usb 6-1: selecting invalid altsetting 1 [ 420.136402][ T1207] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 421.340747][T10569] netlink: 'syz.2.1194': attribute type 1 has an invalid length. [ 421.348612][T10569] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1194'. [ 421.758029][T10575] Invalid source name [ 421.762200][T10575] UBIFS error (pid: 10575): cannot open "/dev/sg0", error -22 [ 422.033559][ T24] usb 6-1: USB disconnect, device number 13 [ 423.347687][T10597] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1200'. [ 425.477543][T10617] netlink: 'syz.5.1209': attribute type 4 has an invalid length. [ 425.485616][T10617] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1209'. [ 425.568821][T10617] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1209'. [ 425.610483][T10617] tmpfs: Bad value for 'mpol' [ 425.620288][T10617] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1209'. [ 427.219823][T10647] Invalid source name [ 427.223858][T10647] UBIFS error (pid: 10647): cannot open "/dev/sg0", error -22 [ 427.660526][ T78] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 427.870873][ T78] usb 4-1: Using ep0 maxpacket: 16 [ 427.930327][ T78] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 427.984746][ T78] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 427.999295][ T78] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 428.035319][ T78] usb 4-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 428.046956][ T78] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.146351][ T78] usb 4-1: config 0 descriptor?? [ 429.011955][ T78] hid-multitouch 0003:0457:07DA.000E: unknown main item tag 0x0 [ 429.023554][ T78] hid-multitouch 0003:0457:07DA.000E: unknown main item tag 0x0 [ 429.035996][ T78] hid-multitouch 0003:0457:07DA.000E: unknown main item tag 0x0 [ 429.064618][ T78] hid-multitouch 0003:0457:07DA.000E: unknown main item tag 0x0 [ 429.245178][ T78] hid-multitouch 0003:0457:07DA.000E: unbalanced collection at end of report description [ 429.260735][ T78] hid-multitouch 0003:0457:07DA.000E: probe with driver hid-multitouch failed with error -22 [ 429.478002][ T78] usb 4-1: USB disconnect, device number 20 [ 429.874236][T10681] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1230'. [ 430.081203][ T5947] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 430.099514][T10689] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1231'. [ 430.310402][ T5947] usb 7-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 430.329796][ T5947] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.433148][ T5947] usb 7-1: config 0 descriptor?? [ 430.457074][ T5947] usb 7-1: selecting invalid altsetting 1 [ 430.514436][ T5947] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 430.562666][ T5827] udevd[5827]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 430.977176][T10708] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=10708 comm=syz.6.1228 [ 431.739548][T10714] 9pnet: Found fid 0 not clunked [ 432.783093][ T78] usb 7-1: USB disconnect, device number 13 [ 432.907404][T10727] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1242'. [ 434.138559][T10748] Invalid source name [ 434.142666][T10748] UBIFS error (pid: 10748): cannot open "/dev/sg0", error -22 [ 434.872466][T10755] 9pnet: Found fid 0 not clunked [ 435.180341][ T78] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 435.951015][ T78] usb 6-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 436.141124][ T78] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.198255][ T78] usb 6-1: config 0 descriptor?? [ 436.238960][ T78] usb 6-1: selecting invalid altsetting 1 [ 436.411226][ T78] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 436.695462][T10778] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=10778 comm=syz.5.1252 [ 437.126987][ T5848] udevd[5848]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 437.361891][T10786] Invalid source name [ 437.365906][T10786] UBIFS error (pid: 10786): cannot open "/dev/sg0", error -22 [ 438.073915][T10797] 9pnet: Found fid 0 not clunked [ 438.152539][ T78] usb 6-1: USB disconnect, device number 14 [ 439.594351][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 444.044189][ T30] audit: type=1326 audit(1753818537.315:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10842 comm="syz.6.1278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d5a78e9a9 code=0x7ffc0000 [ 444.085654][ T30] audit: type=1326 audit(1753818537.325:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10842 comm="syz.6.1278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d5a78e9a9 code=0x7ffc0000 [ 444.241529][ T30] audit: type=1326 audit(1753818537.325:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10842 comm="syz.6.1278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f5d5a78e9a9 code=0x7ffc0000 [ 444.394500][ T30] audit: type=1326 audit(1753818537.325:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10842 comm="syz.6.1278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d5a78e9a9 code=0x7ffc0000 [ 444.419332][ T30] audit: type=1326 audit(1753818537.325:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10842 comm="syz.6.1278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d5a78e9a9 code=0x7ffc0000 [ 444.453726][ T30] audit: type=1326 audit(1753818537.335:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10842 comm="syz.6.1278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7f5d5a78e9a9 code=0x7ffc0000 [ 444.518815][ T30] audit: type=1326 audit(1753818537.335:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10842 comm="syz.6.1278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d5a78e9a9 code=0x7ffc0000 [ 444.559558][ T30] audit: type=1326 audit(1753818537.335:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10842 comm="syz.6.1278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d5a78e9a9 code=0x7ffc0000 [ 444.565535][T10855] netlink: 'syz.3.1281': attribute type 4 has an invalid length. [ 444.591312][T10855] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1281'. [ 444.725142][T10855] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1281'. [ 444.753976][T10855] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1281'. [ 444.761681][ T30] audit: type=1326 audit(1753818537.335:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10842 comm="syz.6.1278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f5d5a78e9a9 code=0x7ffc0000 [ 445.310520][ T30] audit: type=1326 audit(1753818537.345:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10842 comm="syz.6.1278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d5a78e9a9 code=0x7ffc0000 [ 445.731019][T10863] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1283'. [ 446.972013][T10873] Invalid ELF section header size [ 447.809616][T10875] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 448.312693][T10884] 9pnet: Found fid 0 not clunked [ 449.348703][T10898] Invalid source name [ 449.352797][T10898] UBIFS error (pid: 10898): cannot open "/dev/sg0", error -22 [ 450.120507][T10919] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1299'. [ 452.175075][T10937] 9pnet: Found fid 0 not clunked [ 453.220723][T10946] ubi: mtd0 is already attached to ubi31 [ 453.548059][T10954] tipc: Enabled bearer , priority 0 [ 453.555644][T10954] syzkaller0: entered promiscuous mode [ 453.561244][T10954] syzkaller0: entered allmulticast mode [ 453.606352][T10954] tipc: Resetting bearer [ 453.639481][T10956] netlink: 'syz.6.1309': attribute type 2 has an invalid length. [ 453.707016][T10953] tipc: Resetting bearer [ 453.817060][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 453.817078][ T30] audit: type=1400 audit(1753818547.165:379): avc: denied { read } for pid=10949 comm="syz.6.1309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 454.053687][T10953] tipc: Disabling bearer [ 454.267810][T10950] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1309'. [ 454.450604][T10969] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1313'. [ 455.882634][T10980] ubi31: detaching mtd0 [ 456.517960][ T30] audit: type=1400 audit(1753818549.335:380): avc: denied { ioctl } for pid=10975 comm="syz.2.1316" path="socket:[26786]" dev="sockfs" ino=26786 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 456.655967][T10982] Invalid ELF section header size [ 456.662167][T10980] ubi31: mtd0 is detached [ 460.643033][T10996] ubi31: attaching mtd0 [ 460.648770][T10996] ubi31: scanning is finished [ 460.774325][ T24] IPVS: starting estimator thread 0... [ 460.902172][T10999] IPVS: using max 36 ests per chain, 86400 per kthread [ 461.036827][T10996] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 461.044548][T10996] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 461.052046][T10996] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 461.059427][T10996] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 461.067040][T10996] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 461.074031][T10996] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 461.082149][T10996] ubi31: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3076403364 [ 461.092321][T10996] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 461.104575][T11000] ubi31: background thread "ubi_bgt31d" started, PID 11000 [ 461.676693][T11013] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1324'. [ 461.707156][T11014] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 462.979789][T11023] netlink: 79 bytes leftover after parsing attributes in process `syz.3.1328'. [ 463.300538][ T5947] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 463.928025][ T5947] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 464.190693][ T5947] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 464.199883][ T5947] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 464.210106][ T5947] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.289680][ T5947] usb 6-1: config 0 descriptor?? [ 464.399817][T11036] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1331'. [ 464.667024][ T30] audit: type=1400 audit(1753818558.125:381): avc: denied { create } for pid=11041 comm="syz.6.1336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 464.848601][ T30] audit: type=1400 audit(1753818558.125:382): avc: denied { setopt } for pid=11041 comm="syz.6.1336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 465.040733][ T30] audit: type=1400 audit(1753818558.465:383): avc: denied { setopt } for pid=11041 comm="syz.6.1336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 465.064388][ T5889] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 465.243004][ T5889] usb 3-1: config 0 interface 0 altsetting 12 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 465.254316][ T5889] usb 3-1: config 0 interface 0 altsetting 12 endpoint 0x81 has invalid wMaxPacketSize 0 [ 465.265315][ T5889] usb 3-1: config 0 interface 0 has no altsetting 0 [ 465.273494][ T5889] usb 3-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 465.286656][ T5889] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.308160][ T5889] usb 3-1: config 0 descriptor?? [ 465.946291][ T24] usb 6-1: USB disconnect, device number 15 [ 466.337796][ T5889] usbhid 3-1:0.0: can't add hid device: -71 [ 466.360269][ T5889] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 466.521547][ T5889] usb 3-1: USB disconnect, device number 19 [ 467.337553][T11084] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1347'. [ 467.640382][T11086] overlayfs: failed to resolve './file1': -2 [ 468.740634][T11089] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1350'. [ 469.408155][T11096] netlink: 'syz.2.1349': attribute type 1 has an invalid length. [ 469.419437][T11096] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1349'. [ 470.268080][T11112] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1354'. [ 472.180789][ T30] audit: type=1400 audit(1753818565.645:384): avc: denied { append } for pid=11131 comm="syz.3.1362" name="video9" dev="devtmpfs" ino=957 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 472.494918][T11143] input: syz0 as /devices/virtual/input/input13 [ 472.514465][T11144] netlink: 'syz.3.1365': attribute type 4 has an invalid length. [ 472.557949][T11144] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1365'. [ 473.210610][T11139] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1365'. [ 473.222564][T11139] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1365'. [ 473.608702][T11157] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1369'. [ 474.930200][ T5889] usb 6-1: new low-speed USB device number 16 using dummy_hcd [ 475.101720][ T5889] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 475.120180][ T5889] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.144303][ T5889] usb 6-1: config 0 descriptor?? [ 475.761398][ T5889] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 475.785089][ T5889] asix 6-1:0.0: probe with driver asix failed with error -32 [ 476.077523][T11193] overlayfs: failed to resolve './file1': -2 [ 476.130481][T11193] overlayfs: missing 'lowerdir' [ 476.782643][T11202] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 2, id = 0 [ 476.800266][ T30] audit: type=1400 audit(1753818570.235:385): avc: denied { create } for pid=11195 comm="syz.6.1381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 477.016381][ T30] audit: type=1400 audit(1753818570.235:386): avc: denied { listen } for pid=11195 comm="syz.6.1381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 477.109020][ T30] audit: type=1400 audit(1753818570.245:387): avc: denied { ioctl } for pid=11195 comm="syz.6.1381" path="socket:[27983]" dev="sockfs" ino=27983 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 477.142584][ T5967] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 477.320291][ T5967] usb 4-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 477.360343][ T5967] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.393802][ T5967] usb 4-1: config 0 descriptor?? [ 477.443115][T11208] netlink: 27 bytes leftover after parsing attributes in process `syz.6.1384'. [ 477.449509][T11206] netlink: 'syz.2.1383': attribute type 4 has an invalid length. [ 477.460298][T11206] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1383'. [ 477.539361][T11209] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1383'. [ 477.575825][T11209] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1383'. [ 477.692481][ T5967] usb 4-1: selecting invalid altsetting 1 [ 477.760662][ T5889] usb 6-1: USB disconnect, device number 16 [ 478.681792][T11223] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=11223 comm=syz.3.1382 [ 478.963344][ T5967] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 479.060963][T11226] netlink: 'syz.6.1388': attribute type 1 has an invalid length. [ 479.068839][T11226] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1388'. [ 480.100474][ T1207] usb 4-1: USB disconnect, device number 21 [ 480.114637][ T30] audit: type=1400 audit(1753818573.555:388): avc: denied { shutdown } for pid=11241 comm="syz.4.1395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 480.188370][ T30] audit: type=1400 audit(1753818573.555:389): avc: denied { getopt } for pid=11241 comm="syz.4.1395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 480.500243][ T1207] usb 4-1: new low-speed USB device number 22 using dummy_hcd [ 481.631947][ T1207] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 481.725575][ T1207] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.748858][ T1207] usb 4-1: config 0 descriptor?? [ 481.767754][T11255] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1399'. [ 482.173618][ T30] audit: type=1400 audit(1753818575.635:390): avc: denied { bind } for pid=11261 comm="syz.5.1402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 482.394516][ T1207] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 482.657313][ T1207] asix 4-1:0.0: probe with driver asix failed with error -32 [ 483.778771][ T30] audit: type=1400 audit(1753818576.945:391): avc: denied { firmware_load } for pid=11276 comm="syz.4.1408" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 483.890445][T11282] syz.4.1408 (11282) used greatest stack depth: 19784 bytes left [ 484.079566][ T10] usb 4-1: USB disconnect, device number 22 [ 484.250220][ T30] audit: type=1400 audit(1753818577.705:392): avc: denied { connect } for pid=11292 comm="syz.6.1413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 484.473979][ T30] audit: type=1400 audit(1753818577.755:393): avc: denied { write } for pid=11292 comm="syz.6.1413" path="socket:[27438]" dev="sockfs" ino=27438 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 484.705540][T11293] tipc: Started in network mode [ 484.793691][T11293] tipc: Node identity 4, cluster identity 4711 [ 484.883121][ T78] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 484.901273][T11293] tipc: Node number set to 4 [ 484.911984][ T8856] tipc: Subscription rejected, illegal request [ 484.912101][ T30] audit: type=1400 audit(1753818578.375:394): avc: denied { read } for pid=11292 comm="syz.6.1413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 485.835024][ T78] usb 5-1: config 0 interface 0 altsetting 12 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 485.846204][ T78] usb 5-1: config 0 interface 0 altsetting 12 endpoint 0x81 has invalid wMaxPacketSize 0 [ 485.856139][ T78] usb 5-1: config 0 interface 0 has no altsetting 0 [ 485.862795][ T78] usb 5-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 485.871948][ T78] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.941544][ T78] usb 5-1: config 0 descriptor?? [ 486.961207][ T78] usbhid 5-1:0.0: can't add hid device: -71 [ 486.961300][ T78] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 486.963538][ T78] usb 5-1: USB disconnect, device number 20 [ 487.090536][ T5889] usb 7-1: new low-speed USB device number 14 using dummy_hcd [ 487.307821][ T5889] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 487.421930][ T5889] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.490746][ T5889] usb 7-1: config 0 descriptor?? [ 488.920614][ T30] audit: type=1400 audit(1753818582.345:395): avc: denied { bind } for pid=11336 comm="syz.4.1429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 489.536299][ T5889] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 489.862262][ T5889] asix 7-1:0.0: probe with driver asix failed with error -32 [ 490.555737][ T30] audit: type=1400 audit(1753818584.015:396): avc: denied { getopt } for pid=11359 comm="syz.5.1434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 490.604472][ T10] usb 7-1: USB disconnect, device number 14 [ 491.185740][ T30] audit: type=1400 audit(1753818584.645:397): avc: denied { ioctl } for pid=11374 comm="syz.3.1442" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 491.214642][T11375] ------------[ cut here ]------------ [ 491.220399][T11375] kernel BUG at fs/buffer.c:1582! [ 491.251020][T11375] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 491.257500][T11375] CPU: 0 UID: 0 PID: 11375 Comm: syz.3.1442 Not tainted 6.16.0-syzkaller-00857-gced1b9e0392d #0 PREEMPT(full) [ 491.269239][T11375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 491.279392][T11375] RIP: 0010:folio_set_bh+0x18a/0x1e0 [ 491.284697][T11375] Code: df 48 89 fa 4c 01 e3 48 c1 ea 03 80 3c 02 00 75 43 48 89 5d 28 5b 5d 41 5c 41 5d 41 5e 41 5f e9 0c 0c 49 09 e8 c7 01 75 ff 90 <0f> 0b e8 ef 5c da ff e9 a5 fe ff ff 4c 89 ef e8 f2 5b da ff e9 cf [ 491.304402][T11375] RSP: 0018:ffffc90003c9f8d8 EFLAGS: 00010287 [ 491.310468][T11375] RAX: 0000000000003278 RBX: ffffea0001ce6b00 RCX: ffffc9000cb9a000 [ 491.318427][T11375] RDX: 0000000000080000 RSI: ffffffff8246f759 RDI: 0000000000000006 [ 491.326395][T11375] RBP: ffff88805399e2b8 R08: 0000000000000006 R09: 0000000000004000 [ 491.334369][T11375] R10: 0000000000004000 R11: 0000000000000001 R12: 0000000000004000 [ 491.342334][T11375] R13: 0000000000000002 R14: 0000000000004000 R15: 0000000000000000 [ 491.350305][T11375] FS: 00007f5421e9e6c0(0000) GS:ffff8881246f9000(0000) knlGS:0000000000000000 [ 491.359228][T11375] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 491.365802][T11375] CR2: 00007f57830e56c0 CR3: 000000005b29c000 CR4: 00000000003526f0 [ 491.373766][T11375] Call Trace: [ 491.377022][T11375] [ 491.379944][T11375] folio_alloc_buffers+0x295/0x6c0 [ 491.385051][T11375] __getblk_slow+0x1f4/0x560 [ 491.389638][T11375] bdev_getblk+0xd4/0xe0 [ 491.393859][T11375] __bread_gfp+0x86/0x3c0 [ 491.398164][T11375] ntfs_bread+0xd9/0x210 [ 491.402380][T11375] ntfs_fill_super+0x64f/0x4270 [ 491.407206][T11375] ? __pfx_vsnprintf+0x10/0x10 [ 491.411965][T11375] ? snprintf+0xc7/0x100 [ 491.416191][T11375] ? __pfx_snprintf+0x10/0x10 [ 491.420845][T11375] ? __pfx_ntfs_fill_super+0x10/0x10 [ 491.426122][T11375] ? do_raw_spin_lock+0x12c/0x2b0 [ 491.431228][T11375] ? find_held_lock+0x2b/0x80 [ 491.435883][T11375] ? sb_set_blocksize+0x188/0x1d0 [ 491.440886][T11375] ? setup_bdev_super+0x369/0x730 [ 491.445890][T11375] get_tree_bdev_flags+0x389/0x620 [ 491.450979][T11375] ? __pfx_ntfs_fill_super+0x10/0x10 [ 491.456257][T11375] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 491.461900][T11375] ? bpf_lsm_capable+0x9/0x10 [ 491.466570][T11375] ? security_capable+0x7e/0x260 [ 491.471488][T11375] vfs_get_tree+0x8e/0x340 [ 491.475894][T11375] path_mount+0x1482/0x1fd0 [ 491.480379][T11375] ? __pfx_path_mount+0x10/0x10 [ 491.485214][T11375] ? kmem_cache_free+0x2d1/0x4d0 [ 491.490130][T11375] ? putname+0x154/0x1a0 [ 491.494347][T11375] ? putname+0x154/0x1a0 [ 491.498571][T11375] ? __x64_sys_mount+0x28d/0x310 [ 491.503489][T11375] __x64_sys_mount+0x28d/0x310 [ 491.508235][T11375] ? __pfx___x64_sys_mount+0x10/0x10 [ 491.513513][T11375] do_syscall_64+0xcd/0x4c0 [ 491.518025][T11375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.523915][T11375] RIP: 0033:0x7f5420f8e9a9 [ 491.528305][T11375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 491.547913][T11375] RSP: 002b:00007f5421e9e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 491.556300][T11375] RAX: ffffffffffffffda RBX: 00007f54211b5fa0 RCX: 00007f5420f8e9a9 [ 491.564250][T11375] RDX: 00002000000001c0 RSI: 0000200000000100 RDI: 0000200000000040 [ 491.572195][T11375] RBP: 00007f5421010d69 R08: 0000000000000000 R09: 0000000000000000 [ 491.580140][T11375] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000000 [ 491.588098][T11375] R13: 0000000000000000 R14: 00007f54211b5fa0 R15: 00007fff3b455088 [ 491.596062][T11375] [ 491.599060][T11375] Modules linked in: [ 491.603787][T11375] ---[ end trace 0000000000000000 ]--- [ 492.337467][T11385] ubi: mtd0 is already attached to ubi31 [ 492.364051][T11375] RIP: 0010:folio_set_bh+0x18a/0x1e0 [ 492.463374][T11375] Code: df 48 89 fa 4c 01 e3 48 c1 ea 03 80 3c 02 00 75 43 48 89 5d 28 5b 5d 41 5c 41 5d 41 5e 41 5f e9 0c 0c 49 09 e8 c7 01 75 ff 90 <0f> 0b e8 ef 5c da ff e9 a5 fe ff ff 4c 89 ef e8 f2 5b da ff e9 cf [ 492.543941][T11375] RSP: 0018:ffffc90003c9f8d8 EFLAGS: 00010287 [ 492.551385][T11375] RAX: 0000000000003278 RBX: ffffea0001ce6b00 RCX: ffffc9000cb9a000 [ 492.559557][T11375] RDX: 0000000000080000 RSI: ffffffff8246f759 RDI: 0000000000000006 [ 492.569129][T11375] RBP: ffff88805399e2b8 R08: 0000000000000006 R09: 0000000000004000 [ 492.578194][T11375] R10: 0000000000004000 R11: 0000000000000001 R12: 0000000000004000 [ 492.587769][T11375] R13: 0000000000000002 R14: 0000000000004000 R15: 0000000000000000 [ 492.596354][T11375] FS: 00007f5421e9e6c0(0000) GS:ffff8881247f9000(0000) knlGS:0000000000000000 [ 492.609167][T11375] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 492.616328][T11375] CR2: 0000200000024000 CR3: 000000005b29c000 CR4: 00000000003526f0 [ 492.625809][T11375] Kernel panic - not syncing: Fatal exception [ 492.632117][T11375] Kernel Offset: disabled [ 492.636432][T11375] Rebooting in 86400 seconds..