last executing test programs: 9.120301788s ago: executing program 2 (id=1601): write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$inet6(0xa, 0x80002, 0x0) r5 = memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r6 = socket$unix(0x1, 0x5, 0x0) bind$unix(r6, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000000000000030100c0"]) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e23, 0x400, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}}, 0x1c) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 8.194872563s ago: executing program 3 (id=1602): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000001ac0), 0x6, 0x2) r2 = gettid() r3 = getpid() sched_setscheduler(r2, 0x0, &(0x7f0000000200)=0x3) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup/syz0\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000580)={0x61008100, &(0x7f00000000c0), &(0x7f0000000180), &(0x7f0000000200), {0x3e}, &(0x7f0000000600)=""/189, 0xbd, &(0x7f00000007c0)=""/167, &(0x7f0000000240)=[r2, r3], 0x2, {r4}}, 0x58) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000080)={0x100, 0x1, 0x2, 0x0, 0x9}) r5 = socket$netlink(0x10, 0x3, 0x15) writev(r5, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000040)) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r7 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r7, 0xc0884113, &(0x7f0000000240)={0x1, 0x0, 0x200, 0xfffe, 0x2, 0x8, 0x200000000000002f, 0x200, 0x1, 0x2c, 0xffffffff, 0x2}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r7, 0xc0984124, &(0x7f0000000940)) 8.192734233s ago: executing program 2 (id=1603): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4040010) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) syz_pidfd_open(r0, 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={0xfffffffffffffffe}, 0x1, 0x0, 0x0, 0x4000004}, 0x840) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="200026bd7000fedbdf254f00000010007a800c000300688667c13c235a1e84007a801c000200bfb5a9aaea308ecc7ca3dfccf6047286c7274e4d4d2b60b124000100a0a3de74ce619efddc53cd0d338696a02810d609982bd5eaddda0e7127809c0d08000400c0050000240001005f925b611111fe4ecd9e66fb21e7de3152aa84e4a172180a38ca993722872a070c0003003a0ec60d2365509608000400ffff0000"], 0xa8}, 0x1, 0x0, 0x0, 0x200000d4}, 0x240044c1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c07005400128008000100687372"], 0x90}}, 0x0) madvise(&(0x7f00001c1000/0x3000)=nil, 0x40000, 0x9) 7.94940233s ago: executing program 2 (id=1606): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, 0x0, 0x0) 7.874884447s ago: executing program 2 (id=1607): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="02"], 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}, 0x18) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) write$binfmt_aout(r3, &(0x7f0000000300)={{0x107, 0x0, 0x9, 0x2c6, 0x234, 0x8, 0x397, 0xc28}, "6f39487bfa7a44556117163655c3ef5d570a771928b5d4c2396e1c6fc5a1d2235f68bc28f3a4aa6ef5c62b977d8186c8ea86ef84403ce3a9bf90bff41628b45b571460472ad81c8c92f05c9311e02220c51346e1f2a21960f9336f1d6e9eb954120afb043b0fc8da628e", ['\x00']}, 0x18a) connect$l2tp6(r3, &(0x7f00000001c0)={0xa, 0x0, 0x0, @private2, 0x3}, 0x20) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000140), 0x20a180) mmap$qrtrtun(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x20010, r4, 0x2) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{}, {0x0, 0x1c9c380}}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r2, 0x2, 0x0, 0x3ff, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) 7.587729901s ago: executing program 2 (id=1611): getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0x5}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x4000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=@mpls_getroute={0x1c, 0x1a, 0x9e8a232eead7ae69, 0x0, 0x0, {0x1c, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x4, 0x1100}}, 0x1c}}, 0x0) r9 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r9, 0x40085112, &(0x7f0000000040)=@e={0xff, 0xa, 0x0, 0x0, @SEQ_CONTROLLER=0xfe}) r10 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_PIT2(r10, 0x4070aea0, &(0x7f00000000c0)={[{0x4, 0xc63, 0x2, 0x8, 0x1, 0x4, 0xf, 0xc, 0x9, 0x2, 0x0, 0x4, 0xb}, {0x3, 0x18, 0x0, 0x1, 0x7f, 0xc2, 0x1, 0x8, 0x9, 0x4, 0x6, 0xf7, 0x2}, {0xff, 0x7, 0x2, 0x3, 0xe, 0x27, 0x5, 0x0, 0x1, 0x8e, 0x6, 0x9}], 0xfffffffa}) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$KVM_SET_REGS(r11, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2004cd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3], 0x0, 0x202}) ioctl$KVM_RUN(r11, 0xae80, 0x0) 7.016999546s ago: executing program 3 (id=1612): memfd_create(&(0x7f0000000000)='prodM\xb0\xea\a\x06\xbe\xaen/\xce4\xb7\xc1\xef\xba!\x9d\rSt\xa24\t\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1dz\xd05\xe2e,\xb1\x84\xea\x91^%A\xe5\x9e\x13TdT\xc6^p\xb0#R\x04\x06\xae\xebA;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6\xb4\v\xff\xfc\x88\x90\xabC\x02\x00\xf04\x03\x88\xae9\'>R^P{Vr!\xe2W\xc72\xea\xb7Wp\xc36\x96\xffZ\\A@\x00\x00\x00\xc9\xf3Y\xb8\x89#\xa1\xb1)Dk\xeb\xa1\t\x00{u[\xbd\x9d\xf4\xbf\\\xce\x02P\xf2MY\x05^\xffj\x9c\x14\xb7\xb6v\x1d*1>\x00 \x00\x00\x00\x00\x14C?]\x8c\xb4Y\xcf\x80\x85\xd6\x036\xc8~\xa8\f\x00\x00\xb5M\x9a\x9dc\xaaAU\xec\xe06\xed\xe4\xfb\xdf\a\xd0lg\x13\xf9\x8b:s>\xd7s\xef\xb3\x9f#\x15)\xf9\xe10\xc7\xb262\x00\x00\x00\x00\x00\x00\x00\x00Nz\x0eu\x8f\x01\x00\x00\x00\x00\x00\x00\xdd\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc3\xa7/\x0f\x9b`\xa5\x98\x81a\xeev\x00\x00\x00\x00\a\x10\x00m2\xf2\xd8,\x17\xf8\x8e\xae\xc8\xad\xed<\"\x8e\n\x9d\xb13\x8d\xef\x96\xd2I\"8=tg\xdfU\xd0q\x95/f\xec\xdc\xa3\xe1[\xc0\xaa\xefz\xc9\xf4[\x00\x00\x00Q\xff}5\x94\x88\xa1\xdc\xa1g\xe0q\xc5:\xe4\xdf\x80\xb3,\xb9\xb2\xdc\x81\x9f6\x0f\x84WY\xbfSY`\xb8\a\x19\xb1\x058\xa4\xc3\xbb\xf8aB:\x84\x02?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3o-GU\xb0\x00F\xb3o(aI[\xd6\x9fG\xaeI\x83\x93\x8cC\xc0#\xe0q\xd0Ex|\xdb\xa8\x16\xfe>:\t0\xfd\x8a\xc7\x84\xb5\xc7M-0A\xf0\x94\xf3\xcc\x8d\xbb3\\\"\x882\xb3\xa84\xac\x00\xdd}Ft\xc6\xcc\f}1X#\xe4\xe1\x94i\xce\xa1\xff\x95\x80\xb4T\x9c\x01\xf3\x1cLB\x94m(m\f\xbc\xebY\xa0\xf7\xf0\x9d\x10\xbd\x86\x1by\xe6\xdf\xc0\xc5\xb9\xb9\xbf\xdf~9\nC\xe9\xc5\x0e\xda\x9c(\x9b\"\xc7\x97\xfc\b\xd9\xc2T\xa7*}]\xc8\xb3 .\x9b\x89\x0f\xf8$\xdd>lU\x13EG\xbb1] \xda\x19\xc5\x9b\x15\x95\xc4\xfcw\xbb\x92\x91\xc4\xa6\x907XK\xfc\x17]\xfa\xff\'\xef\x92\x1c\xb8\x1fK\xb2o \xd1\xbd\xb2\x11+\xa3R\xefQ\xc2\xbdW\x05\xec\xb3=@\x03\xc6^\xa2\x15%\xb0\'D#\xb6Q\x8f\x82?S>\x0fP\x9cE\x92{d\xe6\x9cj1\x87\xb3\x01\xde\xe8\x89\xc4s\xb7\x14~}\xaa\x8c\xc3\x95BAE\xf2.\x8f#;a\x94\"\xd1U\xff\xe8v\xd3\x84d\xf4\x134\xa6XI\xe5h\xaa\x15\x9a\xf7Z\xe3%\x88p\x90\xbb\x9dt\xa3\xe1\r\x8d\x94\"\x19\x8b\x17)\xea\xd5\x17\xeb\xe4\x1b\x0fBZ1\xbe\xee\xfa\x1c\xf9\xa6\x11\x94\x06\\P:\xaf\xcex\xc2\x82\x9a\x16\xfc\xa1\xf9q\x12\xe3\x1a\xdc\xb7\x12\xbba\b\xbb\xed\xb2\xd1W\xe2\x8b\x8d8}\x10W\xbd\xa60A\xc3\x03\xfa\x890\x86#\bQ\xcb)\x00]\x9e\x14\xd2\xea\x82\xa8\xb7ZG\x15r\xf1\t\x00\x00\x00 \xc1\xaf\x19?\x00\\\x91\x13\x1b8\xe1\xc3\xa4\v\x94\xbfJ\xb5\xde\x95\x82\x00]B|\xe2[%\xe3\xf0\x04\xba\xed\xdb\xf5\x7f\x9d\xfe>\xf6m$M&\x7fq]\xe4\xf6\x82\xc3\x00\xb1zg}\x99E\xa4\x19\xe9\x1a4a\xd75D-k\x84\xa6\x12+\xebk\xa1\xfek\x89\xef\x18\xc1)6\xa65\xe2D\xbe\xe1\xdfq\xdd68\xf37g\xab9m\xe7\xddO\v?\xe0\xbe}\xa9U\xc7{\xd3\x16W\xbb\xe5\xd2\x93\xfe\xa4\x9d\r$\xe91c8`\x86\xbc)\xe29\xc3}\xb9P\xd5F\xc6\x12\x8c_x\xa8\xfa\xb5K\x03\x85\x93k\xe1\x8e\x1f)\".\xcc\'\v\xa6\x1bj\\\n\xe98yA\xd8T\x85\x80A\xcbo\x99\x99\xeb)r\x1a\xce\x18(\x185LL\xbcOeO\'\xe2\x86&\xe4\xe2\xe7~\x92\xa2\xb2\x1b\xc3\x00\x85\xce\xad7\x87\xa0\xfcc\xf5\xf8\xaf\v,q\xd4\x18\xbdM\x1a\xde\xba*L\x05m6\xecH\xd0T\xb8m\xdb\b\xa6\x02\xfb\x13\xac\x91\x8a\x8d\x94\x93\x8d=\xb1\x84\x9c\x9b\xe5\xc7\xa6\xc9Q\xc1eUc\xcc\x180^\x00\x00\x00\x00\x00\x00\x00\x00\xe7]6+\\\x00\x00\x00\x00?#C.\x1dj\xd9\xc3\xdd&\x80g:N\xec\x06[\x8f\x92\xe2\xb01\xb0\xef\x10,\xde\xf3\x86D\x8b\xf7\xf1>AH\xef\\\xf9\x8b\a\xe0\xb2\xcb\xf0\x97\b\r\xd5`\xb9\xd6\xa4\x1e\xbe\x12-}\xc5\x84\xde@\x18\x87\f\x01O\xedS\x8f\x9en,\xbce\xb2\xe4\x82v\x1c\xed\x84-s\xab\x06b\x9c\xba\xec\xa5\xc9A\x84\xd0\xe0 S\xc8\xa2\xaf\x85\v\xad\xa5\x88\xcf\xb6}`\x14\'\xea\xbfN\xac)\xa1\xe8\xb2\x9f\x112TJ\x16\x8c9\xe9\xf5\x18\x15Dd\x8a%>\x91\x93\x88\xe9\x18\x82]\x9e&\xfa\xaa\xfa8Z2\x00'/1301, 0x3) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000008c80), 0x0, 0x0) fchown(r0, 0x0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket$inet6(0xa, 0x80002, 0x88) r3 = syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3e616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2f}}, 0x400006}, 0x1c) getsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000540), &(0x7f00000005c0)=0x4) setsockopt$sock_int(r2, 0x1, 0x28, &(0x7f0000000040)=0x8004, 0x4) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d"], 0x0) 6.692659029s ago: executing program 2 (id=1615): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYRESHEX, @ANYRES64=0x0], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$netlink(0x10, 0x3, 0x0) r0 = openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x35c, 0x0) preadv(r0, 0x0, 0x0, 0xffffffff, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000540)={0x1, 0x6, 0x1, &(0x7f0000000380)={0x17, "afe45e84f74432f676202478260962fdf6c22409f2213d7bbd04c268559ab0c148"}}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000bc234f093f0009000700"/25, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="48000000100039042cbd7000eaffffff000003e4", @ANYRES32=r4, @ANYBLOB="83000400cb1507002800128008000100736974001c000280080014000400000008000300ac141410050009"], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4000040) r5 = add_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000040)={r5}, &(0x7f00000003c0)=ANY=[@ANYBLOB='enc=oGep hash=md4\x00'/78], 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x7fffffff) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'vxcan1\x00'}) r6 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$char_usb(r6, &(0x7f0000000280)=""/176, 0xb0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000100)={'erspan0\x00', &(0x7f0000000700)={'syztnl1\x00', 0x0, 0x10, 0x8000, 0x1, 0x80000, {{0xb, 0x4, 0x2, 0x36, 0x2c, 0x64, 0x0, 0x81, 0x2f, 0x0, @loopback, @multicast1, {[@end, @generic={0x89, 0x5, "dba558"}, @noop, @cipso={0x86, 0x6, 0x1}, @lsrr={0x83, 0x3, 0x21}, @timestamp_addr={0x44, 0x4, 0x85}, @timestamp_prespec={0x44, 0x4, 0x10, 0x3, 0x3}]}}}}}) 6.13230935s ago: executing program 4 (id=1617): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, 0x0, 0x0) 6.055326609s ago: executing program 4 (id=1618): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = socket$qrtr(0x2a, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6(0xa, 0x6, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000340)={'macvtap0\x00', &(0x7f00000004c0)=@ethtool_channels={0x3c, 0x0, 0x0, 0x5, 0x0, 0x2, 0x2, 0x0, 0x1}}) close_range(r3, 0xffffffffffffffff, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000340)={@cgroup, r6, 0x7, 0x0, 0x0, @void, @value=r6}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r7, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r2}, 0x20) sendmmsg$inet6(r2, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)}], 0x1}}], 0x2, 0x0) ioctl$sock_qrtr_TIOCINQ(r1, 0x541b, &(0x7f00000000c0)) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r7}, &(0x7f00000001c0), 0x0}, 0xfffffc7e) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x19) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000280)={0x9, 0xfffffffc, 0xf, 0x3, 0x8, "2e43e53ee3c666552e1b156bcd724c637d768d"}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) r8 = dup(0xffffffffffffffff) write$FUSE_BMAP(r8, &(0x7f0000000100)={0x18}, 0x18) 6.003968213s ago: executing program 1 (id=1619): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x50}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) eventfd(0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x8}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x240, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="0209000002000000"], 0x10}}, 0x0) 5.404785188s ago: executing program 4 (id=1621): syz_open_dev$dri(&(0x7f0000000080), 0x8004, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x7, 0x2, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0xb, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) creat(&(0x7f0000000400)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000280)='./bus\x00', &(0x7f0000000180), &(0x7f0000000440)=ANY=[@ANYBLOB="04"], 0x2, 0x1) 4.854938583s ago: executing program 1 (id=1623): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x255f, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0x7) write$uinput_user_dev(r2, &(0x7f0000000080)={'syz0\x00', {0x0, 0x2}, 0x35, [0x4346, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffdffc, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffd, 0xfffffff8, 0x0, 0x4, 0x3, 0x7ff, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0xfffffffb, 0xfffffffd, 0x0, 0x0, 0xfff, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x4, 0x4, 0x0, 0x0, 0x10000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x100, 0x7], [0x3ff, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x8, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x80000001, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffc, 0x0, 0x5, 0x1, 0x2], [0x2, 0x0, 0x3, 0x6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xe, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42cb, 0x0, 0x80000020, 0xfffffffd, 0x0, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0x6, 0x0, 0x2, 0x0, 0x18, 0x0, 0x5, 0x0, 0x0, 0x0, 0x400000, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9156, 0x20000000], [0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xffffffff, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x40000, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x20, 0xfffffffc, 0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0xffffbf90]}, 0x45c) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x11) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = openat$rtc(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$RTC_AIE_ON(r3, 0x7001) r4 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r4, 0x0, &(0x7f0000000040)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0xf0b, 0x13, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x5}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x8000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe, 0x9}, {0xfff3, 0x5}, {0x1c, 0x2613a1b406814a86}}}, 0x24}}, 0x44804) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) open(0x0, 0x62b000, 0x40) openat$rtc(0xffffffffffffff9c, &(0x7f0000000600), 0x20001, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x36, 0x1, 0x1, "c8010000000a0001000012e25c2299230500", 0x4745504d}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 4.456642688s ago: executing program 3 (id=1624): ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xe}}, './file0\x00'}) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000001240)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000001280)={&(0x7f00000000c0)=[0x0], &(0x7f0000000380)=[0x0, 0x0], 0x1, r1, 0xbbbbbbbb}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x3, &(0x7f0000000080)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/profiling', 0x141b82, 0x180) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x600, 0x25dfdbfc, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93}, [{}, {}, {0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x10}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {0x0, 0x0, 0x5}, {}, {}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x10}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0x0, 0x10000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x10000}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x0, 0x40, 0x200}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x800000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {0x10000000}, {}, {}, {}, {}, {0x3}, {}, {0x0, 0x0, 0x0, 0x4ba}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x0, 0x0, 0x10000}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r6, 0x560a, &(0x7f0000000040)={0x0, 0x1, 0xd, 0x2, 0x3}) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0x2010, r3, 0xb5d6b000) write$cgroup_int(r3, &(0x7f0000000040)=0x9, 0x12) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'veth1_macvtap\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)=ANY=[@ANYBLOB="540000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="1535010000000000240012800b0001006d616373656300001400028005000d0002000000050007000100000008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES16], 0x54}}, 0x0) 4.356697616s ago: executing program 1 (id=1625): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r4, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r5, 0x239, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) r6 = socket(0x10, 0x3, 0x0) splice(r1, &(0x7f0000000040)=0x7, r2, &(0x7f00000000c0)=0x1, 0x1, 0x4) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x0, 0xfffffffc}, 0x10) write(r6, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000000000008000f00fd000000", 0x24) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, 0x0, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) flock(0xffffffffffffffff, 0x2) syz_open_dev$video4linux(&(0x7f00000001c0), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) 4.216870712s ago: executing program 0 (id=1626): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x3) setsockopt$inet6_int(r3, 0x29, 0xb, &(0x7f0000000100)=0x400, 0x4) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb, 0x20}, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r4, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000480)={0x44, 0x1, 0x9, 0x101, 0x0, 0x0, {0x5}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xfa98}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0xa915}}, @NFCTH_STATUS={0x8}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x87}}, @NFCTH_STATUS={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0xc890) 4.01716041s ago: executing program 4 (id=1627): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg0\x00', 0x0}) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x20, 0x4, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) r2 = open(&(0x7f0000002240)='.\x00', 0x0, 0xa0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0xc0185879, &(0x7f0000000680)={0x4, 0x966a, 0x2000, 0x7, 0x0, 0x10, 0x2401}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0xc, &(0x7f00000003c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r1, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x963, 0x3, 0x53, 0x202, 0x1, 0xc}) ioctl$FBIOGET_FSCREENINFO(r3, 0x4602, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0xffff8000, 0x2, 0x0, 'queue1\x00', 0x4}) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(r4, 0x84, 0x3, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001013010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 3.29406884s ago: executing program 0 (id=1628): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, 0x0, 0x0) 3.036101476s ago: executing program 0 (id=1629): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r0, &(0x7f00000014c0)=[{&(0x7f0000000140)=""/4096, 0x1000}, {&(0x7f0000001140)=""/158, 0x9e}, {&(0x7f0000001540)=""/221, 0xdd}, {&(0x7f0000001300)=""/252, 0xfc}, {&(0x7f0000001400)=""/130, 0x82}], 0x5, 0x0, 0x4) ioprio_set$uid(0x3, 0x0, 0x0) ioprio_get$pid(0x2, 0x0) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f0000001240)={0x0, 0xce95, 0x1, '\x00', &(0x7f0000001200)=0x4}) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(0xffffffffffffffff, 0x942e, 0x0) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x2, 0xe, @dev={0xfe, 0x80, '\x00', 0xfd}, 0x9}, 0x1c) r2 = socket$igmp6(0xa, 0x3, 0x2) syz_socket_connect_nvme_tcp() setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2c10", 0x2}, {&(0x7f0000000040)="9d9058ffb1c145eaa40a21d30e51f7050c8202fee9ed29ed48a6c6f6", 0x1c}, {&(0x7f0000000180)="5d0c526cb0168c8296e734c00c6a13855d4b67e1a6fbb9e6334a9490b13b1242592af4ce4383863b68198d08d644770d034f1c41add0787a40f2ad9173e581a5a56304c6b6683da4fb5f3766f36f0ee8bd8bf5e5f91d350fbc93938fac01ca9617d8d15db605b0372617a5737e57", 0x6e}, {&(0x7f0000000200)="cbf9785c", 0x4}], 0x4, 0x0, 0x0, 0x2c}, 0x44004) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x18, 0x4, &(0x7f0000001740)=ANY=[@ANYBLOB="b4050000000000007910080000000200c951721d8286e9021e0000000800000095000000000000008d9a1476d465da45af263b79be54a908ba77f52813e0ab09100e44d2e7e3c188da907337bdab27798e5c0481ae958ee9b7aad8bb2c6c403412bd3d910c27ea38e2383fe531147b57db31e6358c27f5fdb6f9bc2a183707103a0970bf45e8e7ac409bb45048c0ef04ed4796da0a5861eb11adc94525e9c1edd4677a34483a995220ca0b4633c0db81cf22916c7afad84b00e6bcc09e17c3c6232fd2fd06e96f314663c66587fe06511b1a266d1bc038007200"/241], &(0x7f0000001280)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x14, '\x00', 0x0, @fallback=0x8, r0, 0x8, &(0x7f0000000000)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x800000}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') (async) preadv(r0, &(0x7f00000014c0)=[{&(0x7f0000000140)=""/4096, 0x1000}, {&(0x7f0000001140)=""/158, 0x9e}, {&(0x7f0000001540)=""/221, 0xdd}, {&(0x7f0000001300)=""/252, 0xfc}, {&(0x7f0000001400)=""/130, 0x82}], 0x5, 0x0, 0x4) (async) ioprio_set$uid(0x3, 0x0, 0x0) (async) ioprio_get$pid(0x2, 0x0) (async) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f0000001240)={0x0, 0xce95, 0x1, '\x00', &(0x7f0000001200)=0x4}) (async) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(0xffffffffffffffff, 0x942e, 0x0) (async) socket$inet6(0xa, 0x3, 0x8000000003c) (async) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x2, 0xe, @dev={0xfe, 0x80, '\x00', 0xfd}, 0x9}, 0x1c) (async) socket$igmp6(0xa, 0x3, 0x2) (async) syz_socket_connect_nvme_tcp() (async) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) (async) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2c10", 0x2}, {&(0x7f0000000040)="9d9058ffb1c145eaa40a21d30e51f7050c8202fee9ed29ed48a6c6f6", 0x1c}, {&(0x7f0000000180)="5d0c526cb0168c8296e734c00c6a13855d4b67e1a6fbb9e6334a9490b13b1242592af4ce4383863b68198d08d644770d034f1c41add0787a40f2ad9173e581a5a56304c6b6683da4fb5f3766f36f0ee8bd8bf5e5f91d350fbc93938fac01ca9617d8d15db605b0372617a5737e57", 0x6e}, {&(0x7f0000000200)="cbf9785c", 0x4}], 0x4, 0x0, 0x0, 0x2c}, 0x44004) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x18, 0x4, &(0x7f0000001740)=ANY=[@ANYBLOB="b4050000000000007910080000000200c951721d8286e9021e0000000800000095000000000000008d9a1476d465da45af263b79be54a908ba77f52813e0ab09100e44d2e7e3c188da907337bdab27798e5c0481ae958ee9b7aad8bb2c6c403412bd3d910c27ea38e2383fe531147b57db31e6358c27f5fdb6f9bc2a183707103a0970bf45e8e7ac409bb45048c0ef04ed4796da0a5861eb11adc94525e9c1edd4677a34483a995220ca0b4633c0db81cf22916c7afad84b00e6bcc09e17c3c6232fd2fd06e96f314663c66587fe06511b1a266d1bc038007200"/241], &(0x7f0000001280)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x14, '\x00', 0x0, @fallback=0x8, r0, 0x8, &(0x7f0000000000)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x800000}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) 2.948800945s ago: executing program 4 (id=1630): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000001280)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e21, 0xb, @empty, 0x3}}, 0x24) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x2a, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r3, 0x1, 0x1f, 0x0, &(0x7f0000000240)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x9006000, &(0x7f00000030c0)=[{&(0x7f0000000180)="1400000016001963d25a80648c56915a19aa2bfe", 0x14}], 0x1}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @private2, 0x3}, 0x1c) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000400)=[{0x602, 0xfc, 0x0, 0xfffff011}, {0x28, 0x0, 0x0, 0xffffefff}, {0x6, 0x0, 0x8, 0x6}]}, 0x10) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYRESOCT, @ANYRESHEX=r0, @ANYRES64=r2]) umount2(&(0x7f0000000040)='.\x00', 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1800) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) socket$phonet(0x23, 0x2, 0x1) 2.927119371s ago: executing program 0 (id=1631): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x7c, r2, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x30, 0x8, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x4}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x14, r2, 0x800, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r6, 0xc01064bd, &(0x7f0000000280)={&(0x7f00000008c0)='\x00', 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000480)=[0x0], 0x1}) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="043e4a0d0302"], 0x4d) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f00000001c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r6, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000400)=[0x0], &(0x7f0000000280), 0x1, r8}) ioctl$DRM_IOCTL_MODE_ATOMIC(r6, 0xc03864bc, &(0x7f0000000040)={0x0, 0x1, &(0x7f00000000c0)=[r8], &(0x7f0000000280), &(0x7f0000000300)=[0x0], &(0x7f0000000340)}) mkdir(0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="1400000016000b63d25a80648c2594f917240685", 0x14}], 0x1}, 0x0) r9 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r9, &(0x7f0000000700)={&(0x7f0000000000)={0x2, 0x0, @rand_addr=0xe0000000}, 0x10, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="280000000000000000000000070000000718a87f000001ac141400e0", @ANYRESOCT], 0x48}, 0x24068814) write$cgroup_int(r0, &(0x7f0000000080)=0x2, 0x12) creat(&(0x7f0000000040)='./file0\x00', 0x4b) 2.042171372s ago: executing program 4 (id=1632): socket$nl_generic(0x10, 0x3, 0x10) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps\x00') prlimit64(r0, 0xd, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$alg(0x26, 0x5, 0x0) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0x3}, {0x9, 0xffff}, {0xffff, 0xffff}}, [@TCA_STAB={0x0, 0x8, 0x0, 0x1, [{{0x0, 0x1, {0x5, 0x5, 0x8000, 0x7, 0x2, 0x5, 0x1}}, {0x0, 0x2, [0x0, 0x2]}}, {{0x0, 0x1, {0x4, 0x9, 0xffe, 0x5055, 0x2, 0x1, 0x2}}, {0x0, 0x2, [0x2, 0xf, 0x347]}}, {{0x0, 0x1, {0x7, 0x15, 0x9, 0xc6d0, 0x0, 0xf5a4, 0x893f}}, {0x0, 0x2, [0x80, 0x401]}}, {{0x0, 0x1, {0xcc, 0xf7, 0x6, 0x0, 0x1, 0x0, 0x8}}, {0x0, 0x2, [0x3]}}, {{0x0, 0x1, {0x4f, 0x48, 0x9c67, 0x8, 0x0, 0x62a6, 0x4}}, {0x0, 0x2, [0x0, 0x85, 0xe, 0x5, 0x3, 0xe99, 0x1ea3]}}]}]}, 0x77}, 0x1, 0x0, 0x0, 0x20840}, 0x44080) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x2}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0xf}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x55}, 0x4000) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x20, 0x61, 0x11, 0x8c}, [@call={0x85, 0x0, 0x0, 0xcc}]}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) bind$inet6(r7, 0x0, 0x0) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x3, 0x3, @loopback, 0x800000}, 0x1c) shutdown(r7, 0x2) r8 = socket$alg(0x26, 0x5, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0x5, &(0x7f0000000180)=0x4f0, 0x4) bind$alg(r8, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r9 = accept4(r8, 0x0, 0x0, 0x80800) sendmmsg$inet(r9, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000cc0)="af0ca5", 0x3}, {&(0x7f0000000140)='0', 0x1}], 0x2}}], 0x1, 0x0) 2.031577445s ago: executing program 3 (id=1633): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000) r2 = syz_open_dev$usbfs(&(0x7f0000005c80), 0x206, 0x8401) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$USBDEVFS_SUBMITURB(r3, 0x802c550a, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x2, 0x0, 0x8, 0x9, 0x2, 0x0, 0x70bd2c, 0x25dfdbfc}, 0x10}}, 0x40000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x300048c1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000100)=r5, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0xffffd8ee, @hyper}, 0x10) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x2c, 0x9, 0x6, 0x101, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 1.977701596s ago: executing program 0 (id=1634): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x54, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x8, 0x8, 0x0, 0x1, [{0x4}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x1c, r1, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@WGDEVICE_A_FLAGS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r5, 0xc01064bd, &(0x7f0000000280)={&(0x7f00000008c0)='\x00', 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={0x0}) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="043e4a0d0302"], 0x4d) ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r5, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000400)=[0x0], &(0x7f0000000280), 0x1, r6}) ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, &(0x7f0000000040)={0x0, 0x1, &(0x7f00000000c0)=[r6], &(0x7f0000000280), &(0x7f0000000300)=[0x0], &(0x7f0000000340)}) mkdir(0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="1400000016000b63d25a80648c2594f917240685", 0x14}], 0x1}, 0x0) r7 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r7, &(0x7f0000000700)={&(0x7f0000000000)={0x2, 0x0, @rand_addr=0xe0000000}, 0x10, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="280000000000000000000000070000000718a87f000001ac141400e0", @ANYRESOCT], 0x48}, 0x24068814) write$cgroup_int(r0, &(0x7f0000000080)=0x2, 0x12) creat(&(0x7f0000000040)='./file0\x00', 0x4b) 1.4956245s ago: executing program 1 (id=1635): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x255f, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0x7) write$uinput_user_dev(r2, &(0x7f0000000080)={'syz0\x00', {0x0, 0x2}, 0x35, [0x4346, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffdffc, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffd, 0xfffffff8, 0x0, 0x4, 0x3, 0x7ff, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0xfffffffb, 0xfffffffd, 0x0, 0x0, 0xfff, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x4, 0x4, 0x0, 0x0, 0x10000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x100, 0x7], [0x3ff, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x8, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x80000001, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffc, 0x0, 0x5, 0x1, 0x2], [0x2, 0x0, 0x3, 0x6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xe, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42cb, 0x0, 0x80000020, 0xfffffffd, 0x0, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0x6, 0x0, 0x2, 0x0, 0x18, 0x0, 0x5, 0x0, 0x0, 0x0, 0x400000, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9156, 0x20000000], [0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xffffffff, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x40000, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x20, 0xfffffffc, 0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0xffffbf90]}, 0x45c) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x11) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = openat$rtc(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$RTC_AIE_ON(r3, 0x7001) r4 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r4, 0x0, &(0x7f0000000040)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0xf0b, 0x13, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x5}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x8000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe, 0x9}, {0xfff3, 0x5}, {0x1c, 0x2613a1b406814a86}}}, 0x24}}, 0x44804) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) open(0x0, 0x62b000, 0x40) openat$rtc(0xffffffffffffff9c, &(0x7f0000000600), 0x20001, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x36, 0x1, 0x1, "c8010000000a0001000012e25c2299230500", 0x4745504d}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 568.558153ms ago: executing program 0 (id=1636): syz_open_dev$dri(&(0x7f0000000080), 0x8004, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x7, 0x2, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0xb, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) sendmmsg(r2, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000002280)="12e2ece8", 0xe212}], 0x1}}], 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) creat(&(0x7f0000000400)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000280)='./bus\x00', &(0x7f0000000180), &(0x7f0000000440)=ANY=[@ANYBLOB="04"], 0x2, 0x1) 566.221066ms ago: executing program 3 (id=1637): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000100)={r3, 0xc}, 0x8) recvmsg$unix(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1c}, 0x40012021) close(r1) 163.700186ms ago: executing program 3 (id=1638): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r2, 0x28, 0x6, &(0x7f0000000000), 0x10) fsmount(0xffffffffffffffff, 0x0, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000080)={0x0, "4fcb813dd28b42bee2b094a3de6dbfd30a74457bcd1cfd5feffe5c019f45d57f", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000180)={"000000149c0286e08ffad43c40fc0a000000ab65a29e23546aad0281b3aff5eb", r4, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r5, 0xc0383e04, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, &(0x7f0000000240)="000000000000004099b8f276dc75584a8d87d907005858367d61f49e1639a48f614a54a8192c2876b7f843cd3a3c072803a0f1e28983b5cdc2e29b6e", 0x3c, 0xffffffffffffffff) ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000100)={0x31, 0x2, 0x0, "b45970dde5d25e1618645d46863ac90620c123f0d20000033d00007b572c1f00", 0x72767312}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xbcb5, 0x0, 0x5, 0x1000}, &(0x7f0000000040), &(0x7f0000000300)) eventfd2(0x58, 0x80000) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r8, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth0_virt_wifi\x00', 0x2000000}, 0x18) 155.185091ms ago: executing program 1 (id=1639): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 1 (id=1640): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x286000, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r2, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="17090000000000000000010000000500070000000000080009000000001b08000a0000000000060002000100000014001f0000000000000000000000000000000000140020"], 0x64}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="060000000400000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) kernel console output (not intermixed with test programs): 5][ T9649] ldm_validate_partition_table(): Disk read failed. [ 386.262937][ T9649] Buffer I/O error on dev loop6, logical block 0, async page read [ 386.300758][ T9649] Buffer I/O error on dev loop6, logical block 0, async page read [ 386.323076][ T9649] Dev loop6: unable to read RDB block 0 [ 386.349667][ T9649] loop6: unable to read partition table [ 386.377069][ T9649] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 386.408348][ T6010] ldm_validate_partition_table(): Disk read failed. [ 386.415262][ T6010] Dev loop6: unable to read RDB block 0 [ 386.427125][ T6010] loop6: unable to read partition table [ 386.460878][ T24] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 386.595836][ T5197] ldm_validate_partition_table(): Disk read failed. [ 387.240736][ T5197] Dev loop6: unable to read RDB block 0 [ 387.246652][ T5197] loop6: unable to read partition table [ 387.307763][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 387.350714][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 35, changing to 7 [ 387.380544][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 41963, setting to 1024 [ 387.419527][ T24] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 388.151215][ T5916] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 388.197302][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.205375][ T24] usb 1-1: Product: syz [ 388.209536][ T24] usb 1-1: Manufacturer: syz [ 388.214255][ T24] usb 1-1: SerialNumber: syz [ 388.221684][ T24] usb 1-1: config 0 descriptor?? [ 388.232603][ T24] usb 1-1: 0:0 : invalid sync pipe. bmAttributes 01, bLength 9, bSynchAddress 7f [ 388.335188][ T5916] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 388.345677][ T5916] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.355400][ T5916] usb 3-1: Product: syz [ 388.359779][ T5916] usb 3-1: Manufacturer: syz [ 388.366314][ T5916] usb 3-1: SerialNumber: syz [ 388.399585][ T5916] usb 3-1: config 0 descriptor?? [ 388.579799][ T30] audit: type=1400 audit(1744574312.326:1104): avc: denied { mount } for pid=9665 comm="syz.0.1031" name="/" dev="configfs" ino=1153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 388.810607][ T5916] usb 3-1: ignoring: probably an ADSL modem [ 388.852901][ T30] audit: type=1400 audit(1744574312.376:1105): avc: denied { search } for pid=9665 comm="syz.0.1031" name="/" dev="configfs" ino=1153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 388.876900][ T30] audit: type=1400 audit(1744574312.376:1106): avc: denied { read } for pid=9665 comm="syz.0.1031" name="/" dev="configfs" ino=1153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 388.928615][ T30] audit: type=1400 audit(1744574312.376:1107): avc: denied { open } for pid=9665 comm="syz.0.1031" path="/" dev="configfs" ino=1153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 388.963664][ T30] audit: type=1400 audit(1744574312.476:1108): avc: denied { setopt } for pid=9665 comm="syz.0.1031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 389.682147][ T9704] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 389.787642][ T5916] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 390.014390][ T24] usb 1-1: USB disconnect, device number 31 [ 391.280595][ T5916] usb 3-1: USB disconnect, device number 31 [ 391.469076][ T30] audit: type=1400 audit(1744574315.206:1109): avc: denied { name_connect } for pid=9709 comm="syz.4.1044" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 391.474549][ T9716] netlink: 236 bytes leftover after parsing attributes in process `syz.2.1045'. [ 391.527134][ T30] audit: type=1400 audit(1744574315.266:1110): avc: denied { shutdown } for pid=9709 comm="syz.4.1044" lport=46486 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 391.583663][ T30] audit: type=1400 audit(1744574315.326:1111): avc: denied { ioctl } for pid=9709 comm="syz.4.1044" path="socket:[25780]" dev="sockfs" ino=25780 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 391.621408][ T30] audit: type=1400 audit(1744574315.336:1112): avc: denied { listen } for pid=9709 comm="syz.4.1044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 391.643099][ T5831] udevd[5831]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 391.665680][ T30] audit: type=1400 audit(1744574315.336:1113): avc: denied { connect } for pid=9709 comm="syz.4.1044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 392.450542][ T9733] input input56: cannot allocate more than FF_MAX_EFFECTS effects [ 393.316260][ T9744] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1054'. [ 394.230603][ T24] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 394.243229][ T5898] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 394.391973][ T24] usb 5-1: config index 0 descriptor too short (expected 4114, got 18) [ 394.409135][ T24] usb 5-1: New USB device found, idVendor=066b, idProduct=20f9, bcdDevice=ff.94 [ 394.421944][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.430019][ T24] usb 5-1: Product: syz [ 394.448509][ T24] usb 5-1: Manufacturer: syz [ 394.639593][ T24] usb 5-1: SerialNumber: syz [ 394.645235][ T9761] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 394.745941][ T24] usb 5-1: config 0 descriptor?? [ 394.970847][ T5898] usb 4-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 395.280555][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.288583][ T5898] usb 4-1: Product: syz [ 395.293059][ T5898] usb 4-1: Manufacturer: syz [ 395.297658][ T5898] usb 4-1: SerialNumber: syz [ 395.344145][ T5898] usb 4-1: config 0 descriptor?? [ 395.579976][ T5898] usb 4-1: ignoring: probably an ADSL modem [ 395.633290][ T9772] tmpfs: Unknown parameter '¸9z…¯1¾' [ 395.879443][ T9774] input: syz0 as /devices/virtual/input/input57 [ 396.010415][ T5898] cxacru 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 396.148997][ T30] audit: type=1400 audit(1744574319.896:1114): avc: denied { ioctl } for pid=9745 comm="syz.4.1055" path="socket:[25078]" dev="sockfs" ino=25078 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 396.150853][ T9777] netlink: 'syz.4.1055': attribute type 10 has an invalid length. [ 396.376726][ T9777] hsr_slave_0: left promiscuous mode [ 396.378233][ T9777] hsr_slave_1: left promiscuous mode [ 396.404097][ T5898] usb 4-1: USB disconnect, device number 32 [ 396.657708][ T30] audit: type=1400 audit(1744574320.406:1115): avc: denied { create } for pid=9782 comm="syz.2.1066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 396.664044][ T30] audit: type=1400 audit(1744574320.416:1116): avc: denied { bind } for pid=9782 comm="syz.2.1066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 396.664353][ T30] audit: type=1400 audit(1744574320.416:1117): avc: denied { name_bind } for pid=9782 comm="syz.2.1066" src=512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 396.665744][ T30] audit: type=1400 audit(1744574320.416:1118): avc: denied { node_bind } for pid=9782 comm="syz.2.1066" saddr=4000:0:20:: src=512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 396.748518][ C1] vkms_vblank_simulate: vblank timer overrun [ 396.841288][ T9783] block nbd0: server does not support multiple connections per device. [ 396.850881][ T5898] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 396.859585][ T24] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 396.869899][ T24] asix 5-1:0.0: probe with driver asix failed with error -71 [ 396.892167][ T9783] block nbd0: shutting down sockets [ 396.892552][ T24] usb 5-1: USB disconnect, device number 24 [ 397.022333][ T5898] usb 1-1: Using ep0 maxpacket: 16 [ 397.034084][ T5898] usb 1-1: config 1 has an invalid interface descriptor of length 5, skipping [ 397.051868][ T5898] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 397.063987][ T5898] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 397.093937][ T5898] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 397.131219][ T5898] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 397.140329][ T5898] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.157729][ T5898] usb 1-1: Product: syz [ 397.180882][ T5898] usb 1-1: Manufacturer: syz [ 397.196168][ T5898] usb 1-1: SerialNumber: syz [ 397.447615][ T9800] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 398.451331][ T30] audit: type=1400 audit(1744574321.746:1119): avc: denied { sys_module } for pid=9794 comm="syz.1.1071" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 398.550356][ T5898] usb 1-1: 0:2 : does not exist [ 398.555350][ T5898] usb 1-1: unit 4 not found! [ 398.845120][ T5898] usb 1-1: USB disconnect, device number 32 [ 398.980895][ T9813] macvlan2: entered promiscuous mode [ 399.006827][ T9813] macvlan2: entered allmulticast mode [ 399.023729][ T9813] batadv0: entered promiscuous mode [ 399.091531][ T30] audit: type=1400 audit(1744574322.846:1120): avc: denied { ioctl } for pid=9814 comm="syz.1.1076" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=26034 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 399.131910][ T6010] udevd[6010]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 399.152464][ T9813] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 399.160246][ T9813] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 399.334602][ T30] audit: type=1400 audit(1744574322.936:1121): avc: denied { watch watch_reads } for pid=9814 comm="syz.1.1076" path="/218" dev="tmpfs" ino=1162 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 399.467194][ T30] audit: type=1400 audit(1744574323.216:1122): avc: denied { ioctl } for pid=9818 comm="syz.2.1078" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x9426 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 399.502554][ T9821] vcan0: tx drop: invalid da for name 0x0000000000000005 [ 399.730700][ T30] audit: type=1400 audit(1744574323.216:1123): avc: denied { bind } for pid=9818 comm="syz.2.1078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 399.817921][ T9823] uprobe: syz.1.1079:9823 failed to unregister, leaking uprobe [ 399.820058][ T30] audit: type=1400 audit(1744574323.246:1124): avc: denied { write } for pid=9818 comm="syz.2.1078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 399.852006][ T24] hid-generic 0000:0003:0000.000E: unknown main item tag 0x0 [ 399.863322][ T24] hid-generic 0000:0003:0000.000E: unknown main item tag 0x0 [ 399.943207][ T24] hid-generic 0000:0003:0000.000E: hidraw0: HID v0.00 Device [syz0] on syz1 [ 400.280629][ T24] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 401.021693][ T9841] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 401.224569][ T24] usb 2-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 401.284571][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.293154][ T24] usb 2-1: Product: syz [ 401.762232][ T24] usb 2-1: Manufacturer: syz [ 401.776051][ T24] usb 2-1: SerialNumber: syz [ 401.808251][ T24] usb 2-1: config 0 descriptor?? [ 402.096471][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 402.096488][ T30] audit: type=1400 audit(1744574325.706:1126): avc: denied { write } for pid=9855 comm="syz.4.1089" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 402.829532][ T24] usb 2-1: ignoring: probably an ADSL modem [ 403.210562][ T30] audit: type=1400 audit(1744574325.706:1127): avc: denied { nlmsg_write } for pid=9855 comm="syz.4.1089" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 403.483381][ T9868] FAULT_INJECTION: forcing a failure. [ 403.483381][ T9868] name failslab, interval 1, probability 0, space 0, times 0 [ 403.496173][ T9868] CPU: 0 UID: 0 PID: 9868 Comm: syz.4.1093 Not tainted 6.15.0-rc1-syzkaller-00325-g7cdabafc0012 #0 PREEMPT(full) [ 403.496194][ T9868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 403.496204][ T9868] Call Trace: [ 403.496210][ T9868] [ 403.496216][ T9868] dump_stack_lvl+0x16c/0x1f0 [ 403.496241][ T9868] should_fail_ex+0x512/0x640 [ 403.496258][ T9868] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 403.496278][ T9868] should_failslab+0xc2/0x120 [ 403.496295][ T9868] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 403.496309][ T9868] ? __alloc_skb+0x2b2/0x380 [ 403.496330][ T9868] __alloc_skb+0x2b2/0x380 [ 403.496345][ T9868] ? __pfx___alloc_skb+0x10/0x10 [ 403.496359][ T9868] ? __pfx___nla_validate_parse+0x10/0x10 [ 403.496377][ T9868] ? __lock_acquire+0xaa4/0x1ba0 [ 403.496391][ T9868] ? gen_new_estimator+0x63a/0x860 [ 403.496413][ T9868] ? __pfx_gen_new_estimator+0x10/0x10 [ 403.496436][ T9868] qdisc_notify.isra.0+0xde/0x3f0 [ 403.496466][ T9868] tc_modify_qdisc+0x913/0x2100 [ 403.496488][ T9868] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 403.496521][ T9868] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 403.496542][ T9868] rtnetlink_rcv_msg+0x3c6/0xe90 [ 403.496567][ T9868] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 403.496598][ T9868] netlink_rcv_skb+0x16a/0x440 [ 403.496621][ T9868] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 403.496642][ T9868] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 403.496677][ T9868] ? netlink_deliver_tap+0x1ae/0xd30 [ 403.496701][ T9868] netlink_unicast+0x53a/0x7f0 [ 403.496725][ T9868] ? __pfx_netlink_unicast+0x10/0x10 [ 403.496751][ T9868] netlink_sendmsg+0x8d1/0xdd0 [ 403.496777][ T9868] ? __pfx_netlink_sendmsg+0x10/0x10 [ 403.496808][ T9868] ____sys_sendmsg+0xa95/0xc70 [ 403.496832][ T9868] ? copy_msghdr_from_user+0x10a/0x160 [ 403.496850][ T9868] ? __pfx_____sys_sendmsg+0x10/0x10 [ 403.496882][ T9868] ___sys_sendmsg+0x134/0x1d0 [ 403.496902][ T9868] ? __pfx____sys_sendmsg+0x10/0x10 [ 403.496950][ T9868] __sys_sendmsg+0x16d/0x220 [ 403.496971][ T9868] ? __pfx___sys_sendmsg+0x10/0x10 [ 403.496999][ T9868] ? rcu_is_watching+0x12/0xc0 [ 403.497026][ T9868] do_syscall_64+0xcd/0x260 [ 403.497051][ T9868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.497068][ T9868] RIP: 0033:0x7f17c3f8d169 [ 403.497082][ T9868] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 403.497099][ T9868] RSP: 002b:00007f17c4de0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 403.497115][ T9868] RAX: ffffffffffffffda RBX: 00007f17c41a5fa0 RCX: 00007f17c3f8d169 [ 403.497126][ T9868] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 403.497135][ T9868] RBP: 00007f17c4de0090 R08: 0000000000000000 R09: 0000000000000000 [ 403.497145][ T9868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 403.497154][ T9868] R13: 0000000000000000 R14: 00007f17c41a5fa0 R15: 00007ffcbbbd3bc8 [ 403.497176][ T9868] [ 405.047911][ T24] cxacru 2-1:0.0: usbatm_usb_probe: bind failed: -19! [ 405.233609][ T24] usb 2-1: USB disconnect, device number 28 [ 406.082218][ T9896] 9pnet_virtio: no channels available for device syz [ 406.092332][ T30] audit: type=1400 audit(1744574329.776:1128): avc: denied { setopt } for pid=9892 comm="syz.1.1099" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 406.204498][ T30] audit: type=1400 audit(1744574329.956:1129): avc: denied { append } for pid=9895 comm="syz.4.1100" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 406.418099][ T9898] input: syz0 as /devices/virtual/input/input58 [ 406.432803][ T30] audit: type=1400 audit(1744574330.076:1130): avc: denied { setopt } for pid=9895 comm="syz.4.1100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 407.493320][ T9909] vxcan1: entered allmulticast mode [ 407.523809][ T9909] vxcan1: left allmulticast mode [ 407.929077][ T9917] input: syz0 as /devices/virtual/input/input59 [ 407.935630][ T9917] input: failed to attach handler leds to device input59, error: -6 [ 408.060587][ T5898] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 408.600416][ T9925] macvlan3: entered promiscuous mode [ 408.609155][ T9925] macvlan3: entered allmulticast mode [ 408.624861][ T9925] batadv0: entered promiscuous mode [ 408.631393][ T9925] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 409.510011][ T9925] bond0: (slave macvlan3): Enslaving as an active interface with an up link [ 410.675556][ T5898] usb 2-1: device descriptor read/all, error -71 [ 410.782750][ T30] audit: type=1400 audit(1744574334.536:1131): avc: denied { module_load } for pid=9941 comm="syz.2.1114" path="/205/bus" dev="tmpfs" ino=1097 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 410.812126][ T9942] Invalid ELF header magic: != ELF [ 411.084059][ T30] audit: type=1400 audit(1744574334.826:1132): avc: denied { create } for pid=9938 comm="syz.0.1112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 411.250175][ T30] audit: type=1400 audit(1744574334.826:1133): avc: denied { bind } for pid=9938 comm="syz.0.1112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 411.267972][ T9940] can: request_module (can-proto-0) failed. [ 412.448953][ T30] audit: type=1326 audit(1744574336.126:1134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9978 comm="syz.0.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4883d8d169 code=0x7ffc0000 [ 412.482734][ T30] audit: type=1326 audit(1744574336.126:1135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9978 comm="syz.0.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4883d8d169 code=0x7ffc0000 [ 412.532385][ T30] audit: type=1326 audit(1744574336.156:1136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9978 comm="syz.0.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4883d8d169 code=0x7ffc0000 [ 412.579749][ T30] audit: type=1326 audit(1744574336.156:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9978 comm="syz.0.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4883d8d169 code=0x7ffc0000 [ 412.640191][ T30] audit: type=1326 audit(1744574336.156:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9978 comm="syz.0.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4883d8d169 code=0x7ffc0000 [ 412.686856][ T30] audit: type=1326 audit(1744574336.156:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9978 comm="syz.0.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4883d8d169 code=0x7ffc0000 [ 412.717715][ T30] audit: type=1326 audit(1744574336.156:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9978 comm="syz.0.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4883d8d169 code=0x7ffc0000 [ 413.980659][ T24] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 414.075249][ T9994] sctp: [Deprecated]: syz.2.1127 (pid 9994) Use of int in maxseg socket option. [ 414.075249][ T9994] Use struct sctp_assoc_value instead [ 414.174547][ T9995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 414.192670][ T9995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.202642][ T9995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 414.213327][ T9995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.223252][ T9995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 414.235342][ T9995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.240559][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 414.250427][ T9995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 414.261008][ T9995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.275186][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 416.525118][ T24] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 416.534269][ T24] usb 4-1: can't read configurations, error -71 [ 417.826067][T10012] input: syz0 as /devices/virtual/input/input60 [ 418.047069][T10017] Cannot find add_set index 2 as target [ 418.062657][T10017] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 420.470039][T10059] ======================================================= [ 420.470039][T10059] WARNING: The mand mount option has been deprecated and [ 420.470039][T10059] and is ignored by this kernel. Remove the mand [ 420.470039][T10059] option from the mount to silence this warning. [ 420.470039][T10059] ======================================================= [ 420.510910][T10059] fuse: Unknown parameter '0x0000000000000008' [ 420.841357][T10063] netlink: 'syz.3.1142': attribute type 12 has an invalid length. [ 420.860977][T10063] netlink: 'syz.3.1142': attribute type 29 has an invalid length. [ 420.868866][T10063] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1142'. [ 421.008829][T10063] netlink: 59 bytes leftover after parsing attributes in process `syz.3.1142'. [ 421.274550][ T5898] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 421.461282][ T5898] usb 2-1: Using ep0 maxpacket: 32 [ 421.467927][ T5898] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 421.479570][ T5898] usb 2-1: config 0 has no interface number 0 [ 421.499404][ T5898] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 421.697156][ T5898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.706440][ T5898] usb 2-1: Product: syz [ 422.029415][ T5898] usb 2-1: Manufacturer: syz [ 422.045903][ T5898] usb 2-1: SerialNumber: syz [ 422.063986][ T5898] usb 2-1: config 0 descriptor?? [ 422.104230][ T5898] usb 2-1: can't set config #0, error -71 [ 422.126038][ T5898] usb 2-1: USB disconnect, device number 31 [ 422.802737][T10094] netlink: 'syz.0.1149': attribute type 12 has an invalid length. [ 422.810884][T10094] netlink: 'syz.0.1149': attribute type 29 has an invalid length. [ 422.818788][T10094] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1149'. [ 422.828142][T10094] netlink: 59 bytes leftover after parsing attributes in process `syz.0.1149'. [ 423.332657][T10116] input: syz0 as /devices/virtual/input/input61 [ 423.422208][ T47] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 423.423719][ T5898] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 423.718210][ T5898] usb 3-1: Using ep0 maxpacket: 8 [ 423.732032][ T5898] usb 3-1: config 1 has an invalid interface descriptor of length 7, skipping [ 423.742572][T10126] input: syz0 as /devices/virtual/input/input62 [ 423.751795][ T47] usb 1-1: Using ep0 maxpacket: 32 [ 423.756047][ T5898] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 423.759400][ T47] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 424.015883][ T5898] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 424.130817][ T5916] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 424.182378][ T47] usb 1-1: config 0 has no interface number 0 [ 424.194942][ T47] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 424.205105][ T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.229900][ T47] usb 1-1: Product: syz [ 424.232479][ T5898] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 424.243291][ T47] usb 1-1: Manufacturer: syz [ 424.248030][ T47] usb 1-1: SerialNumber: syz [ 424.253196][ T5898] usb 3-1: New USB device strings: Mfr=3, Product=2, SerialNumber=3 [ 424.264825][ T47] usb 1-1: config 0 descriptor?? [ 424.284908][ T47] smsc95xx v2.0.0 [ 424.288644][ T5898] usb 3-1: Product: syz [ 424.297788][ T5898] usb 3-1: Manufacturer: syz [ 424.302563][ T5898] usb 3-1: SerialNumber: syz [ 424.371280][ T5916] usb 2-1: Using ep0 maxpacket: 8 [ 424.382118][ T5916] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 424.391563][ T5916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.399662][ T5916] usb 2-1: Product: syz [ 424.404172][ T5916] usb 2-1: Manufacturer: syz [ 424.408872][ T5916] usb 2-1: SerialNumber: syz [ 424.418156][ T5916] usb 2-1: config 0 descriptor?? [ 424.639296][ T5916] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 425.542043][T10120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 425.551724][T10120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 425.562880][ T5916] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 425.582084][ T5916] usb 2-1: USB disconnect, device number 32 [ 425.757408][ T5898] usb 3-1: USB disconnect, device number 32 [ 426.012697][ T47] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 426.920694][ T47] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 427.190919][ T47] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 427.206347][T10144] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1162'. [ 427.244115][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 427.244130][ T30] audit: type=1400 audit(1744574350.996:1152): avc: denied { accept } for pid=10143 comm="syz.2.1162" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 427.272519][ T47] usb 1-1: USB disconnect, device number 33 [ 427.315672][ T30] audit: type=1400 audit(1744574351.026:1153): avc: denied { read } for pid=10143 comm="syz.2.1162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 431.222683][T10170] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1169'. [ 431.339368][T10176] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 431.347630][ T30] audit: type=1400 audit(1744574355.086:1154): avc: denied { connect } for pid=10171 comm="syz.0.1171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 431.908047][T10181] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1172'. [ 432.784760][T10189] autofs: Bad value for 'fd' [ 434.539692][ T30] audit: type=1326 audit(1744574356.526:1155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10186 comm="syz.3.1175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aeb18d169 code=0x7ffc0000 [ 434.659231][ T30] audit: type=1326 audit(1744574356.526:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10186 comm="syz.3.1175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aeb18d169 code=0x7ffc0000 [ 434.682761][ C1] vkms_vblank_simulate: vblank timer overrun [ 434.969948][T10198] overlayfs: overlapping lowerdir path [ 435.013140][ T30] audit: type=1326 audit(1744574356.526:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10186 comm="syz.3.1175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7f6aeb18d169 code=0x7ffc0000 [ 435.036616][ C1] vkms_vblank_simulate: vblank timer overrun [ 435.081260][ T30] audit: type=1326 audit(1744574356.526:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10186 comm="syz.3.1175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aeb18d169 code=0x7ffc0000 [ 435.104731][ C1] vkms_vblank_simulate: vblank timer overrun [ 435.199183][ T30] audit: type=1326 audit(1744574356.526:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10186 comm="syz.3.1175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aeb18d169 code=0x7ffc0000 [ 435.541970][ T30] audit: type=1326 audit(1744574356.536:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10186 comm="syz.3.1175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f6aeb18d169 code=0x7ffc0000 [ 435.565443][ C1] vkms_vblank_simulate: vblank timer overrun [ 435.665333][ T30] audit: type=1326 audit(1744574356.536:1161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10186 comm="syz.3.1175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aeb18d169 code=0x7ffc0000 [ 435.703501][ T30] audit: type=1326 audit(1744574356.536:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10186 comm="syz.3.1175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aeb18d169 code=0x7ffc0000 [ 435.850842][ T47] usb 1-1: new low-speed USB device number 34 using dummy_hcd [ 435.970679][ T5870] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 436.011656][ T30] audit: type=1326 audit(1744574356.536:1163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10186 comm="syz.3.1175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f6aeb18d169 code=0x7ffc0000 [ 436.059221][ T47] usb 1-1: config index 0 descriptor too short (expected 1307, got 27) [ 436.079213][ T47] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 436.102264][T10218] overlayfs: failed to resolve './file1': -2 [ 436.139874][ T47] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 436.149796][ T30] audit: type=1326 audit(1744574356.536:1164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10186 comm="syz.3.1175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aeb18d169 code=0x7ffc0000 [ 436.173728][ T5870] usb 2-1: device descriptor read/64, error -71 [ 436.180239][ T47] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 436.201610][ T47] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 436.214298][T10222] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 436.223522][ T47] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 436.233660][T10222] overlayfs: missing 'lowerdir' [ 436.238584][ T47] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 436.308351][ T47] usb 1-1: string descriptor 0 read error: -22 [ 436.344664][ T47] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 436.371734][ T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.411976][ T5870] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 436.604096][T10229] input: syz0 as /devices/virtual/input/input63 [ 436.607528][ T47] usb 1-1: config 0 descriptor?? [ 436.750654][ T47] hub 1-1:0.0: bad descriptor, ignoring hub [ 436.770942][ T47] hub 1-1:0.0: probe with driver hub failed with error -5 [ 436.780444][ T47] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input64 [ 436.833582][ T5870] usb 2-1: device descriptor read/64, error -71 [ 436.865769][T10232] netlink: 'syz.2.1188': attribute type 11 has an invalid length. [ 436.910118][T10232] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1188'. [ 436.997442][ T5870] usb usb2-port1: attempt power cycle [ 437.296759][T10240] input: syz0 as /devices/virtual/input/input65 [ 437.378070][ T5898] usb 1-1: USB disconnect, device number 34 [ 437.398125][ T5870] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 437.519031][ T5870] usb 2-1: device descriptor read/8, error -71 [ 437.546938][T10237] IPVS: Unknown mcast interface: hsr0 [ 437.880698][ T5870] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 438.376029][ T5870] usb 2-1: device descriptor read/8, error -71 [ 438.630646][ T10] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 438.632046][ T5870] usb usb2-port1: unable to enumerate USB device [ 438.851280][ T10] usb 4-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 438.914158][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.989436][ T10] usb 4-1: Product: syz [ 439.013459][ T10] usb 4-1: Manufacturer: syz [ 439.318434][ T10] usb 4-1: SerialNumber: syz [ 439.352233][ T10] usb 4-1: config 0 descriptor?? [ 439.430863][ T5825] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 439.455466][T10285] macsec1: entered promiscuous mode [ 439.516614][T10291] delete_channel: no stack [ 439.592598][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.599404][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.312311][ T10] usb 4-1: ignoring: probably an ADSL modem [ 440.430540][ T5825] usb 2-1: Using ep0 maxpacket: 8 [ 440.541264][ T10] cxacru 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 440.557907][ T5825] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 440.941929][ T5825] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 441.017920][ T5825] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0038, bcdDevice=99.03 [ 441.031173][ T5825] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.041453][ T5825] usb 2-1: Product: syz [ 441.045674][ T5825] usb 2-1: Manufacturer: syz [ 441.050326][ T5825] usb 2-1: SerialNumber: syz [ 441.079168][ T5825] usb 2-1: config 0 descriptor?? [ 441.185708][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 441.185724][ T30] audit: type=1400 audit(1744574364.936:1190): avc: denied { write } for pid=10305 comm="syz.4.1204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 441.185743][T10308] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1204'. [ 441.330058][ T5825] kernel write not supported for file /input/event2 (pid: 5825 comm: kworker/0:3) [ 441.413775][ T30] audit: type=1400 audit(1744574365.076:1191): avc: denied { getopt } for pid=10310 comm="syz.0.1205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 442.716851][ T5904] usb 2-1: USB disconnect, device number 37 [ 442.770603][ T30] audit: type=1400 audit(1744574366.506:1192): avc: denied { create } for pid=10323 comm="syz.0.1208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 442.834014][T10328] overlayfs: failed to resolve './file1': -2 [ 442.834990][ T30] audit: type=1400 audit(1744574366.516:1193): avc: denied { connect } for pid=10323 comm="syz.0.1208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 442.859794][ C1] vkms_vblank_simulate: vblank timer overrun [ 442.867557][ T5825] usb 4-1: USB disconnect, device number 35 [ 442.907279][ T30] audit: type=1400 audit(1744574366.566:1194): avc: denied { listen } for pid=10323 comm="syz.0.1208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 442.936456][ T30] audit: type=1400 audit(1744574366.586:1195): avc: denied { create } for pid=10323 comm="syz.0.1208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 442.992914][ T30] audit: type=1400 audit(1744574366.646:1196): avc: denied { setopt } for pid=10327 comm="syz.1.1209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 443.012519][ T5869] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 443.033125][ T30] audit: type=1400 audit(1744574366.646:1197): avc: denied { create } for pid=10327 comm="syz.1.1209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 443.075638][ T30] audit: type=1400 audit(1744574366.656:1198): avc: denied { write } for pid=10323 comm="syz.0.1208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 443.150584][ T5869] usb 5-1: device descriptor read/64, error -71 [ 443.176305][ T30] audit: type=1400 audit(1744574366.926:1199): avc: denied { sys_chroot } for pid=10343 comm="dhcpcd" capability=18 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 443.213913][T10338] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2568 sclass=netlink_route_socket pid=10338 comm=syz.0.1211 [ 443.228246][T10338] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2578 sclass=netlink_route_socket pid=10338 comm=syz.0.1211 [ 443.248147][T10346] input: syz0 as /devices/virtual/input/input66 [ 443.260702][ T5904] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 443.401198][ T5869] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 443.560590][ T5904] usb 2-1: Using ep0 maxpacket: 32 [ 443.576368][ T5904] usb 2-1: unable to get BOS descriptor or descriptor too short [ 444.193352][ T5904] usb 2-1: config 11 has an invalid interface number: 215 but max is 1 [ 444.235991][ T5869] usb 5-1: device descriptor read/64, error -71 [ 444.332585][ T5904] usb 2-1: config 11 has an invalid descriptor of length 1, skipping remainder of the config [ 444.626353][ T5904] usb 2-1: config 11 has 1 interface, different from the descriptor's value: 2 [ 444.637249][ T5904] usb 2-1: config 11 has no interface number 0 [ 444.643659][ T5904] usb 2-1: too many endpoints for config 11 interface 215 altsetting 131: 100, using maximum allowed: 30 [ 444.655079][ T5904] usb 2-1: config 11 interface 215 altsetting 131 has 0 endpoint descriptors, different from the interface descriptor's value: 100 [ 444.669126][ T5904] usb 2-1: config 11 interface 215 has no altsetting 0 [ 444.680682][ T5904] usb 2-1: New USB device found, idVendor=106c, idProduct=c1bb, bcdDevice=14.34 [ 444.689736][ T5904] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.780374][ T5869] usb usb5-port1: attempt power cycle [ 444.794621][ T5904] usb 2-1: Product: syz [ 444.820655][ T5904] usb 2-1: Manufacturer: syz [ 444.828293][ T5904] usb 2-1: SerialNumber: syz [ 444.879865][T10364] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1216'. [ 444.910267][T10364] netlink: 'syz.2.1216': attribute type 3 has an invalid length. [ 445.100502][T10374] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1216'. [ 445.160742][ T5869] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 445.329350][ T5869] usb 5-1: device descriptor read/8, error -71 [ 445.362647][T10328] qnx4: no qnx4 filesystem (no root dir). [ 445.498119][ T5904] qmi_wwan 2-1:11.215: probe with driver qmi_wwan failed with error -22 [ 445.554413][ T5904] usb 2-1: USB disconnect, device number 38 [ 445.580625][ T5869] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 445.623187][ T5869] usb 5-1: device descriptor read/8, error -71 [ 445.780646][ T5869] usb usb5-port1: unable to enumerate USB device [ 446.134909][T10396] 9pnet_fd: Insufficient options for proto=fd [ 446.473980][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 446.473996][ T30] audit: type=1400 audit(1744574370.226:1213): avc: denied { unmount } for pid=5834 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 446.657601][ T30] audit: type=1400 audit(1744574370.336:1214): avc: denied { unmount } for pid=5834 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 446.818401][T10408] sp0: Synchronizing with TNC [ 447.018786][T10413] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1227'. [ 447.654967][ T30] audit: type=1400 audit(1744574371.396:1215): avc: denied { getopt } for pid=10394 comm="syz.4.1223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 447.746172][T10427] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1230'. [ 447.877542][ T5825] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 447.900575][ T5904] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 448.070975][ T5904] usb 4-1: Using ep0 maxpacket: 16 [ 448.140727][ T5825] usb 3-1: Using ep0 maxpacket: 32 [ 448.141849][ T5904] usb 4-1: config 1 has an invalid interface descriptor of length 5, skipping [ 448.145941][ T10] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 448.223144][ T5904] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 448.242418][ T5904] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 448.260741][ T5825] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 448.261750][ T5904] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 448.268822][ T5825] usb 3-1: config 0 has no interface number 0 [ 448.270908][ T5825] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 448.314461][ T5904] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 448.314707][ T5825] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.359591][ T5904] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.382681][ T5825] usb 3-1: Product: syz [ 448.387711][ T5825] usb 3-1: Manufacturer: syz [ 448.392513][ T5825] usb 3-1: SerialNumber: syz [ 448.398183][ T5904] usb 4-1: Product: syz [ 448.403775][ T5825] usb 3-1: config 0 descriptor?? [ 448.410562][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 448.418796][ T5904] usb 4-1: Manufacturer: syz [ 448.419394][ T10] usb 1-1: config 6 has an invalid interface number: 2 but max is 0 [ 448.443296][ T5825] smsc95xx v2.0.0 [ 448.448535][ T10] usb 1-1: config 6 has no interface number 0 [ 448.452686][ T5904] usb 4-1: SerialNumber: syz [ 448.454730][ T10] usb 1-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 448.485949][ T10] usb 1-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 448.500085][ T10] usb 1-1: config 6 interface 2 altsetting 0 endpoint 0x8F has an invalid bInterval 194, changing to 11 [ 448.511770][ T10] usb 1-1: config 6 interface 2 altsetting 0 endpoint 0x8F has invalid maxpacket 1580, setting to 1024 [ 448.525366][ T10] usb 1-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 448.535006][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.546618][ T10] usb 1-1: Product: syz [ 448.558425][ T10] usb 1-1: Manufacturer: syz [ 448.566801][ T10] usb 1-1: SerialNumber: syz [ 448.620160][T10427] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 448.627816][ T5916] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 448.653048][ T10] hso 1-1:6.2: Failed to find BULK IN ep [ 448.686485][ T5904] usb 4-1: 0:2 : does not exist [ 448.698501][ T5904] usb 4-1: unit 4 not found! [ 449.676683][ T5916] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 449.683193][ T5904] usb 4-1: USB disconnect, device number 36 [ 449.701847][ T5916] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 449.703641][ T5870] usb 1-1: USB disconnect, device number 35 [ 450.008764][ T6325] udevd[6325]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 450.138349][ T5916] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 450.147525][ T5916] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.155830][ T5825] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 450.168198][ T5916] usb 5-1: config 0 descriptor?? [ 450.235904][ T30] audit: type=1400 audit(1744574373.986:1216): avc: denied { bind } for pid=10446 comm="syz.1.1234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 450.326228][T10450] Invalid source name [ 450.393499][ T5825] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 450.406318][ T5825] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 450.445706][ T5825] usb 3-1: USB disconnect, device number 33 [ 450.601110][ T5916] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 450.810656][ T5916] usb 4-1: Using ep0 maxpacket: 32 [ 450.842159][ T5916] usb 4-1: config 0 has too many interfaces: 223, using maximum allowed: 32 [ 451.108869][ T5916] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 223 [ 451.201628][ T5916] usb 4-1: config 0 has no interface number 0 [ 451.230795][ T5916] usb 4-1: config 0 interface 136 altsetting 0 has an endpoint descriptor with address 0xAD, changing to 0x8D [ 451.340640][ T5916] usb 4-1: config 0 interface 136 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 451.368746][ T5916] usb 4-1: config 0 interface 136 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0 [ 451.380626][ T5916] usb 4-1: config 0 interface 136 altsetting 0 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 451.394360][ T5916] usb 4-1: config 0 interface 136 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 451.404644][ T5916] usb 4-1: New USB device found, idVendor=0763, idProduct=1021, bcdDevice=8e.c0 [ 451.418868][ T5916] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.434702][ T5916] usb 4-1: config 0 descriptor?? [ 451.445565][ T5916] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 451.572065][ T5837] udevd[5837]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.136/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 451.717488][T10467] kAFS: No cell specified [ 451.724209][T10467] kAFS: No cell specified [ 452.090996][ T30] audit: type=1400 audit(1744574375.846:1217): avc: denied { read append } for pid=10449 comm="syz.3.1235" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 452.122752][ T24] usb 4-1: USB disconnect, device number 37 [ 452.133652][ T5904] usb 1-1: new full-speed USB device number 36 using dummy_hcd [ 452.149508][ T30] audit: type=1400 audit(1744574375.846:1218): avc: denied { open } for pid=10449 comm="syz.3.1235" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 452.179713][ T10] usb 5-1: USB disconnect, device number 29 [ 452.281884][ T30] audit: type=1400 audit(1744574376.036:1219): avc: denied { read } for pid=5182 comm="acpid" name="event9" dev="devtmpfs" ino=3296 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 452.388206][ T5904] usb 1-1: too many configurations: 46, using maximum allowed: 8 [ 452.489728][ T5904] usb 1-1: config index 0 descriptor too short (expected 58300, got 18) [ 452.577447][ T5904] usb 1-1: config 174 has too many interfaces: 33, using maximum allowed: 32 [ 452.668400][ T5904] usb 1-1: config 174 has an invalid descriptor of length 138, skipping remainder of the config [ 452.783499][ T30] audit: type=1400 audit(1744574376.036:1220): avc: denied { open } for pid=5182 comm="acpid" path="/dev/input/event9" dev="devtmpfs" ino=3296 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 452.790267][ T5904] usb 1-1: config 174 has 0 interfaces, different from the descriptor's value: 33 [ 452.830542][ T30] audit: type=1400 audit(1744574376.036:1221): avc: denied { ioctl } for pid=5182 comm="acpid" path="/dev/input/event9" dev="devtmpfs" ino=3296 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 452.897636][ T5904] usb 1-1: config index 1 descriptor too short (expected 58300, got 18) [ 452.923375][ T5904] usb 1-1: config 174 has too many interfaces: 33, using maximum allowed: 32 [ 452.945864][ T5904] usb 1-1: config 174 has an invalid descriptor of length 138, skipping remainder of the config [ 452.967539][ T5904] usb 1-1: config 174 has 0 interfaces, different from the descriptor's value: 33 [ 453.089737][ T5904] usb 1-1: config index 2 descriptor too short (expected 58300, got 18) [ 453.099902][ T5904] usb 1-1: config 174 has too many interfaces: 33, using maximum allowed: 32 [ 453.109426][ T5904] usb 1-1: config 174 has an invalid descriptor of length 138, skipping remainder of the config [ 453.121447][ T5904] usb 1-1: config 174 has 0 interfaces, different from the descriptor's value: 33 [ 453.170649][ T10] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 453.188894][T10483] : renamed from bond0 (while UP) [ 453.268323][ T5904] usb 1-1: config index 3 descriptor too short (expected 58300, got 18) [ 453.276742][ T5904] usb 1-1: config 174 has too many interfaces: 33, using maximum allowed: 32 [ 453.285626][ T5904] usb 1-1: config 174 has an invalid descriptor of length 138, skipping remainder of the config [ 453.296171][ T5904] usb 1-1: config 174 has 0 interfaces, different from the descriptor's value: 33 [ 453.306943][ T5904] usb 1-1: config index 4 descriptor too short (expected 58300, got 18) [ 453.315337][ T5904] usb 1-1: config 174 has too many interfaces: 33, using maximum allowed: 32 [ 453.324243][ T5904] usb 1-1: config 174 has an invalid descriptor of length 138, skipping remainder of the config [ 453.334765][ T5904] usb 1-1: config 174 has 0 interfaces, different from the descriptor's value: 33 [ 453.699709][ T5825] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 453.712030][ T10] usb 4-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 453.743119][ T10] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 453.756197][ T10] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 453.757704][ T5904] usb 1-1: unable to read config index 5 descriptor/all [ 453.771841][ T10] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 453.789550][ T5904] usb 1-1: can't read configurations, error -71 [ 453.809697][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.834206][T10477] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 453.880606][ T5825] usb 5-1: Using ep0 maxpacket: 16 [ 453.888640][ T5825] usb 5-1: config 1 has an invalid interface descriptor of length 5, skipping [ 453.901736][ T5825] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 453.912327][ T5825] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 453.927297][ T5825] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 453.965725][ T5825] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 453.974907][ T5825] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.982938][ T5825] usb 5-1: Product: syz [ 453.987110][ T5825] usb 5-1: Manufacturer: syz [ 453.993376][ T5825] usb 5-1: SerialNumber: syz [ 454.049652][ T30] audit: type=1400 audit(1744574377.746:1222): avc: denied { setopt } for pid=10486 comm="syz.0.1244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 454.105908][ T10] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 454.139372][ T10] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input67 [ 454.158963][ T30] audit: type=1400 audit(1744574377.746:1223): avc: denied { getopt } for pid=10486 comm="syz.0.1244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 454.299767][ T10] usb 4-1: USB disconnect, device number 38 [ 454.299824][ C0] aiptek 4-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 454.323045][T10483] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 454.340586][ T5825] usb 5-1: 0:2 : does not exist [ 454.366243][ T5825] usb 5-1: unit 4 not found! [ 455.355808][ T30] audit: type=1400 audit(1744574378.396:1224): avc: denied { connect } for pid=10493 comm="syz.2.1246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 455.385915][ T30] audit: type=1400 audit(1744574379.096:1225): avc: denied { write } for pid=10493 comm="syz.2.1246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 455.479648][ T5825] usb 5-1: USB disconnect, device number 30 [ 455.687113][ T30] audit: type=1400 audit(1744574379.436:1226): avc: denied { connect } for pid=10507 comm="syz.3.1250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 456.715570][ T9724] udevd[9724]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 456.867425][T10522] input: syz0 as /devices/virtual/input/input69 [ 456.870552][T10521] input: syz0 as /devices/virtual/input/input68 [ 457.413562][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 457.413574][ T30] audit: type=1400 audit(1744574381.166:1231): avc: denied { setopt } for pid=10505 comm="syz.1.1249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 457.440641][ C1] vkms_vblank_simulate: vblank timer overrun [ 457.781332][ T30] audit: type=1326 audit(1744574381.526:1232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10534 comm="syz.4.1256" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f17c3f8d169 code=0x0 [ 458.651952][ T10] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 458.882961][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 458.962661][T10564] SELinux: failed to load policy [ 458.987003][ T10] usb 4-1: config 1 has an invalid interface descriptor of length 5, skipping [ 459.034359][ T30] audit: type=1400 audit(1744574382.706:1233): avc: denied { load_policy } for pid=10551 comm="syz.4.1261" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 459.066712][ T10] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 459.160519][ T10] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 459.210683][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 459.245562][ T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 459.255468][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.269855][ T10] usb 4-1: Product: syz [ 459.352664][ T10] usb 4-1: Manufacturer: syz [ 459.367513][ T10] usb 4-1: SerialNumber: syz [ 461.351626][ T10] usb 4-1: 0:2 : does not exist [ 461.398155][ T10] usb 4-1: unit 4 not found! [ 461.543029][T10606] input: syz0 as /devices/virtual/input/input70 [ 461.565653][ T10] usb 4-1: USB disconnect, device number 39 [ 462.062926][ T30] audit: type=1400 audit(1744574385.386:1234): avc: denied { ioctl } for pid=10601 comm="syz.2.1271" path="socket:[28858]" dev="sockfs" ino=28858 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 462.333787][ T5870] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 462.750652][ T5870] usb 1-1: Using ep0 maxpacket: 8 [ 462.770088][ T6010] udevd[6010]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 462.906026][ T5870] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 462.917808][ T5870] usb 1-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00 [ 463.378590][ T5870] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.392985][ T5870] usb 1-1: config 0 descriptor?? [ 463.426231][ T30] audit: type=1400 audit(1744574387.176:1235): avc: denied { write } for pid=10625 comm="syz.4.1276" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 463.568632][T10625] mmap: syz.4.1276 (10625): VmData 37597184 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 465.239794][ T10] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 465.460625][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 465.472484][ T10] usb 3-1: config 1 has an invalid interface descriptor of length 5, skipping [ 465.501508][ T10] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 465.530756][ T10] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 465.558878][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 465.594709][T10647] 9pnet_fd: Insufficient options for proto=fd [ 465.616872][ T10] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 465.626511][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.642982][ T10] usb 3-1: Product: syz [ 465.651710][ T10] usb 3-1: Manufacturer: syz [ 465.692122][ T10] usb 3-1: SerialNumber: syz [ 465.720870][ T30] audit: type=1400 audit(1744574389.446:1236): avc: denied { ioctl } for pid=10645 comm="syz.4.1281" path="socket:[28908]" dev="sockfs" ino=28908 ioctlcmd=0x5600 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 467.496657][ T10] usb 3-1: 0:2 : does not exist [ 467.506769][ T10] usb 3-1: unit 4 not found! [ 467.524414][ T30] audit: type=1400 audit(1744574391.276:1237): avc: denied { ioctl } for pid=10667 comm="syz.3.1285" path="socket:[28965]" dev="sockfs" ino=28965 ioctlcmd=0x9426 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 467.680302][T10672] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1285'. [ 467.700762][ T5904] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 467.709118][T10672] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1285'. [ 467.800720][ T10] usb 3-1: USB disconnect, device number 34 [ 467.941763][ T5904] usb 2-1: Using ep0 maxpacket: 32 [ 468.487183][ T5870] usbhid 1-1:0.0: can't add hid device: -32 [ 468.523350][ T5904] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 468.537641][ T5870] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 468.568084][ T5904] usb 2-1: config 0 has no interface number 0 [ 468.580611][ T30] audit: type=1400 audit(1744574391.376:1238): avc: denied { append } for pid=10667 comm="syz.3.1285" name="event3" dev="devtmpfs" ino=996 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 468.672043][ T5904] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 468.813101][ T5904] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.836706][ T30] audit: type=1400 audit(1744574392.406:1239): avc: denied { append } for pid=10677 comm="syz.2.1287" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 468.858663][ T5904] usb 2-1: Product: syz [ 468.888181][ T5904] usb 2-1: Manufacturer: syz [ 468.930868][ T6010] udevd[6010]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 468.956838][ T30] audit: type=1400 audit(1744574392.426:1240): avc: denied { write } for pid=10677 comm="syz.2.1287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 469.077368][ T5916] usb 1-1: USB disconnect, device number 38 [ 469.083848][ T5904] usb 2-1: SerialNumber: syz [ 469.112146][ T5904] usb 2-1: config 0 descriptor?? [ 469.135504][ T5904] smsc95xx v2.0.0 [ 469.755851][ T5904] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 469.788101][ T30] audit: type=1400 audit(1744574393.536:1241): avc: denied { ioctl } for pid=10687 comm="syz.2.1290" path="socket:[29973]" dev="sockfs" ino=29973 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 469.822998][ T5904] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 469.893643][ T5904] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 469.979690][ T5904] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 470.044218][ T5904] usb 2-1: USB disconnect, device number 39 [ 470.164825][ T30] audit: type=1400 audit(1744574393.916:1242): avc: denied { getopt } for pid=10718 comm="syz.4.1293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 470.537523][T10732] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1296'. [ 470.606546][ T30] audit: type=1400 audit(1744574394.356:1243): avc: denied { mount } for pid=10739 comm="syz.1.1298" name="/" dev="hugetlbfs" ino=30101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 470.877895][ T30] audit: type=1400 audit(1744574394.626:1244): avc: denied { read } for pid=10734 comm="syz.2.1299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 472.215613][ T30] audit: type=1400 audit(1744574395.966:1245): avc: denied { ioctl } for pid=10770 comm="syz.0.1305" path="socket:[30136]" dev="sockfs" ino=30136 ioctlcmd=0x4944 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 472.240613][ C1] vkms_vblank_simulate: vblank timer overrun [ 472.341254][ T30] audit: type=1400 audit(1744574396.026:1246): avc: denied { unmount } for pid=5834 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 472.422279][T10770] delete_channel: no stack [ 472.873302][T10808] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1313'. [ 472.900688][ T30] audit: type=1400 audit(1744574396.636:1247): avc: denied { create } for pid=10802 comm="syz.2.1314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 472.946763][ T5916] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 473.110563][ T5916] usb 5-1: Using ep0 maxpacket: 16 [ 473.132330][ T5916] usb 5-1: config 1 has an invalid interface descriptor of length 5, skipping [ 473.178790][ T5916] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 473.212099][ T5916] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 473.240332][ T5916] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 473.611663][ T5916] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 473.636136][ T5916] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.655395][ T5916] usb 5-1: Product: syz [ 473.675710][ T5916] usb 5-1: Manufacturer: syz [ 473.681399][ T5925] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 473.710536][ T5916] usb 5-1: SerialNumber: syz [ 473.723880][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 473.723895][ T30] audit: type=1400 audit(1744574397.476:1249): avc: denied { write } for pid=10828 comm="syz.1.1318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 474.015280][ T5925] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 474.031127][ T5925] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 474.050536][ T5925] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 474.556876][T10844] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 474.588021][ T5925] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 474.600595][ T5916] usb 5-1: 0:2 : does not exist [ 474.607561][ T5916] usb 5-1: unit 4 not found! [ 474.620635][ T5925] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 474.634109][ T5916] usb 5-1: USB disconnect, device number 31 [ 474.658934][ T5925] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 474.680506][ T5925] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 474.688528][ T5925] usb 3-1: Product: syz [ 474.709510][ T5925] usb 3-1: Manufacturer: syz [ 474.726848][ T5925] cdc_wdm 3-1:1.0: skipping garbage [ 474.732366][ T5925] cdc_wdm 3-1:1.0: skipping garbage [ 474.751077][ T5925] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 474.757007][ T5925] cdc_wdm 3-1:1.0: Unknown control protocol [ 474.838645][ T30] audit: type=1400 audit(1744574398.586:1250): avc: denied { mount } for pid=10848 comm="syz.1.1323" name="/" dev="ramfs" ino=30323 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 474.860989][ C0] vkms_vblank_simulate: vblank timer overrun [ 474.876157][ T30] audit: type=1400 audit(1744574398.616:1251): avc: denied { execute } for pid=10848 comm="syz.1.1323" name="file0" dev="ramfs" ino=30328 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 474.898803][ T30] audit: type=1400 audit(1744574398.616:1252): avc: denied { execute_no_trans } for pid=10848 comm="syz.1.1323" path="/file0" dev="ramfs" ino=30328 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 474.931042][ T6010] udevd[6010]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 475.228512][ T30] audit: type=1400 audit(1744574398.976:1253): avc: denied { append } for pid=10861 comm="syz.1.1328" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 475.883361][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -EPIPE [ 475.886887][ T5916] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 476.537835][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 476.544590][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 476.551379][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 476.557987][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 476.565845][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 476.572478][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 476.578938][ T47] usb 3-1: USB disconnect, device number 35 [ 476.584921][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 476.584942][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 476.584958][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 476.602069][ T5916] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 476.629127][ T5825] hid-generic 0000:0003:0000.000F: unknown main item tag 0x0 [ 476.657845][ T10] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 476.671784][ T5870] hid-generic 0000:0003:0000.0010: unknown main item tag 0x0 [ 476.679202][ T5870] hid-generic 0000:0003:0000.0010: unknown main item tag 0x0 [ 476.679320][ T5825] hid-generic 0000:0003:0000.000F: unknown main item tag 0x0 [ 476.694868][ T5916] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 476.706676][ T5916] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 476.708361][ T5870] hid-generic 0000:0003:0000.0010: hidraw0: HID v0.00 Device [syz0] on syz1 [ 476.720125][ T5825] hid-generic 0000:0003:0000.000F: hidraw1: HID v0.00 Device [syz0] on syz1 [ 476.738420][ T5916] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.758090][T10862] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 476.790040][ T5916] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 476.850596][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 476.859411][ T10] usb 4-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 476.881184][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.903991][ T10] usb 4-1: config 0 descriptor?? [ 477.038350][ T5916] usb 2-1: USB disconnect, device number 40 [ 477.542279][T10896] input: syz0 as /devices/virtual/input/input72 [ 477.633472][T10897] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1334'. [ 477.658666][ T30] audit: type=1400 audit(1744574401.406:1254): avc: denied { map } for pid=10898 comm="syz.4.1338" path="/dev/vbi6" dev="devtmpfs" ino=991 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 477.776274][ T10] acrux 0003:1A34:0802.0011: item fetching failed at offset 0/3 [ 477.791549][ T30] audit: type=1400 audit(1744574401.406:1255): avc: denied { execute } for pid=10898 comm="syz.4.1338" path="/dev/vbi6" dev="devtmpfs" ino=991 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 477.815856][ T10] acrux 0003:1A34:0802.0011: parse failed [ 477.822351][ T10] acrux 0003:1A34:0802.0011: probe with driver acrux failed with error -22 [ 477.839626][ T30] audit: type=1400 audit(1744574401.576:1256): avc: denied { ioctl } for pid=10898 comm="syz.4.1338" path="socket:[30397]" dev="sockfs" ino=30397 ioctlcmd=0x9425 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 477.865087][ C0] vkms_vblank_simulate: vblank timer overrun [ 478.387389][T10912] sctp: [Deprecated]: syz.0.1342 (pid 10912) Use of int in maxseg socket option. [ 478.387389][T10912] Use struct sctp_assoc_value instead [ 478.408515][T10912] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1342'. [ 478.514840][T10915] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 479.072923][ T10] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 479.250507][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 479.281617][ T10] usb 1-1: config index 0 descriptor too short (expected 4388, got 36) [ 479.289904][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 479.330612][ T10] usb 1-1: config 0 has no interfaces? [ 479.337788][ T10] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 479.365439][ T5904] usb 4-1: USB disconnect, device number 40 [ 479.380568][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.415496][ T10] usb 1-1: config 0 descriptor?? [ 479.449076][ T10] hid-generic 0000:0003:0000.0012: unknown main item tag 0x0 [ 479.479878][ T30] audit: type=1400 audit(1744574403.226:1257): avc: denied { setopt } for pid=10926 comm="syz.4.1344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 479.502907][ T10] hid-generic 0000:0003:0000.0012: unknown main item tag 0x0 [ 479.530259][ T10] hid-generic 0000:0003:0000.0012: hidraw0: HID v0.00 Device [syz0] on syz1 [ 479.549423][ T30] audit: type=1400 audit(1744574403.226:1258): avc: denied { accept } for pid=10926 comm="syz.4.1344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 479.597954][ T30] audit: type=1400 audit(1744574403.226:1259): avc: denied { connect } for pid=10926 comm="syz.4.1344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 479.635125][T10920] gfs2: gfs2 mount does not exist [ 479.699232][ T30] audit: type=1400 audit(1744574403.446:1260): avc: denied { bind } for pid=10937 comm="syz.3.1346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 479.800206][ T30] audit: type=1400 audit(1744574403.446:1261): avc: denied { listen } for pid=10937 comm="syz.3.1346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 479.829851][ T10] usb 1-1: USB disconnect, device number 39 [ 479.872831][ T30] audit: type=1400 audit(1744574403.446:1262): avc: denied { accept } for pid=10937 comm="syz.3.1346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 479.901635][ T30] audit: type=1400 audit(1744574403.576:1263): avc: denied { setopt } for pid=10911 comm="syz.0.1342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 479.926343][T10948] input: syz0 as /devices/virtual/input/input73 [ 480.703404][T10971] can: request_module (can-proto-0) failed. [ 481.341714][ T10] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 481.861564][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 482.043186][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 482.057816][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 482.069804][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 482.132151][ T10] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 482.167355][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.309658][ T10] usb 4-1: config 0 descriptor?? [ 482.841173][T10997] macsec1: entered promiscuous mode [ 483.194165][ T10] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.0013/input/input74 [ 483.284509][ T10] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.0013/input/input75 [ 483.346108][ T10] kye 0003:0458:5011.0013: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.3-1/input0 [ 483.380696][ T5916] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 483.400829][ T5825] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 483.530595][ T5916] usb 1-1: Using ep0 maxpacket: 32 [ 483.542440][ T5916] usb 1-1: config index 0 descriptor too short (expected 37956, got 68) [ 483.580518][ T5916] usb 1-1: config 241 has too many interfaces: 132, using maximum allowed: 32 [ 483.617062][ T5825] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 483.638850][ T5916] usb 1-1: config 241 has an invalid descriptor of length 127, skipping remainder of the config [ 483.666816][ T5825] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 483.700532][ T5916] usb 1-1: config 241 has 0 interfaces, different from the descriptor's value: 132 [ 483.760609][ T5825] usb 3-1: New USB device found, idVendor=056a, idProduct=0314, bcdDevice= 0.00 [ 483.790203][ T5825] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.798991][ T5916] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 483.850755][ T5916] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 483.886626][ T5825] usb 3-1: config 0 descriptor?? [ 483.900671][ T5916] usb 1-1: SerialNumber: syz [ 483.968120][ T30] audit: type=1400 audit(1744574407.716:1264): avc: denied { create } for pid=11022 comm="syz.1.1365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 484.129483][ T5904] kernel write not supported for file /943/attr/exec (pid: 5904 comm: kworker/1:7) [ 484.138277][ T5916] usb 1-1: USB disconnect, device number 40 [ 484.270742][ T30] audit: type=1400 audit(1744574408.026:1265): avc: denied { getopt } for pid=10981 comm="syz.3.1355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 484.306070][ T10] usb 4-1: USB disconnect, device number 41 [ 484.419741][ T5825] hid (null): invalid report_size 1476395008 [ 484.439961][ T5825] wacom 0003:056A:0314.0014: invalid report_size 1476395008 [ 484.447381][ T30] audit: type=1400 audit(1744574408.186:1266): avc: denied { write } for pid=11030 comm="syz.1.1367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 484.466995][ C0] vkms_vblank_simulate: vblank timer overrun [ 484.473169][ T5825] wacom 0003:056A:0314.0014: item 0 4 1 7 parsing failed [ 484.480686][ T5825] wacom 0003:056A:0314.0014: parse failed [ 484.486608][ T5825] wacom 0003:056A:0314.0014: probe with driver wacom failed with error -22 [ 484.645076][T11007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 484.655188][T11007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 484.726322][ T30] audit: type=1400 audit(1744574408.476:1267): avc: denied { write } for pid=11037 comm="syz.0.1368" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 484.749637][ C0] vkms_vblank_simulate: vblank timer overrun [ 484.763053][ T30] audit: type=1400 audit(1744574408.496:1268): avc: denied { ioctl } for pid=11037 comm="syz.0.1368" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 484.788163][ C0] vkms_vblank_simulate: vblank timer overrun [ 485.154239][ T47] usb 3-1: USB disconnect, device number 36 [ 485.226296][T11047] macsec1: entered promiscuous mode [ 485.433742][T11057] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1373'. [ 485.803370][T11068] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 486.674797][ T47] hid-generic 0000:0003:0000.0015: unknown main item tag 0x0 [ 486.694377][ T47] hid-generic 0000:0003:0000.0015: unknown main item tag 0x0 [ 486.826323][ T47] hid-generic 0000:0003:0000.0015: hidraw0: HID v0.00 Device [syz0] on syz1 [ 487.142937][T11088] input: syz1 as /devices/virtual/input/input76 [ 487.366460][T11096] ufs: You didn't specify the type of your ufs filesystem [ 487.366460][T11096] [ 487.366460][T11096] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 487.366460][T11096] [ 487.366460][T11096] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 487.397503][T11096] ufs: ufstype=old is supported read-only [ 487.419216][T11097] tipc: Started in network mode [ 487.424154][T11097] tipc: Node identity 080211000001, cluster identity 4711 [ 487.431519][T11097] tipc: Enabled bearer , priority 10 [ 487.458155][T11096] ufs: ufs_fill_super(): bad magic number [ 487.702021][ T5904] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 487.830775][ T30] audit: type=1400 audit(1744574411.576:1269): avc: denied { read } for pid=11077 comm="syz.2.1379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 487.850654][ C0] vkms_vblank_simulate: vblank timer overrun [ 487.872762][ T5904] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 487.964030][ T5904] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0093, bcdDevice=23.5a [ 488.014502][ T5904] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.055361][ T5904] usb 5-1: Product: syz [ 488.079648][ T5904] usb 5-1: Manufacturer: syz [ 488.097756][ T5904] usb 5-1: SerialNumber: syz [ 488.142266][ T5904] usb 5-1: config 0 descriptor?? [ 488.550813][ T24] tipc: Node number set to 134418688 [ 490.913283][ T5904] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-8 [ 491.126989][ T5904] dvb_usb_af9035 5-1:0.0: probe with driver dvb_usb_af9035 failed with error -8 [ 491.220632][ T5904] usb 5-1: USB disconnect, device number 32 [ 491.261449][T11148] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1397'. [ 492.233524][T11169] vcan0: tx drop: invalid da for name 0x0000000000000005 [ 492.469613][T11185] veth1_to_batadv: entered promiscuous mode [ 492.479300][T11185] macsec1: entered promiscuous mode [ 492.731261][T11191] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1408'. [ 492.816791][ T5870] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 492.817603][ T30] audit: type=1400 audit(1744574416.466:1270): avc: denied { append } for pid=11190 comm="syz.2.1408" name="mISDNtimer" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 493.006983][ T5870] usb 5-1: device descriptor read/64, error -71 [ 493.410912][ T5870] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 493.658322][ T5898] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 493.710685][ T5870] usb 5-1: device descriptor read/64, error -71 [ 493.858417][T11211] FAULT_INJECTION: forcing a failure. [ 493.858417][T11211] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 493.872016][T11211] CPU: 1 UID: 0 PID: 11211 Comm: syz.1.1414 Not tainted 6.15.0-rc1-syzkaller-00325-g7cdabafc0012 #0 PREEMPT(full) [ 493.872031][T11211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 493.872038][T11211] Call Trace: [ 493.872042][T11211] [ 493.872046][T11211] dump_stack_lvl+0x16c/0x1f0 [ 493.872065][T11211] should_fail_ex+0x512/0x640 [ 493.872079][T11211] _copy_to_user+0x32/0xd0 [ 493.872092][T11211] adf_ctl_ioctl+0x15d/0x1090 [ 493.872110][T11211] ? __pfx_adf_ctl_ioctl+0x10/0x10 [ 493.872130][T11211] ? selinux_file_ioctl+0x180/0x270 [ 493.872146][T11211] ? selinux_file_ioctl+0xb4/0x270 [ 493.872162][T11211] ? __pfx_adf_ctl_ioctl+0x10/0x10 [ 493.872178][T11211] __x64_sys_ioctl+0x190/0x200 [ 493.872195][T11211] do_syscall_64+0xcd/0x260 [ 493.872210][T11211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.872220][T11211] RIP: 0033:0x7f2dba78d169 [ 493.872230][T11211] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 493.872239][T11211] RSP: 002b:00007f2dbb641038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 493.872249][T11211] RAX: ffffffffffffffda RBX: 00007f2dba9a5fa0 RCX: 00007f2dba78d169 [ 493.872256][T11211] RDX: 00002000000002c0 RSI: 0000000040046104 RDI: 000000000000000a [ 493.872262][T11211] RBP: 00007f2dbb641090 R08: 0000000000000000 R09: 0000000000000000 [ 493.872268][T11211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 493.872273][T11211] R13: 0000000000000000 R14: 00007f2dba9a5fa0 R15: 00007ffffdcd2598 [ 493.872286][T11211] [ 493.872651][ T5870] usb usb5-port1: attempt power cycle [ 494.039147][ T30] audit: type=1400 audit(1744574417.586:1271): avc: denied { write } for pid=11210 comm="syz.1.1414" name="arp" dev="proc" ino=4026533237 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 494.128928][ T5898] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 494.141295][ T5898] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 494.152336][ T5898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.166355][ T5898] usb 3-1: Product: syz [ 494.181840][ T5898] usb 3-1: Manufacturer: syz [ 494.198634][ T5898] usb 3-1: SerialNumber: syz [ 494.209836][ T5898] usb 3-1: config 0 descriptor?? [ 494.218178][ T5898] cyberjack 3-1:0.0: required endpoints missing [ 494.400558][ T5870] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 494.428643][ T971] usb 3-1: USB disconnect, device number 37 [ 494.441995][ T5870] usb 5-1: device descriptor read/8, error -71 [ 495.311848][ T5870] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 495.368446][ T5870] usb 5-1: device descriptor read/8, error -71 [ 495.490786][ T5870] usb usb5-port1: unable to enumerate USB device [ 496.387136][T11235] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 496.420546][ T30] audit: type=1400 audit(1744574420.166:1272): avc: denied { execmod } for pid=11232 comm="syz.2.1421" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=32134 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 496.509288][ T30] audit: type=1400 audit(1744574420.166:1273): avc: denied { execute } for pid=11232 comm="syz.2.1421" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=32134 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 496.547178][T11243] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1423'. [ 496.571758][T11243] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1423'. [ 496.665459][ T30] audit: type=1400 audit(1744574420.416:1274): avc: denied { ioctl } for pid=11248 comm="syz.1.1425" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 496.690092][ C0] vkms_vblank_simulate: vblank timer overrun [ 497.654588][ T30] audit: type=1400 audit(1744574420.626:1275): avc: denied { create } for pid=11252 comm="syz.1.1426" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 497.675370][ C0] vkms_vblank_simulate: vblank timer overrun [ 497.683256][ T30] audit: type=1400 audit(1744574420.636:1276): avc: denied { write } for pid=11252 comm="syz.1.1426" name="file0" dev="tmpfs" ino=1583 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 497.705741][ C0] vkms_vblank_simulate: vblank timer overrun [ 497.715848][ T30] audit: type=1400 audit(1744574420.636:1277): avc: denied { open } for pid=11252 comm="syz.1.1426" path="/295/file0" dev="tmpfs" ino=1583 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 497.738746][ C0] vkms_vblank_simulate: vblank timer overrun [ 497.748113][ T30] audit: type=1400 audit(1744574420.646:1278): avc: denied { ioctl } for pid=11252 comm="syz.1.1426" path="/295/file0" dev="tmpfs" ino=1583 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 497.772501][ C0] vkms_vblank_simulate: vblank timer overrun [ 497.825065][ T30] audit: type=1400 audit(1744574421.566:1279): avc: denied { unlink } for pid=5834 comm="syz-executor" name="file0" dev="tmpfs" ino=1583 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 498.032796][T11272] (unnamed net_device) (uninitialized): option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 498.416273][ T30] audit: type=1326 audit(1744574421.986:1280): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11266 comm="syz.0.1429" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4883d8d169 code=0x0 [ 499.103029][T11285] macvlan2: entered promiscuous mode [ 499.110800][T11285] macvlan2: entered allmulticast mode [ 499.132266][T11285] batadv0: entered promiscuous mode [ 499.152146][T11285] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 499.375493][T11285] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 499.657550][T11292] netlink: 'syz.0.1437': attribute type 11 has an invalid length. [ 500.244912][ T30] audit: type=1400 audit(1744574423.996:1281): avc: denied { getopt } for pid=11295 comm="syz.3.1438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 500.315110][ T30] audit: type=1400 audit(1744574424.066:1282): avc: denied { read } for pid=11295 comm="syz.3.1438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 500.416883][ T30] audit: type=1400 audit(1744574424.166:1283): avc: denied { watch } for pid=11300 comm="syz.0.1440" path="/290/file0" dev="tmpfs" ino=1553 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 500.624619][ T30] audit: type=1400 audit(1744574424.166:1284): avc: denied { watch_sb watch_reads } for pid=11300 comm="syz.0.1440" path="/290/file0" dev="tmpfs" ino=1553 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 500.976454][ T30] audit: type=1326 audit(1744574424.396:1285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11298 comm="syz.4.1439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17c3f8d169 code=0x7ffc0000 [ 501.081182][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.101716][ T30] audit: type=1326 audit(1744574424.396:1286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11298 comm="syz.4.1439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17c3f8d169 code=0x7ffc0000 [ 501.118085][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.323381][ T5898] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 501.979764][T11320] block device autoloading is deprecated and will be removed. [ 502.032905][ T30] audit: type=1326 audit(1744574424.406:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11298 comm="syz.4.1439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7f17c3f8d169 code=0x7ffc0000 [ 502.105412][ T30] audit: type=1326 audit(1744574424.406:1288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11298 comm="syz.4.1439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17c3f8d169 code=0x7ffc0000 [ 502.131814][ T5898] usb 1-1: Using ep0 maxpacket: 8 [ 502.255892][ T5898] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 502.313864][ T5898] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 502.373619][ T5898] usb 1-1: config 0 interface 0 has no altsetting 0 [ 502.380262][ T5898] usb 1-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 503.059179][ T5898] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.422826][T11343] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1449'. [ 503.547554][ T5898] usb 1-1: config 0 descriptor?? [ 504.310678][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 504.312879][ T30] audit: type=1400 audit(1744574427.516:1297): avc: denied { wake_alarm } for pid=11336 comm="syz.3.1450" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 504.497230][ T5898] usb 1-1: can't set config #0, error -71 [ 504.506424][ T5898] usb 1-1: USB disconnect, device number 41 [ 504.913881][T11353] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1452'. [ 506.621813][T11388] hub 9-0:1.0: USB hub found [ 506.628548][T11388] hub 9-0:1.0: 1 port detected [ 507.399595][T11390] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1464'. [ 507.497233][T11397] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 508.210526][ T5904] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 508.370682][ T5904] usb 1-1: Using ep0 maxpacket: 32 [ 508.381674][ T5904] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 508.395869][ T5904] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 508.506830][ T5904] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 508.523046][ T5904] usb 1-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 508.535248][ T5904] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.546983][ T5904] usb 1-1: config 0 descriptor?? [ 508.790647][ T5898] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 509.323335][ T5904] input: THQ uDraw Game Tablet for PS3 Joypad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:20D6:CB17.0016/input/input77 [ 509.428949][T11405] Cannot find del_set index 0 as target [ 509.458093][ T5904] input: THQ uDraw Game Tablet for PS3 Touchpad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:20D6:CB17.0016/input/input78 [ 509.470945][ T5898] usb 4-1: Using ep0 maxpacket: 32 [ 509.540263][ T5898] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 509.574506][ T5898] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 509.596401][ T5904] input: THQ uDraw Game Tablet for PS3 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:20D6:CB17.0016/input/input79 [ 509.621209][ T5916] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 510.621204][ T5898] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 510.640550][ T5898] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 510.650906][ T5898] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.675346][ T5898] usb 4-1: config 0 descriptor?? [ 510.697283][T11431] trusted_key: encrypted_key: insufficient parameters specified [ 510.707638][ T5904] input: THQ uDraw Game Tablet for PS3 Accelerometer as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:20D6:CB17.0016/input/input80 [ 510.782936][ T5916] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 510.810711][ T5916] usb 5-1: config 4 has 1 interface, different from the descriptor's value: 3 [ 510.836747][ T5916] usb 5-1: New USB device found, idVendor=17cc, idProduct=0d8d, bcdDevice=84.b2 [ 510.846476][ T5916] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.871459][ T5904] hid-udraw 0003:20D6:CB17.0016: hidraw0: USB HID v0.00 Device [HID 20d6:cb17] on usb-dummy_hcd.0-1/input0 [ 510.901571][ T5916] usb 5-1: Product: syz [ 510.910534][ T5916] usb 5-1: Manufacturer: syz [ 510.953151][ T5916] usb 5-1: SerialNumber: syz [ 510.974533][T11433] macsec2: entered promiscuous mode [ 511.186647][ T5916] usb 5-1: selecting invalid altsetting 1 [ 511.224746][ T5898] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.0017/input/input81 [ 511.243753][ T5916] snd-usb-caiaq 5-1:4.0: can't set alt interface. [ 511.341945][ T5916] usb 5-1: unable to init card! (ret=-5) [ 511.367965][ T30] audit: type=1400 audit(1744574435.116:1298): avc: denied { accept } for pid=11412 comm="syz.3.1471" lport=59449 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 511.394395][ T5916] snd-usb-caiaq 5-1:4.0: probe with driver snd-usb-caiaq failed with error -5 [ 511.408899][T11413] sctp: [Deprecated]: syz.3.1471 (pid 11413) Use of int in maxseg socket option. [ 511.408899][T11413] Use struct sctp_assoc_value instead [ 511.428608][ T30] audit: type=1400 audit(1744574435.156:1299): avc: denied { setopt } for pid=11412 comm="syz.3.1471" lport=59449 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 511.452253][ C0] vkms_vblank_simulate: vblank timer overrun [ 511.492136][ T5916] usb 5-1: USB disconnect, device number 37 [ 511.537062][ T5825] usb 1-1: USB disconnect, device number 42 [ 511.562478][T11438] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1477'. [ 511.574790][ T5898] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.0017/input/input82 [ 511.723854][ T5898] kye 0003:0458:5011.0017: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.3-1/input0 [ 511.755700][ T5898] usb 4-1: USB disconnect, device number 42 [ 513.976260][ T30] audit: type=1400 audit(1744574437.396:1300): avc: denied { ioctl } for pid=11471 comm="syz.3.1487" path="socket:[32648]" dev="sockfs" ino=32648 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 514.000937][ C0] vkms_vblank_simulate: vblank timer overrun [ 514.388143][ T30] audit: type=1400 audit(1744574437.766:1301): avc: denied { write } for pid=11477 comm="syz.0.1488" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 514.423867][T11490] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1489'. [ 514.599327][ T30] audit: type=1400 audit(1744574437.766:1302): avc: denied { ioctl } for pid=11477 comm="syz.0.1488" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 514.992146][ T30] audit: type=1400 audit(1744574438.736:1303): avc: denied { mount } for pid=11496 comm="syz.2.1493" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 515.021629][ T30] audit: type=1400 audit(1744574438.746:1304): avc: denied { mounton } for pid=11496 comm="syz.2.1493" path="/283/file0/file0" dev="afs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 515.044863][ T30] audit: type=1400 audit(1744574438.776:1305): avc: denied { ioctl } for pid=11493 comm="syz.0.1491" path="socket:[32861]" dev="sockfs" ino=32861 ioctlcmd=0x9366 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 515.060651][T11501] netlink: 300 bytes leftover after parsing attributes in process `syz.1.1494'. [ 515.077694][ T30] audit: type=1400 audit(1744574438.806:1306): avc: denied { read } for pid=11492 comm="syz.4.1492" path="socket:[32859]" dev="sockfs" ino=32859 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 515.133850][ T30] audit: type=1400 audit(1744574438.886:1307): avc: denied { unmount } for pid=5830 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 516.227194][T11528] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 516.470929][ T5898] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 518.122242][ T5898] usb 4-1: device descriptor read/64, error -71 [ 518.448040][ T5898] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 519.289286][T11544] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1504'. [ 519.617523][ T30] audit: type=1400 audit(1744574443.356:1308): avc: denied { setopt } for pid=11547 comm="syz.3.1508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 520.546261][T11562] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 522.147287][T11572] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1505'. [ 522.212796][T11572] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1505'. [ 522.370128][T11585] syz_tun: entered promiscuous mode [ 522.443286][ T30] audit: type=1400 audit(1744574446.196:1309): avc: denied { write } for pid=11571 comm="syz.4.1505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 522.542447][T11587] 9pnet_fd: Insufficient options for proto=fd [ 523.338320][T11585] syz_tun: left promiscuous mode [ 523.424572][T11596] tty tty1: ldisc open failed (-12), clearing slot 0 [ 523.426144][ T30] audit: type=1400 audit(1744574446.506:1310): avc: denied { read } for pid=11571 comm="syz.4.1505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 524.759102][T11604] input: syz0 as /devices/virtual/input/input83 [ 524.795306][T11610] futex_wake_op: syz.0.1516 tries to shift op by 144; fix this program [ 524.805897][T11611] random: crng reseeded on system resumption [ 524.860595][ T30] audit: type=1400 audit(1744574448.556:1311): avc: denied { read write } for pid=11605 comm="syz.4.1517" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 524.884892][ T30] audit: type=1400 audit(1744574448.556:1312): avc: denied { ioctl } for pid=11605 comm="syz.4.1517" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 526.724677][T11640] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1527'. [ 526.838726][T11636] fuse: Unknown parameter '0x000000000000000b' [ 526.844971][ T30] audit: type=1400 audit(1744574450.586:1313): avc: denied { mounton } for pid=11633 comm="syz.0.1525" path="/304/file1/file0" dev="autofs" ino=33953 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 526.868347][ C1] vkms_vblank_simulate: vblank timer overrun [ 527.381176][T11640] virtio-fs: tag not found [ 527.398594][T11640] x_tables: duplicate underflow at hook 1 [ 527.427835][T11640] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 527.466455][T11640] /dev/nullb0: Can't open blockdev [ 527.810401][ T30] audit: type=1400 audit(1744574451.556:1314): avc: denied { bind } for pid=11648 comm="syz.4.1528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 527.829736][ C1] vkms_vblank_simulate: vblank timer overrun [ 527.847410][ T30] audit: type=1400 audit(1744574451.566:1315): avc: denied { accept } for pid=11648 comm="syz.4.1528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 528.189099][ T30] audit: type=1400 audit(1744574451.936:1316): avc: denied { read } for pid=11678 comm="syz.1.1535" name="vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 528.212678][ C1] vkms_vblank_simulate: vblank timer overrun [ 528.219394][ T30] audit: type=1400 audit(1744574451.936:1317): avc: denied { open } for pid=11678 comm="syz.1.1535" path="/dev/vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 528.991097][T11692] serio: Serial port ptm0 [ 529.289515][T11694] netlink: 'syz.0.1538': attribute type 10 has an invalid length. [ 529.473757][T11694] batman_adv: batadv0: Adding interface: team0 [ 529.485860][T11694] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 529.580727][T11694] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 529.768640][T11701] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 531.983772][T11714] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1544'. [ 535.040573][ T5898] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 535.352001][T11776] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1560'. [ 535.460503][ T5898] usb 4-1: config 0 has an invalid interface number: 69 but max is 0 [ 535.566099][ T5898] usb 4-1: config 0 has no interface number 0 [ 535.575142][ T5898] usb 4-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 535.585354][ T10] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 535.606494][ T5898] usb 4-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 535.663048][ T5898] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 535.685368][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.698581][ T5898] usb 4-1: Product: syz [ 535.703151][ T5898] usb 4-1: Manufacturer: syz [ 535.709738][ T5898] usb 4-1: SerialNumber: syz [ 535.770729][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 535.823994][ T5898] usb 4-1: config 0 descriptor?? [ 535.900843][T11772] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 535.960720][ T5898] cyberjack 4-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 536.031808][ T10] usb 3-1: config 0 has an invalid interface number: 15 but max is 0 [ 536.040897][ T10] usb 3-1: config 0 has no interface number 0 [ 536.047016][ T10] usb 3-1: config 0 interface 15 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 536.058363][ T5898] usb 4-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 536.099880][ T10] usb 3-1: config 0 interface 15 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 536.153000][ T10] usb 3-1: New USB device found, idVendor=0856, idProduct=bc01, bcdDevice=b2.bf [ 536.168361][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.179355][ T10] usb 3-1: Product: syz [ 536.183862][ T10] usb 3-1: Manufacturer: syz [ 536.188705][ T10] usb 3-1: SerialNumber: syz [ 536.328456][ T5898] usb 4-1: USB disconnect, device number 45 [ 536.341584][ T10] usb 3-1: config 0 descriptor?? [ 536.352370][ T5898] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 536.380096][ T5898] cyberjack 4-1:0.69: device disconnected [ 538.391057][ T5898] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 538.490982][ T10] mos7840 3-1:0.15: missing endpoints [ 538.530272][ T10] usb 3-1: USB disconnect, device number 38 [ 538.650524][ T5898] usb 4-1: Using ep0 maxpacket: 16 [ 539.186099][ T5898] usb 4-1: config 1 has an invalid interface descriptor of length 5, skipping [ 539.209470][ T5898] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 539.235044][ T5898] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 539.401001][ T5898] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 539.442684][ T5898] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 539.500652][ T30] audit: type=1400 audit(1744574463.196:1318): avc: denied { ioctl } for pid=11799 comm="syz.3.1566" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 539.549194][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.712056][ T30] audit: type=1400 audit(1744574463.216:1319): avc: denied { map_create } for pid=11820 comm="syz.0.1572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 539.739450][ T5898] usb 4-1: Product: syz [ 539.744912][ T5898] usb 4-1: Manufacturer: syz [ 539.763105][ T5925] kernel write not supported for file /video36 (pid: 5925 comm: kworker/0:7) [ 539.774416][ T5898] usb 4-1: SerialNumber: syz [ 539.853685][ T30] audit: type=1400 audit(1744574463.226:1320): avc: denied { read } for pid=11814 comm="syz.2.1571" dev="nsfs" ino=4026533089 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 540.948858][ T30] audit: type=1400 audit(1744574463.226:1321): avc: denied { open } for pid=11814 comm="syz.2.1571" path="net:[4026533089]" dev="nsfs" ino=4026533089 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 540.991058][ T30] audit: type=1400 audit(1744574463.226:1322): avc: denied { create } for pid=11814 comm="syz.2.1571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 541.011215][ T30] audit: type=1400 audit(1744574463.226:1323): avc: denied { read } for pid=5179 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 541.033702][ T30] audit: type=1400 audit(1744574463.226:1324): avc: denied { search } for pid=5179 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 541.055787][ T30] audit: type=1400 audit(1744574463.226:1325): avc: denied { append } for pid=5179 comm="syslogd" name="messages" dev="tmpfs" ino=10 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 541.078640][ T30] audit: type=1400 audit(1744574463.226:1326): avc: denied { open } for pid=5179 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=10 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 541.116772][ T5898] usb 4-1: 0:2 : does not exist [ 541.126042][ T5898] usb 4-1: unit 4 not found! [ 541.172436][ T30] audit: type=1400 audit(1744574463.226:1327): avc: denied { getattr } for pid=5179 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=10 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 541.222108][ T5898] usb 4-1: USB disconnect, device number 46 [ 541.228213][T11828] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 541.234718][T11828] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 541.319843][T11830] vhci_hcd: connection closed [ 541.323629][T11828] vhci_hcd vhci_hcd.0: Device attached [ 541.508349][ T7032] vhci_hcd: stop threads [ 541.566541][ T7032] vhci_hcd: release socket [ 541.600790][ T7032] vhci_hcd: disconnect device [ 541.620618][ T5870] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 541.645915][ T5870] usb 41-1: enqueue for inactive port 0 [ 542.019979][T11840] all: renamed from ip6tnl0 (while UP) [ 542.386113][ T6010] udevd[6010]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 542.436397][ T5870] vhci_hcd: vhci_device speed not set [ 543.163541][T11849] input: syz0 as /devices/virtual/input/input84 [ 543.178276][T11849] input: failed to attach handler leds to device input84, error: -6 [ 544.190083][T11867] input: syz0 as /devices/virtual/input/input85 [ 544.620480][ T30] kauditd_printk_skb: 56 callbacks suppressed [ 544.620499][ T30] audit: type=1400 audit(1744574468.256:1384): avc: denied { wake_alarm } for pid=11859 comm="syz.1.1582" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 544.761649][T11871] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1585'. [ 545.010558][ T30] audit: type=1400 audit(1744574468.456:1385): avc: denied { write } for pid=11861 comm="syz.2.1584" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 545.045742][ T30] audit: type=1400 audit(1744574468.456:1386): avc: denied { open } for pid=11861 comm="syz.2.1584" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 545.120573][ T30] audit: type=1400 audit(1744574468.456:1387): avc: denied { ioctl } for pid=11861 comm="syz.2.1584" path="/dev/video7" dev="devtmpfs" ino=949 ioctlcmd=0x5602 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 545.186292][ T30] audit: type=1400 audit(1744574468.506:1388): avc: denied { create } for pid=11870 comm="syz.3.1585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 545.208944][ T30] audit: type=1400 audit(1744574468.516:1389): avc: denied { write } for pid=11870 comm="syz.3.1585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 545.230148][ T30] audit: type=1400 audit(1744574468.676:1390): avc: denied { read write } for pid=11872 comm="syz.0.1578" name="vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 545.258365][ T30] audit: type=1400 audit(1744574468.676:1391): avc: denied { open } for pid=11872 comm="syz.0.1578" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 545.285984][ T30] audit: type=1400 audit(1744574468.716:1392): avc: denied { create } for pid=11872 comm="syz.0.1578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 545.309885][ T30] audit: type=1400 audit(1744574468.786:1393): avc: denied { setopt } for pid=11870 comm="syz.3.1585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 546.135716][T11905] input: syz0 as /devices/virtual/input/input86 [ 546.398024][T11906] input: syz0 as /devices/virtual/input/input87 [ 547.081071][T11902] xt_CT: No such helper "snmp" [ 547.125048][T11903] sd 0:0:1:0: PR command failed: 1026 [ 547.130881][T11903] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 547.137559][T11903] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 547.693908][T11921] input: syz0 as /devices/virtual/input/input88 [ 547.992616][T11924] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 548.078386][T11924] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 548.097102][T11925] netlink: 'syz.3.1598': attribute type 10 has an invalid length. [ 548.190260][T11925] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1598'. [ 548.276370][T11925] team0: entered promiscuous mode [ 548.300000][T11925] team_slave_0: entered promiscuous mode [ 548.347055][T11925] team_slave_1: entered promiscuous mode [ 548.496488][T11925] bridge0: port 3(team0) entered blocking state [ 548.539403][T11925] bridge0: port 3(team0) entered disabled state [ 549.066671][T11925] team0: entered allmulticast mode [ 549.072872][T11925] team_slave_0: entered allmulticast mode [ 549.090655][T11925] team_slave_1: entered allmulticast mode [ 549.112904][T11925] bridge0: port 3(team0) entered blocking state [ 549.119515][T11925] bridge0: port 3(team0) entered forwarding state [ 549.437244][T11938] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1603'. [ 549.462427][T11938] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1603'. [ 549.651053][T11955] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1608'. [ 549.663242][T11955] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1608'. [ 549.681692][ T30] kauditd_printk_skb: 44 callbacks suppressed [ 549.681705][ T30] audit: type=1400 audit(1744574473.436:1438): avc: denied { create } for pid=11953 comm="syz.1.1608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 549.731013][T11955] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 549.737567][T11955] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 549.800597][T11962] input: syz0 as /devices/virtual/input/input89 [ 550.026144][T11955] vhci_hcd vhci_hcd.0: Device attached [ 550.089665][T11966] input: syz0 as /devices/virtual/input/input90 [ 550.183144][T11959] vhci_hcd: connection closed [ 550.186199][ T6118] vhci_hcd: stop threads [ 550.236097][ T5925] usb 35-1: new high-speed USB device number 2 using vhci_hcd [ 550.306109][ T6118] vhci_hcd: release socket [ 550.348377][ T6118] vhci_hcd: disconnect device [ 550.485585][ T30] audit: type=1400 audit(1744574474.236:1439): avc: denied { read write } for pid=11971 comm="syz.4.1613" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 550.497131][T11972] netlink: 'syz.4.1613': attribute type 1 has an invalid length. [ 550.510234][ T30] audit: type=1400 audit(1744574474.236:1440): avc: denied { open } for pid=11971 comm="syz.4.1613" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 550.543964][ T30] audit: type=1400 audit(1744574474.236:1441): avc: denied { allowed } for pid=11971 comm="syz.4.1613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 550.566984][ T30] audit: type=1400 audit(1744574474.236:1442): avc: denied { map } for pid=11971 comm="syz.4.1613" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=34937 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 550.594335][ T30] audit: type=1400 audit(1744574474.236:1443): avc: denied { read write } for pid=11971 comm="syz.4.1613" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=34937 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 550.642327][T11972] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1613'. [ 550.691217][ T971] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 550.804302][ T7031] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.869656][ T971] usb 4-1: Using ep0 maxpacket: 8 [ 550.883318][ T971] usb 4-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 550.898708][ T971] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.907790][ T971] usb 4-1: Product: syz [ 550.916120][ T971] usb 4-1: Manufacturer: syz [ 550.924863][ T971] usb 4-1: SerialNumber: syz [ 550.946745][ T971] usb 4-1: config 0 descriptor?? [ 550.967227][ T971] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 550.992475][ T30] audit: type=1400 audit(1744574474.726:1444): avc: denied { read } for pid=11974 comm="syz.0.1614" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 551.043335][ T30] audit: type=1400 audit(1744574474.726:1445): avc: denied { open } for pid=11974 comm="syz.0.1614" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 551.088479][ T30] audit: type=1400 audit(1744574474.726:1446): avc: denied { ioctl } for pid=11974 comm="syz.0.1614" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x640d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 551.266816][ T30] audit: type=1400 audit(1744574474.736:1447): avc: denied { write } for pid=11974 comm="syz.0.1614" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 551.367157][ T7031] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.859898][ T7031] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.931597][ T971] gspca_sonixj: reg_r err -71 [ 551.936466][ T971] sonixj 4-1:0.0: probe with driver sonixj failed with error -71 [ 551.977084][ T971] usb 4-1: USB disconnect, device number 47 [ 552.047926][ T7031] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.072656][T11994] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 552.171891][T11994] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 552.180733][T11994] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 552.189850][T11994] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 552.201777][T11994] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 552.928749][T12009] input: syz0 as /devices/virtual/input/input91 [ 552.935096][T12009] input: failed to attach handler leds to device input91, error: -6 [ 553.046808][T11993] chnl_net:caif_netlink_parms(): no params data found [ 553.352574][ T7031] bridge_slave_1: left allmulticast mode [ 553.363976][ T7031] bridge_slave_1: left promiscuous mode [ 553.375435][ T7031] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.399396][ T7031] bridge_slave_0: left allmulticast mode [ 553.409175][ T7031] bridge_slave_0: left promiscuous mode [ 553.416553][ T7031] bridge0: port 1(bridge_slave_0) entered disabled state [ 554.231586][ T54] Bluetooth: hci3: command tx timeout [ 555.266615][ T7031]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 555.286972][ T7031]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 555.297326][ T7031]  (unregistering): (slave macvlan2): Releasing backup interface [ 555.307387][ T7031] team_slave_0: left promiscuous mode [ 555.313039][ T7031] team_slave_1: left promiscuous mode [ 555.323326][ T7031]  (unregistering): (slave macvlan3): Releasing backup interface [ 555.331859][ T7031] batadv0: left promiscuous mode [ 555.339127][ T7031]  (unregistering): Released all slaves [ 555.355005][T12022] syz_tun: entered allmulticast mode [ 555.420567][ T5925] vhci_hcd: vhci_device speed not set [ 555.484609][T12022] syz_tun: left allmulticast mode [ 555.955940][ T7031] : left promiscuous mode [ 556.360637][ T54] Bluetooth: hci3: command tx timeout [ 556.459849][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 556.459864][ T30] audit: type=1400 audit(1744574480.206:1471): avc: denied { setopt } for pid=12055 comm="syz.4.1632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 556.489245][T12061] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1632'. [ 556.506672][T11993] bridge0: port 1(bridge_slave_0) entered blocking state [ 556.620502][ T30] audit: type=1400 audit(1744574480.336:1472): avc: denied { read } for pid=12071 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 556.643700][ C0] vkms_vblank_simulate: vblank timer overrun [ 556.855215][T12069] input: syz0 as /devices/virtual/input/input92 [ 556.888165][T11993] bridge0: port 1(bridge_slave_0) entered disabled state [ 556.895551][ T30] audit: type=1400 audit(1744574480.336:1473): avc: denied { open } for pid=12071 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 556.947051][T11993] bridge_slave_0: entered allmulticast mode [ 556.971761][T11993] bridge_slave_0: entered promiscuous mode [ 557.004117][ T30] audit: type=1400 audit(1744574480.346:1474): avc: denied { getattr } for pid=12071 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 557.029515][ C0] vkms_vblank_simulate: vblank timer overrun [ 557.032945][T11993] bridge0: port 2(bridge_slave_1) entered blocking state [ 557.065752][T11993] bridge0: port 2(bridge_slave_1) entered disabled state [ 557.161816][T11993] bridge_slave_1: entered allmulticast mode [ 557.169252][T11993] bridge_slave_1: entered promiscuous mode [ 557.199534][ T7031] tipc: Disabling bearer [ 557.211234][ T7031] tipc: Left network mode [ 557.347877][ T7031] IPVS: stopping master sync thread 6122 ... [ 557.370854][T11993] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 557.382418][ T30] audit: type=1400 audit(1744574481.116:1475): avc: denied { create } for pid=12085 comm="syz.3.1638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 557.426737][ T7031] IPVS: stopping master sync thread 6121 ... [ 557.445728][T11993] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 557.455943][ T7031] IPVS: stopping master sync thread 6120 ... [ 557.473038][T12089] [ 557.475405][T12089] ====================================================== [ 557.482396][T12089] WARNING: possible circular locking dependency detected [ 557.489393][T12089] 6.15.0-rc1-syzkaller-00325-g7cdabafc0012 #0 Not tainted [ 557.496468][T12089] ------------------------------------------------------ [ 557.503453][T12089] syz.3.1638/12089 is trying to acquire lock: [ 557.509488][T12089] ffffffff9012c8e8 (rtnl_mutex){+.+.}-{4:4}, at: start_sync_thread+0x120/0x28b0 [ 557.518517][T12089] [ 557.518517][T12089] but task is already holding lock: [ 557.525853][T12089] ffff88805a995b28 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_setsockopt+0x100/0xa00 [ 557.535907][T12089] [ 557.535907][T12089] which lock already depends on the new lock. [ 557.535907][T12089] [ 557.546296][T12089] [ 557.546296][T12089] the existing dependency chain (in reverse order) is: [ 557.555282][T12089] [ 557.555282][T12089] -> #2 (&smc->clcsock_release_lock){+.+.}-{4:4}: [ 557.563852][T12089] __mutex_lock+0x199/0xb90 [ 557.568855][T12089] smc_switch_to_fallback+0x2d/0x9f0 [ 557.574643][T12089] smc_sendmsg+0x13d/0x520 [ 557.579548][T12089] __sys_sendto+0x495/0x510 [ 557.584545][T12089] __x64_sys_sendto+0xe0/0x1c0 [ 557.589808][T12089] do_syscall_64+0xcd/0x260 [ 557.594821][T12089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.601209][T12089] [ 557.601209][T12089] -> #1 (sk_lock-AF_INET){+.+.}-{0:0}: [ 557.608820][T12089] lock_sock_nested+0x41/0xf0 [ 557.613993][T12089] sockopt_lock_sock+0x54/0x70 [ 557.619251][T12089] do_ip_setsockopt+0xfe/0x3240 [ 557.624612][T12089] ip_setsockopt+0x59/0xf0 [ 557.629516][T12089] raw_setsockopt+0xb7/0x2a0 [ 557.634599][T12089] do_sock_setsockopt+0x221/0x470 [ 557.640119][T12089] __sys_setsockopt+0x1a0/0x230 [ 557.645473][T12089] __x64_sys_setsockopt+0xbd/0x160 [ 557.651083][T12089] do_syscall_64+0xcd/0x260 [ 557.656086][T12089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.662483][T12089] [ 557.662483][T12089] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 557.669673][T12089] __lock_acquire+0x1173/0x1ba0 [ 557.675026][T12089] lock_acquire+0x179/0x350 [ 557.680019][T12089] __mutex_lock+0x199/0xb90 [ 557.685029][T12089] start_sync_thread+0x120/0x28b0 [ 557.690549][T12089] do_ip_vs_set_ctl+0x451/0x11d0 [ 557.695984][T12089] nf_setsockopt+0x8a/0xf0 [ 557.700894][T12089] ip_setsockopt+0xcb/0xf0 [ 557.705799][T12089] tcp_setsockopt+0xa4/0x100 [ 557.710880][T12089] smc_setsockopt+0x1b3/0xa00 [ 557.716048][T12089] do_sock_setsockopt+0x221/0x470 [ 557.721567][T12089] __sys_setsockopt+0x1a0/0x230 [ 557.726909][T12089] __x64_sys_setsockopt+0xbd/0x160 [ 557.732513][T12089] do_syscall_64+0xcd/0x260 [ 557.737511][T12089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.743893][T12089] [ 557.743893][T12089] other info that might help us debug this: [ 557.743893][T12089] [ 557.754103][T12089] Chain exists of: [ 557.754103][T12089] rtnl_mutex --> sk_lock-AF_INET --> &smc->clcsock_release_lock [ 557.754103][T12089] [ 557.767621][T12089] Possible unsafe locking scenario: [ 557.767621][T12089] [ 557.775042][T12089] CPU0 CPU1 [ 557.780376][T12089] ---- ---- [ 557.785711][T12089] lock(&smc->clcsock_release_lock); [ 557.791064][T12089] lock(sk_lock-AF_INET); [ 557.797969][T12089] lock(&smc->clcsock_release_lock); [ 557.805834][T12089] lock(rtnl_mutex); [ 557.809787][T12089] [ 557.809787][T12089] *** DEADLOCK *** [ 557.809787][T12089] [ 557.817901][T12089] 1 lock held by syz.3.1638/12089: [ 557.822995][T12089] #0: ffff88805a995b28 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_setsockopt+0x100/0xa00 [ 557.833485][T12089] [ 557.833485][T12089] stack backtrace: [ 557.839345][T12089] CPU: 0 UID: 0 PID: 12089 Comm: syz.3.1638 Not tainted 6.15.0-rc1-syzkaller-00325-g7cdabafc0012 #0 PREEMPT(full) [ 557.839358][T12089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 557.839365][T12089] Call Trace: [ 557.839369][T12089] [ 557.839374][T12089] dump_stack_lvl+0x116/0x1f0 [ 557.839390][T12089] print_circular_bug+0x275/0x350 [ 557.839408][T12089] check_noncircular+0x14c/0x170 [ 557.839426][T12089] __lock_acquire+0x1173/0x1ba0 [ 557.839438][T12089] lock_acquire+0x179/0x350 [ 557.839447][T12089] ? start_sync_thread+0x120/0x28b0 [ 557.839461][T12089] ? __pfx___might_resched+0x10/0x10 [ 557.839478][T12089] __mutex_lock+0x199/0xb90 [ 557.839492][T12089] ? start_sync_thread+0x120/0x28b0 [ 557.839506][T12089] ? start_sync_thread+0x120/0x28b0 [ 557.839518][T12089] ? __pfx___mutex_lock+0x10/0x10 [ 557.839533][T12089] ? find_held_lock+0x2b/0x80 [ 557.839548][T12089] ? start_sync_thread+0x120/0x28b0 [ 557.839560][T12089] ? rtnl_lock+0x9/0x20 [ 557.839569][T12089] start_sync_thread+0x120/0x28b0 [ 557.839582][T12089] ? __lock_acquire+0xaa4/0x1ba0 [ 557.839592][T12089] ? cred_has_capability.isra.0+0x193/0x2f0 [ 557.839608][T12089] ? __pfx_start_sync_thread+0x10/0x10 [ 557.839622][T12089] ? find_held_lock+0x2b/0x80 [ 557.839634][T12089] ? __might_fault+0xe3/0x190 [ 557.839645][T12089] ? __might_fault+0xe3/0x190 [ 557.839655][T12089] ? __might_fault+0x13b/0x190 [ 557.839666][T12089] ? read_word_at_a_time+0xe/0x20 [ 557.839683][T12089] ? do_ip_vs_set_ctl+0x451/0x11d0 [ 557.839699][T12089] do_ip_vs_set_ctl+0x451/0x11d0 [ 557.839714][T12089] ? __lock_acquire+0xaa4/0x1ba0 [ 557.839724][T12089] ? __mutex_trylock_common+0x90/0x250 [ 557.839734][T12089] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 557.839749][T12089] ? __pfx___mutex_trylock_common+0x10/0x10 [ 557.839760][T12089] ? __pfx___might_resched+0x10/0x10 [ 557.839779][T12089] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 557.839795][T12089] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 557.839814][T12089] ? nf_setsockopt+0x8a/0xf0 [ 557.839827][T12089] nf_setsockopt+0x8a/0xf0 [ 557.839841][T12089] ip_setsockopt+0xcb/0xf0 [ 557.839851][T12089] tcp_setsockopt+0xa4/0x100 [ 557.839863][T12089] smc_setsockopt+0x1b3/0xa00 [ 557.839872][T12089] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 557.839888][T12089] ? __pfx_smc_setsockopt+0x10/0x10 [ 557.839899][T12089] ? selinux_socket_setsockopt+0x6a/0x80 [ 557.839912][T12089] ? __pfx_smc_setsockopt+0x10/0x10 [ 557.839922][T12089] do_sock_setsockopt+0x221/0x470 [ 557.839937][T12089] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 557.839954][T12089] __sys_setsockopt+0x1a0/0x230 [ 557.839967][T12089] __x64_sys_setsockopt+0xbd/0x160 [ 557.839979][T12089] ? do_syscall_64+0x91/0x260 [ 557.839993][T12089] ? lockdep_hardirqs_on+0x7c/0x110 [ 557.840006][T12089] do_syscall_64+0xcd/0x260 [ 557.840021][T12089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.840032][T12089] RIP: 0033:0x7f6aeb18d169 [ 557.840041][T12089] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 557.840052][T12089] RSP: 002b:00007f6ae8ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 557.840061][T12089] RAX: ffffffffffffffda RBX: 00007f6aeb3a6080 RCX: 00007f6aeb18d169 [ 557.840068][T12089] RDX: 000000000000048b RSI: 0000000000000000 RDI: 000000000000000d [ 557.840074][T12089] RBP: 00007f6aeb20e990 R08: 0000000000000018 R09: 0000000000000000 [ 557.840080][T12089] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 557.840086][T12089] R13: 0000000000000000 R14: 00007f6aeb3a6080 R15: 00007ffe6a0aedf8 [ 557.840096][T12089] [ 558.188963][ C0] vkms_vblank_simulate: vblank timer overrun [ 558.198944][ T30] audit: type=1400 audit(1744574481.116:1476): avc: denied { setopt } for pid=12085 comm="syz.3.1638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 558.219264][ T30] audit: type=1800 audit(1744574481.946:1477): pid=12081 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.0.1636" name="/newroot/326/bus" dev="tmpfs" ino=1746 res=0 errno=0 [ 558.242546][ C0] vkms_vblank_simulate: vblank timer overrun SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 558.264113][ T30] audit: type=1400 audit(1744574482.016:1478): avc: denied { write } for pid=5809 comm="syz-executor" path="pipe:[3611]" dev="pipefs" ino=3611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 558.299881][T12094] VFS_BUG_ON_INODE(1) encountered for inode ffff888023c46840 [ 558.300001][T12094] ------------[ cut here ]------------ [ 558.313205][T12094] kernel BUG at fs/namei.c:3432! [ 558.321452][ T7031] IPVS: stopping master sync thread 6119 ... [ 558.374703][ T30] audit: type=1400 audit(1744574482.126:1479): avc: denied { write } for pid=12066 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1707 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 558.398084][ T30] audit: type=1400 audit(1744574482.146:1480): avc: denied { add_name } for pid=12066 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 558.467084][ T54] Bluetooth: hci3: command tx timeout [ 558.478781][T12094] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 558.485237][T12094] CPU: 1 UID: 0 PID: 12094 Comm: syz.1.1640 Not tainted 6.15.0-rc1-syzkaller-00325-g7cdabafc0012 #0 PREEMPT(full) [ 558.497310][T12094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 558.507381][T12094] RIP: 0010:may_open+0x1e3/0x400 [ 558.512312][T12094] Code: cc cc cc 66 81 fd 00 10 74 29 66 81 fd 00 20 0f 84 0d ff ff ff e8 2d cf 85 ff 48 c7 c6 80 2e 9f 8b 4c 89 e7 e8 1e ca 04 00 90 <0f> 0b 66 81 fd 00 c0 75 e2 e8 0f cf 85 ff 44 89 fb 31 ff 83 e3 01 [ 558.531930][T12094] RSP: 0018:ffffc9001a317a98 EFLAGS: 00010286 [ 558.537980][T12094] RAX: 000000000000003a RBX: ffffc9001a317c30 RCX: ffffc9000be09000 [ 558.545924][T12094] RDX: 0000000000000000 RSI: ffffffff819b1ba6 RDI: 0000000000000005 [ 558.553869][T12094] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 558.561812][T12094] R10: 0000000080000000 R11: 0000000000000001 R12: ffff888023c46840 [ 558.569763][T12094] R13: 0000000000008002 R14: ffffffff8e5e6b80 R15: 0000000000000006 [ 558.577709][T12094] FS: 00007f2dbb6416c0(0000) GS:ffff888124ab2000(0000) knlGS:0000000000000000 [ 558.586614][T12094] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 558.593175][T12094] CR2: 00007f2dba772f00 CR3: 0000000029408000 CR4: 00000000003526f0 [ 558.601121][T12094] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 558.609065][T12094] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 558.617009][T12094] Call Trace: [ 558.620264][T12094] [ 558.623173][T12094] path_openat+0x13d1/0x2d40 [ 558.627745][T12094] ? __pfx_path_openat+0x10/0x10 [ 558.632668][T12094] do_filp_open+0x20b/0x470 [ 558.637171][T12094] ? __pfx_do_filp_open+0x10/0x10 [ 558.642187][T12094] ? alloc_fd+0x471/0x7d0 [ 558.646497][T12094] do_sys_openat2+0x11b/0x1d0 [ 558.651159][T12094] ? __pfx_do_sys_openat2+0x10/0x10 [ 558.656354][T12094] __x64_sys_openat+0x174/0x210 [ 558.661188][T12094] ? __pfx___x64_sys_openat+0x10/0x10 [ 558.666545][T12094] ? rcu_is_watching+0x12/0xc0 [ 558.671292][T12094] ? rcu_is_watching+0x12/0xc0 [ 558.676039][T12094] do_syscall_64+0xcd/0x260 [ 558.680530][T12094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.686405][T12094] RIP: 0033:0x7f2dba78bad0 [ 558.690804][T12094] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 558.710407][T12094] RSP: 002b:00007f2dbb640f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 558.718803][T12094] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f2dba78bad0 [ 558.726760][T12094] RDX: 0000000000000002 RSI: 00007f2dbb640fa0 RDI: 00000000ffffff9c [ 558.734711][T12094] RBP: 00007f2dbb640fa0 R08: 0000000000000000 R09: 0000000000000000 [ 558.742678][T12094] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 558.750639][T12094] R13: 0000000000000000 R14: 00007f2dba9a5fa0 R15: 00007ffffdcd2598 [ 558.758594][T12094] [ 558.761592][T12094] Modules linked in: [ 558.765980][T12094] ---[ end trace 0000000000000000 ]--- [ 558.780861][T12094] RIP: 0010:may_open+0x1e3/0x400 [ 558.785850][T12094] Code: cc cc cc 66 81 fd 00 10 74 29 66 81 fd 00 20 0f 84 0d ff ff ff e8 2d cf 85 ff 48 c7 c6 80 2e 9f 8b 4c 89 e7 e8 1e ca 04 00 90 <0f> 0b 66 81 fd 00 c0 75 e2 e8 0f cf 85 ff 44 89 fb 31 ff 83 e3 01 [ 558.812679][T12094] RSP: 0018:ffffc9001a317a98 EFLAGS: 00010286 [ 558.818770][T12094] RAX: 000000000000003a RBX: ffffc9001a317c30 RCX: ffffc9000be09000 [ 558.829004][T12094] RDX: 0000000000000000 RSI: ffffffff819b1ba6 RDI: 0000000000000005 [ 558.919515][T12094] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 559.003786][T12094] R10: 0000000080000000 R11: 0000000000000001 R12: ffff888023c46840 [ 559.053778][T12094] R13: 0000000000008002 R14: ffffffff8e5e6b80 R15: 0000000000000006 [ 559.080180][T12094] FS: 00007f2dbb6416c0(0000) GS:ffff8881249b2000(0000) knlGS:0000000000000000 [ 559.121392][T12094] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 559.128047][T12094] CR2: 000055b850bbb000 CR3: 0000000029408000 CR4: 00000000003526f0 [ 559.193634][T12094] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 559.268869][T12094] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 559.294029][T12094] Kernel panic - not syncing: Fatal exception [ 559.300329][T12094] Kernel Offset: disabled [ 559.304639][T12094] Rebooting in 86400 seconds..