last executing test programs: 15.727431816s ago: executing program 0 (id=594): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x3c, r2, 0x1, 0xffffffff, 0x0, {0x2f}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000041}, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x541b, 0x0) sendto$inet6(r3, 0x0, 0x0, 0xfffffeffffff7f7e, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r4 = syz_open_dev$sndctrl(0x0, 0x4000000000, 0x28002) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x571000, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_dccp(0x2, 0x6, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) epoll_create(0x20003fd) pselect6(0x40, &(0x7f0000000000)={0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x17b6, 0x10000000}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x8, 0x1b, 0x100000, 0x2, 0xa}, 0x0, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000540)={0x1e4, r2, 0x300, 0x70bd26, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x20000001}, 0x4004) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)={0x48, 0x0, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x40000) r8 = accept4(r7, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r8) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000840)={0x2c, r6, 0x1, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x10) 13.979091035s ago: executing program 0 (id=597): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) execve(0x0, 0x0, 0x0) r3 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) getresgid(0x0, 0x0, &(0x7f0000002b00)) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0xc084, &(0x7f00000002c0)={0xa, 0x0, 0xfffffffe, @private0}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) write$UHID_GET_REPORT_REPLY(r4, &(0x7f0000000080)={0xa, {0x7, 0x2, 0x9}}, 0xa) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) ftruncate(r3, 0xffff) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYRES32=0x0], 0x50) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="14000000100001fff5000000000100000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c000980080001"], 0xb0}}, 0x0) socket(0x10, 0x3, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000"], 0x18}}, 0x0) 12.97865335s ago: executing program 0 (id=600): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='auxv\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000400)={0x0, &(0x7f0000000380)}) r0 = creat(0x0, 0x0) getpid() ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000080)={0x2, 0x1000000, "cd55f09b5292d03db41de18e2db49b251ec59265849adc46", {0x5, 0x100}, 0x4}) shutdown(r0, 0x1) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x20000000}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000912000/0x1000)=nil, 0x1000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000180)) sched_setscheduler(r3, 0x0, &(0x7f0000000080)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) r8 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x60042, 0x0) write$binfmt_elf64(r8, &(0x7f00000001c0)=ANY=[@ANYRES64=r2], 0x78) r9 = fcntl$dupfd(r1, 0x0, r1) ioctl$SG_GET_REQUEST_TABLE(r9, 0x2275, &(0x7f00000018c0)) 11.863881034s ago: executing program 0 (id=606): socket$kcm(0x11, 0x0, 0x300) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4004) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x42280, 0x0) accept4$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs, 0x0, 0x100000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'erspan0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000440)={0x0, 0x1b, "bdbc11f4c2474f7ca8934dcf68b2aa1753c31dbe11a2e0202e3d33"}, &(0x7f0000000200)=0x23) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000280)={r5, 0xa508}, &(0x7f0000000340)=0x8) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) mount_setattr(0xffffffffffffffff, 0x0, 0x100, &(0x7f0000000400)={0x300094, 0x78, 0x20000, {r1}}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="61105c00"/16], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 11.207697869s ago: executing program 2 (id=609): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x4, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x200000000000) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x7, 0x284000) ioctl$USBDEVFS_SETINTERFACE(r1, 0x80085504, &(0x7f0000000140)={0x7, 0x378}) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket(0x1, 0x80802, 0x0) msgsnd(0x0, 0x0, 0x0, 0x800) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000), 0x8) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000), 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x1c00, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900010073797a31000000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800014000000005140000001100"], 0xe8}}, 0x0) sendmsg$inet6(r2, &(0x7f00000000c0)={&(0x7f0000000080)={0xa, 0x4e22, 0x80000, @dev={0xfe, 0x80, '\x00', 0x16}}, 0x1c, 0x0, 0x0, &(0x7f0000000a00)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x84}}}], 0x18}, 0x40) 8.119309832s ago: executing program 3 (id=611): socket$inet6(0xa, 0x400000000001, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x100000000000000, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x4000, 0x0, 0x90, [], 0x2, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00'/45]}, 0xa5) r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r1 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r1, 0x5421, 0x0) connect$vsock_stream(r1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(0xffffffffffffffff, 0x15) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff0000000002"], 0x7c}}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x4, @void}, 0x10) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) eventfd(0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000a00)=ANY=[@ANYRESHEX=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400000083000200bf09000000000054479f122fdad37c7f8100550901000000000095b3370d2fb0ea40e305d2761af738119d63fdf946f1a9780dd0cb4b2cfd1d75a9048c03ff9e171856b994a5c3ebf2ff1913b3cf8e54c9d0a663a63159cd5d41167c6d90c8a686957157ae05da353c086746df3632ad2ae498c4336022ec9b1ce0d143589053e4a1a5c90ed1dcb37dd7618fa5bd99876182f65c1bc60b7cf468540f93121a8f63f497106b0637db4e250866224d51d459222597e5", @ANYRESDEC=r2], 0x0, 0xffff, 0x0, 0x0, 0x0, 0x71, '\x00', 0x0, @fallback=0x3d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) 8.118363981s ago: executing program 1 (id=612): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@newchain={0x998, 0x64, 0x20, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0xb, 0xc}, {0xfff1, 0xc}, {0x2, 0x2}}, [@TCA_RATE={0x6, 0x5, {0x1, 0xdb}}, @filter_kind_options=@f_u32={{0x8}, {0x954, 0x2, [@TCA_U32_LINK={0x8, 0x3, 0x9}, @TCA_U32_INDEV={0x14, 0x8, 'veth1_vlan\x00'}, @TCA_U32_SEL={0x354, 0x5, {0x3, 0x6, 0x9, 0x0, 0x800, 0x6, 0x9, 0x1, [{0x10001, 0xffffffff, 0x7fff, 0xffffff7f}, {0xff, 0xa, 0x7, 0x100}, {0x0, 0x8, 0x9, 0xffffff81}, {0x3ff, 0x3845c78d, 0x800, 0x3ff}, {0x2, 0xa, 0x1, 0x9}, {0x1, 0x3, 0x8, 0x8}, {0x8001, 0x400, 0x35a1}, {0x5, 0xfe, 0x8, 0x2}, {0x9, 0x0, 0x2, 0x838}, {0x400, 0xca, 0xffff, 0x3}, {0x6, 0x9, 0x200, 0x9}, {0x7, 0x1, 0x80000000}, {0x80, 0x2, 0xe0b8, 0x55}, {0x6, 0x1, 0x3, 0x9}, {0x1, 0x5, 0xff}, {0x9, 0xffffff4b, 0xce14, 0x9}, {0x6, 0x7, 0xd}, {0x800, 0x1, 0xd, 0xffffffff}, {0x0, 0x3, 0xa, 0x1}, {0x0, 0xd, 0x9, 0x2}, {0x3, 0x5, 0x5ab1, 0x7}, {0x8001, 0x7fffffff, 0x7fffffff, 0x3}, {0x2, 0x4, 0x9, 0x200}, {0x1000, 0x800, 0x6, 0x1}, {0x697, 0x5, 0x4, 0xb}, {0x765, 0x5, 0x7f, 0x8fef}, {0x5, 0x8, 0x5, 0x7}, {0x0, 0x7f, 0x5, 0x1000}, {0x836, 0x4, 0x1, 0x5}, {0x8a, 0x5, 0xe85f, 0x4}, {0x5, 0x7, 0x7, 0x79}, {0x7, 0x7, 0x8001, 0x2}, {0x9, 0x6, 0x7, 0x7}, {0x101, 0x9, 0x2, 0x2}, {0x13, 0x18, 0x800, 0x6}, {0x0, 0x91, 0xffffffff, 0x94d}, {0x7fffffff, 0x4, 0xad7, 0xa24}, {0x7, 0x9, 0x9, 0x1}, {0x6, 0x1ff, 0x7614, 0xe11}, {0x668, 0x3, 0x2, 0x9}, {0x3, 0x7e8, 0x9}, {0x8000, 0x1ff, 0x200, 0x2}, {0x1, 0x545, 0x0, 0x2}, {0x80000000, 0x2, 0xffffffff, 0x5}, {0x80000000, 0x7, 0x8, 0x1}, {0x9, 0x84a, 0x200, 0x82}, {0x3, 0x4, 0x4, 0xbf08}, {0x4, 0x5, 0x8, 0x400}, {0x4000, 0x2, 0x3, 0x6}, {0x7, 0x8000, 0xfffffbff, 0x94e}, {0x8, 0x1000, 0x2, 0x82}, {0xffff, 0x2, 0x8, 0x7}]}}, @TCA_U32_POLICE={0x45c, 0x6, [@TCA_POLICE_TBF={0x3c, 0x1, {0xd, 0x5, 0xba2e, 0x8, 0x8, {0x2, 0x0, 0x3, 0xffff, 0x1, 0xb5a00000}, {0x3d, 0x2, 0x3, 0xd1, 0x7, 0x7fffffff}, 0xdc25, 0x401, 0x4}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfff, 0xfffffff8, 0xd, 0x7, 0x101, 0x4dde, 0x19, 0x7, 0xa, 0x8, 0x933, 0x800, 0x5, 0x45, 0x8, 0x2, 0x8, 0x0, 0x2ac6, 0xe, 0xfffffff7, 0x1, 0x8, 0x8001, 0xb, 0x9, 0x74, 0xe1, 0x7, 0x6a, 0x8, 0x0, 0x400, 0x8001, 0x0, 0x2, 0x2, 0x97, 0x58b0, 0x5, 0x9, 0x3ff, 0x7, 0x0, 0x1, 0x0, 0x5, 0xa19, 0xa, 0x5, 0x8, 0xb3b5, 0x6, 0x9, 0x80000001, 0x10c8, 0x68c, 0x101, 0xfff, 0x4, 0x4d72, 0x2, 0x7fff, 0x6, 0x7, 0x2, 0x2caa3cc, 0x4, 0x6, 0x5674, 0x7, 0x1400000, 0xf07, 0x5, 0xd414, 0x1b, 0x7, 0xc837, 0x7, 0xfff, 0x81, 0xf, 0x6, 0x19, 0x79, 0x8001, 0x8, 0xeb70, 0x8, 0x4800000, 0x44, 0x7e7, 0xffffffff, 0x8, 0x2, 0x3, 0x1d, 0x7, 0x6, 0x1, 0x2879, 0xfff, 0x3, 0xfffffffa, 0x4, 0x0, 0x207, 0x11d, 0x4, 0x2, 0x81, 0x3, 0x80000001, 0x8, 0xffffffff, 0x3, 0x1, 0xffffffff, 0x401, 0x200, 0x1, 0x8, 0x80000000, 0xa, 0x3, 0x6, 0x6, 0x1000, 0x6, 0x40, 0x3, 0xa, 0x10001, 0xf7, 0x0, 0xb9e0, 0x4, 0x5, 0xffffffff, 0x2, 0x1c8, 0x3, 0xff, 0x80000000, 0x80000000, 0xe1d, 0xf3e, 0x9c, 0x7, 0x58f, 0x9, 0x0, 0x400, 0x6, 0x7, 0x80e5, 0xfffff801, 0x80, 0x2, 0x3, 0x6, 0xfffffffb, 0x80, 0x3, 0x3, 0x1, 0x7ff, 0x8000, 0x20, 0x0, 0x0, 0x800, 0xda7e, 0xff, 0x4, 0x1, 0x3, 0x3, 0x9, 0x9f, 0x80000000, 0xfe, 0x80, 0xa, 0x0, 0xd, 0x6af, 0x8, 0x4, 0x86, 0xa, 0x4, 0x7, 0x5, 0x8, 0xddc, 0x3, 0x2, 0x7, 0x9, 0x40, 0xc9, 0xc76, 0x8, 0x7, 0xd660, 0x2, 0x6, 0x1, 0x3, 0x4, 0xe, 0xdae, 0xd, 0x7f, 0x7, 0x401, 0xd01e, 0x5, 0x348, 0x10000, 0x0, 0x0, 0x7, 0x4, 0x0, 0xfffffffc, 0x4, 0x6, 0x8, 0x8, 0x6, 0x5, 0x0, 0x5a, 0x7f, 0x8, 0x401, 0x8, 0x9, 0xb, 0x720, 0x5, 0x2, 0x2, 0x9391, 0x3800000, 0xf1, 0x0, 0x3, 0x7, 0x1, 0xe, 0x7, 0x5, 0x3]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}]}, @TCA_U32_SEL={0x184, 0x5, {0xa, 0x3, 0x76, 0x9, 0x5, 0x7, 0x3, 0xd7dd, [{0x0, 0xe6a, 0x4, 0xd4}, {0x8, 0x9, 0x461d, 0x7}, {0x8001, 0xd, 0x7fff, 0x7}, {0x5, 0x2, 0x5, 0x1}, {0x0, 0x4, 0x6, 0x2}, {0x10000, 0xb, 0x1, 0xfffffffd}, {0x5, 0xa86, 0x9}, {0x5, 0x6, 0x370, 0x8}, {0x40006, 0x40, 0x5f, 0x800}, {0x5f, 0xc, 0x3, 0x6}, {0x8, 0x7, 0x8001, 0x9}, {0xffffffff, 0x2, 0x7ff, 0x7}, {0x5, 0x354, 0x3, 0xfd6}, {0x2, 0x6, 0xfff, 0x7}, {0xc, 0x125, 0x6a, 0x10000}, {0x3, 0x48db7c59, 0x81, 0xc489}, {0x1000, 0x2, 0x2, 0x80000001}, {0x7fff, 0xffffff9f, 0x80, 0x9}, {0x2, 0xfffffff8, 0x0, 0x3}, {0xccc8, 0x2, 0x3ff, 0xc00000}, {0x9, 0x3, 0x9, 0x15}, {0x1, 0x6007, 0x4, 0x3}, {0x4, 0x5, 0x1, 0xf}]}}]}}, @TCA_CHAIN={0x8, 0xb, 0x101}, @TCA_RATE={0x6, 0x5, {0x4, 0x7}}]}, 0x998}}, 0x2000a804) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, 0x0}], 0x1, 0x5a, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) fcntl$getownex(r2, 0x10, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_tables_matches\x00') setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r8 = socket(0x22, 0x2, 0x3) getsockopt$inet6_mreq(r8, 0x29, 0x1b, 0x0, &(0x7f0000000440)) prlimit64(0x0, 0xb, &(0x7f0000000000)={0x0, 0xf1}, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) gettid() 6.386824795s ago: executing program 2 (id=614): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00') read$FUSE(r1, &(0x7f0000001300)={0x2020}, 0x2020) r2 = gettid() r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101000) read(r3, &(0x7f0000000440)=""/247, 0x26) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000080)={0x31, @time={0x0, 0xfffffffd}, 0x0, {0x0, 0x1}, 0x0, 0x0, 0x4}) tkill(r2, 0x7) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r3, 0xc04c5349, &(0x7f00000002c0)={0x9, 0xfffffffe, 0x52}) prlimit64(0x0, 0xa, &(0x7f0000000000), 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000440)=[{0x6, 0x0, 0x0, 0x7ffffcb9}]}) socket$netlink(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r9 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r8, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 6.320276628s ago: executing program 3 (id=615): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x84) fcntl$setlease(r1, 0x400, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = memfd_create(&(0x7f0000000840)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdc\xc0*rw[\r\x98\xf6\xd3\xbf\xa1\xcf\x8e\xc2\x8c\f\xee}g\xfe\xae\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\x01\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x1f\x88Z0\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdf\x00\x10\x00\x00\x00\x00\x00\x00\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) memfd_create(0x0, 0xe) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000023896) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a"], 0x0) socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14, 0x52, 0xa01, 0x8000, 0x0, {0xa}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_DISCONNECT(r1, 0x0, 0x4000800) syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[], 0x0) prlimit64(0x0, 0x1, &(0x7f0000000140)={0xa, 0x100000000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) close(r7) 5.597086704s ago: executing program 3 (id=620): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000002c0)={0xfffffffc, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f00000000c0)={0x0, 0x3ff, 0xfffffffa, {}, 0x0, 0xc64}) setrlimit(0xf, &(0x7f0000000000)={0x4, 0x4}) syz_usbip_server_init(0x4) r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x80, 0x0, @mcast1, 0x8}, 0x1c) socket$packet(0x11, 0x3, 0x300) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x8000000000, 0x0, 0x0, 0x1}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x4, 0x4, 0xfffffffffffffffe}, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000000c0)={0x2000001, 0xa}, 0x8) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x20000, 0x2) lseek(r2, 0x7ff, 0x2) mincore(&(0x7f0000180000/0x3000)=nil, 0x3000, &(0x7f0000000000)=""/174) 5.468210828s ago: executing program 1 (id=621): r0 = socket(0x10, 0x3, 0x8) r1 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0xfffff000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x74, 0x24, 0xf0b, 0x0, 0x20000, {0x0, 0x0, 0x0, r2, {0x0, 0x7}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0xfffffffffffffd91, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x6, '\x00', 0x3, 0x92, 0x8}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0xff, 0x8001}}, {0x4}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c080) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r3, 0x0, 0x81, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000140)={0x1100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) listen(r4, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r9, @ANYRES32=r8, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r9, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r4}, 0x20) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r10, 0x0, 0x30, &(0x7f0000000280)=ANY=[], 0x90) 5.30200809s ago: executing program 0 (id=622): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) add_key$keyring(0x0, &(0x7f0000008580)={'syz', 0x3}, 0x0, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x24, 0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f0000000180)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x238, 0x0, 0x1acc02, 0x148, 0x0, 0x10, 0x528, 0x2a8, 0x2a8, 0x528, 0x2a8, 0x3, 0x0, {[{{@ip={@local, @multicast2, 0xff, 0xffffff00, 'veth0_virt_wifi\x00', 'netdevsim0\x00', {0xff}, {}, 0x1}, 0x40000, 0x70, 0xd0, 0x0, {0x0, 0x5803}}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, 0xff47, 0x4, [0x2a, 0x10, 0x6, 0x2c, 0x10, 0x3e, 0x7, 0x12, 0x32, 0x1, 0x21, 0xb, 0x3b, 0x1e, 0x2e, 0x1e], 0x1, 0x8000, 0x8000}}}, {{@ip={@remote, @multicast2, 0xffffff00, 0x0, 'virt_wifi0\x00', 'caif0\x00', {}, {0xff}, 0xd1b6c305b1e83769, 0x3, 0x2}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x1, 0x5, 0x3, 0x4, 0x1], 0x6, 0x4}, {0x0, [0x1, 0x1, 0x1, 0x0, 0x6, 0x4], 0x2, 0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x298) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 4.659362186s ago: executing program 2 (id=623): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000080)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newtaction={0xa8, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x94, 0x1, [@m_ct={0x48, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7b, 0x20000000, 0x7, 0xf}}]}, {0x7, 0x6, "5681bb"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x100}}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000002b0009ef"], 0x14}}, 0x84) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000005000010000000000000000000000000a68000000090a016180333a347aad39000a00000300000b4000000000000000020000118000000100636f756e746572621abc6fe8e6d136ed9a31aa102fccc10000000280000002000000000000000600000140000000000000000400000c400000001000000b4000000000000000040000010073797a300000000008000340000000000c0f004000000000000000030900020073797a31000000001400000000"], 0x90}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaaaaaaaacf3cccaf382f080045f800380000000001069078ac1414bbac1414aa00004e22a4fdae9310341b3b3dc85ed3b3bd0ae98572000e99dff63921e43647532e8f9cc64146484f1de307833908ad270f984e728d183a6426b09bfffc33b8a2bb4daa27ef5f914ad055561495b51365f7d02b644c9c5b86f70db13b718b7196b3f7d421f78243aa38e1f43b06a40d3d213984b08b7a087b27cdd82482f97757da18d36a78dd55ec43a1acc1f07f4a296a92d7a5390941b9a84c1443413c5ff549c251d9fccedf109d29a7f76aa3025a1fda25c67ac2649119e8987bdf3cd7e9fabaeb0ad7f24e8bf88aa30c5fbfd6ca0f98c7a910e267ed0ecdd23406272abf46315e674416e218e424a0866b9bdb3ac7b205acb3e6f9fca96e74bbd1ba5ee2fc14243cd7b54b6f096cfb171692281fa95fcf3c53bad0454129ace652a75afd1ef2828a16c4a4ad819c604e38f38fff39c53e5b4aa96ec5295dbb529f35075688bd30d6f3c15cc1b3f2c678", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="9c10ffff90780000050e0000000300000be4001000000000"], 0x0) 3.790986513s ago: executing program 1 (id=624): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, &(0x7f0000000080)=0x490d, 0x4) timer_settime(0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)={{0x0}, {0x0}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000340)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r3, 0x0, 0x2}, 0x18) r4 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x1ff, 0x20000) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000540)={{0x2, 0x3, 0x4, 0x448, '\x00', 0x2}, 0x1, [0x7, 0xd1, 0x2, 0xfff, 0x1ff, 0x6, 0x2, 0x5, 0x2, 0xbd, 0x80000000, 0x102d, 0x8, 0x1, 0x3, 0x1, 0x1, 0x7, 0x6, 0x200, 0x80, 0x7, 0x7, 0x7, 0x8, 0x2, 0x2, 0x7, 0xffffffffffffffff, 0x3, 0x9, 0xfffffffffffffffa, 0x1, 0x1, 0x101, 0x3, 0x3, 0x1, 0x0, 0x6, 0x9, 0x4, 0x8a, 0x50f, 0x9ac2, 0x6fe5, 0xffefffffba36ba5a, 0x4, 0xa, 0x88b, 0x6, 0x4000006, 0xffffffffffffffff, 0x403, 0x3, 0xfffffffffffff8f6, 0x4, 0xfffffffffffffff9, 0x0, 0xf9800000, 0x0, 0x9, 0x1800000, 0x4, 0x82b, 0x8, 0x5, 0xa, 0x9, 0xfffffffffffffffa, 0x3ff, 0x100000000000006, 0x4, 0x2f, 0x1, 0x7, 0x40, 0x2, 0x42843379, 0x1, 0x7, 0x200, 0x77d, 0xb3, 0x1, 0x539, 0x9, 0x6, 0x0, 0x5, 0x4, 0x200, 0x8, 0x8, 0x0, 0x8005, 0x93, 0x8, 0x401, 0x2, 0x2775e12f, 0x680000000000, 0x7, 0x7, 0xe88, 0x80000004, 0x0, 0xfff7fffffffffffa, 0x10001, 0x8, 0x8, 0x1000, 0x0, 0x5, 0x7, 0xfffffffffffff000, 0x10000, 0x7ffd, 0xfffffffffffffff7, 0x6, 0xd, 0x8, 0x5, 0x6, 0x4, 0x0, 0x7f, 0xd1]}) fsopen(0x0, 0x1) r5 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$rfkill(r5, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x18, 0x5, &(0x7f00000001c0)=ANY=[@ANYRES64, @ANYRES32=0x0, @ANYRES32=r1, @ANYRES16=r2], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x987, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={0x0, r6}, 0x18) r7 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x1) fchdir(r8) openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) lremovexattr(&(0x7f0000000380)='./file0\x00', &(0x7f0000000b00)=ANY=[@ANYBLOB="747275703f4664a600070711974711a1ddea8cbe1c2e00eebd6cce35cf7f9ea09070b1459fee428510", @ANYBLOB="0c29f8c62051de79390c26c6d845c1db007ba4f3eb79a0e38b9181fbc44e9a99b1158041c36ac188c4d683a2cf03788326aeefb0e1774bc89e4c7cec44377e881ef36ad1ca5106c1fb713d5796d8f67c536d5c32685cd5b7d2eb210837343b57f54ccefbb602fb513035560a3365f2ab6eebfc90af6ec843c9665e92b24a80301077dc8cf6b07a430cf5bc3ffd36fcbc1d9b30a21731a5e1851075225ed0021e5279b76efdfd9031d863f53b4ed7f68e977b4e08031c94ca918fe3d1d3a61276609aab9f20f75b7b2acfd21bffb7080e4e97fe57ce422c1831c60409fe710e1fed7243a258617ee1e14c9627ee3bf9ffac1adf880f"]) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000008c0), r9) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r9, &(0x7f0000000a00)={0x0, 0x2, &(0x7f00000009c0)={&(0x7f0000000900)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="37ef000000000000000005000000"], 0x14}}, 0x0) ustat(0xb3c, 0x0) 3.739166049s ago: executing program 3 (id=625): socket$inet6(0xa, 0x400000000001, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x100000000000000, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x4000, 0x0, 0x90, [], 0x2, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00'/45]}, 0xa5) r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r1 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r1, 0x5421, 0x0) connect$vsock_stream(r1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(0xffffffffffffffff, 0x15) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff0000000002"], 0x7c}}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x4, @void}, 0x10) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) eventfd(0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000a00)=ANY=[@ANYRESHEX=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400000083000200bf09000000000054479f122fdad37c7f8100550901000000000095b3370d2fb0ea40e305d2761af738119d63fdf946f1a9780dd0cb4b2cfd1d75a9048c03ff9e171856b994a5c3ebf2ff1913b3cf8e54c9d0a663a63159cd5d41167c6d90c8a686957157ae05da353c086746df3632ad2ae498c4336022ec9b1ce0d143589053e4a1a5c90ed1dcb37dd7618fa5bd99876182f65c1bc60b7cf468540f93121a8f63f497106b0637db4e250866224d51d459222597e5", @ANYRESDEC=r2], 0x0, 0xffff, 0x0, 0x0, 0x0, 0x71, '\x00', 0x0, @fallback=0x3d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) 3.402184938s ago: executing program 2 (id=626): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000200)='cgroup.clone_children\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x38) socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000000)='sched_switch\x00', r3, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/73, 0x49, 0x400000000000000) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = socket(0x2, 0x80805, 0x0) r9 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r9, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e20, 0x3, 'rr\x00', 0x16, 0x2, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) rseq(&(0x7f00000006c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r10 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r10}, &(0x7f0000bbdffc)=0x0) timer_settime(r11, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 2.899070711s ago: executing program 1 (id=627): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00') read$FUSE(r1, &(0x7f0000001300)={0x2020}, 0x2020) r2 = gettid() r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101000) read(r3, &(0x7f0000000440)=""/247, 0x26) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000080)={0x31, @time={0x0, 0xfffffffd}, 0x0, {0x0, 0x1}, 0x0, 0x0, 0x4}) tkill(r2, 0x7) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r3, 0xc04c5349, &(0x7f00000002c0)={0x9, 0xfffffffe, 0x52}) prlimit64(0x0, 0xa, &(0x7f0000000000), 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000440)=[{0x6, 0x0, 0x0, 0x7ffffcb9}]}) socket$netlink(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r9 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r8, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 2.830277773s ago: executing program 3 (id=628): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) r1 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005ae4c41096050100f5050102030109021b0001000000000904d60001b5e1450009058300"], 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) syz_init_net_socket$rose(0xb, 0x5, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff000060005400000000008000640"], 0x6c}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x18, r4, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0xff07}, 0x0) 1.923122583s ago: executing program 2 (id=629): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) syz_init_net_socket$rose(0xb, 0x5, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff000060005400000000008000640"], 0x6c}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x18, r3, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0xff07}, 0x0) 1.775361661s ago: executing program 4 (id=630): r0 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x41, 0x0) write$nbd(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="010000000000000000000000000020"], 0x40) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000240)={0x7c, [[0x2, 0x0, 0x3, 0x9, 0x366787ed, 0x104, 0x1, 0x8], [0xc, 0x2, 0x9, 0x1000, 0x2, 0x9, 0x2, 0x9], [0x10000, 0x1, 0x7, 0x81, 0x9, 0xfff, 0x10000, 0x560]], '\x00', [{0x6, 0x6, 0x0, 0x1}, {0x3, 0x8, 0x0, 0x0, 0x0, 0x1}, {0x9, 0x3, 0x0, 0x1, 0x0, 0x1}, {0x1, 0xb9, 0x1, 0x1, 0x1, 0x1}, {0xffffffff, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x0, 0x2}, {0x2, 0x3, 0x1, 0x1}, {0xa7, 0xcb64, 0x1, 0x0, 0x1, 0x1}, {0xff, 0x2, 0x0, 0x1, 0x1}, {0x40, 0x6c1, 0x1, 0x0, 0x1, 0x1}, {0x8, 0x7ff, 0x0, 0x0, 0x1}, {0x40, 0x8000, 0x1, 0x1, 0x1, 0x1}], '\x00', 0x1}) 1.64754571s ago: executing program 4 (id=631): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'ipvlan1\x00', &(0x7f0000000180)=@ethtool_perm_addr={0x20, 0x7, "f152ec70877946"}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x18, 0x2d, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x18, 0x0, 0x0, @binary}]}, 0x18}}, 0x84) 1.163181958s ago: executing program 0 (id=632): socket$kcm(0x11, 0x0, 0x300) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4004) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x42280, 0x0) accept4$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs, 0x0, 0x100000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'erspan0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000440)={0x0, 0x1b, "bdbc11f4c2474f7ca8934dcf68b2aa1753c31dbe11a2e0202e3d33"}, &(0x7f0000000200)=0x23) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000280)={r5, 0xa508}, &(0x7f0000000340)=0x8) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) mount_setattr(0xffffffffffffffff, 0x0, 0x100, &(0x7f0000000400)={0x300094, 0x78, 0x20000, {r1}}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="61105c00"/16], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.158652008s ago: executing program 1 (id=633): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00') read$FUSE(r1, &(0x7f0000001300)={0x2020}, 0x2020) r2 = gettid() r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101000) read(r3, &(0x7f0000000440)=""/247, 0x26) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000080)={0x31, @time={0x0, 0xfffffffd}, 0x0, {0x0, 0x1}, 0x0, 0x0, 0x4}) tkill(r2, 0x7) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r3, 0xc04c5349, &(0x7f00000002c0)={0x9, 0xfffffffe, 0x52}) prlimit64(0x0, 0xa, &(0x7f0000000000), 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000440)=[{0x6, 0x0, 0x0, 0x7ffffcb9}]}) socket$netlink(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r9 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r8, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1.071024546s ago: executing program 4 (id=634): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000200000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x149282, 0x10) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0x4, 0x4}, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000180)={@multicast1, @loopback}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) fstat(r3, &(0x7f0000000000)) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x27, 0x3, 0x80000000) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFBR(r8, 0x8940, &(0x7f0000000180)=@get={0x1, &(0x7f0000000340)=""/210, 0x9}) 44.321418ms ago: executing program 2 (id=635): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={0x0}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000fdffffff0f0000001800078008000200070000ff0b0003"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$FOU_CMD_GET(r2, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x70, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_PEER_V6={0x14, 0x9, @rand_addr=' \x01\x00'}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0xc}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}]}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x1c, 0x26, 0x200, 0x70bd28, 0x25dfdbfd, {0x14}, [@typed={0x8, 0x142, 0x0, 0x0, @uid=0xee01}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24841}, 0x4040) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r6, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r7, @ANYBLOB="2d000e0080000000ffffffffffff08021100000008021100000000000000000000000000640000002503000000000000080026006c09"], 0x80}}, 0x0) sendmsg$TIPC_NL_KEY_FLUSH(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x7c92b2b8703985df}, 0xc, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="f8000000", @ANYRES16=r4, @ANYBLOB="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"], 0xf8}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a28000000000a030000000000000000000100000908000240000000050900010073797a300000000028000000000a03000000000000000000010000090900010073797a30000000000800024000000007"], 0x78}}, 0x24000080) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r10, 0x0, 0x0) sendmmsg$unix(r11, &(0x7f0000000000), 0x651, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0x401, 0x3f000000, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x40}, 0x1, 0xd}, 0x0) recvmmsg(r10, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000280)={0x3f00, 0x0, 0x0}) 0s ago: executing program 4 (id=636): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="c0000000000101040000000000000000020000007400018014000180080001000000000008000200e00000020c00028005000100000000004300028005000100060000000c00038005000100000000000c0002"], 0xc0}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="0c0100000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400fc0000000000000000000000000000000c00028005000100000000003c0002800c00028005000100000000002c000180140003000000000000000000000000000000000114000400fe8000000000000000000000000000aa08000740"], 0x10c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x2, 0x1, 0x409, 0x0, 0x0, {0xa, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x1, 0x3, 0x2, 0x3, 0xfffe}, 0x20) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c00)={0x14, r6, 0x680822d7e3b5f37d}, 0x14}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000007d40), r5) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x1c8, 0x12) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r7, 0x7ab, &(0x7f0000000040)={&(0x7f0000000bc0)={{@my=0x0}, {@my=0x0, 0x4000}, 0x400, "884fbe2726aa0a32f3e65f909acda971a093228292456e0332e6c11577b514f0bb8db731789d860e9589c4cbdd60b7a851a8a3c55ada2f90c51a69bf4a5c3e32296535dc838ef00dc18a32a79118dc858628f741f107552021e5a81d38e4374a8a717a7ca9015083cfff5d16156ef9cabf4f60c0da46870a10bf520cc5abcf9e3a437761ea75776763139fadd55c46daf5338870951822f6a803ccfbab9c3f507672d7c39ea9ccf81d9bc2b4649e7b44ed9fd7cb9bd389240cd41c415113d1caac4536f05c07e596d6addad2a4d27ba21a3b655753c508caedcc812ca235a7cd1686426b208bdecf8a4265ba8f6824aa60306e2d623481eed301b6dc21041fa8b6592be00bb74de1989a45a5aa32c189e9f5a5bb878281d0129afcfb8410cd1fa5acd080993d2d084213130a9b8d517d13251e6605a03d9b8faf507e820205a1f471af7b261419e79e09c547f7c10fd3f1ad876f59fdcc5e07d0ff4dee6ea2e3856616a352d648b9b5261b6263020fc3ae8eb404bc25703b3d3b8317ad07ff22907d6631d226c8247c92c1826ff814590dfe8c7fc54dfb265e906f756846546316b20e0105e2a5355a210b2b7f5db61d8f90bb783b41ce368233bd08044e9283531fffe49e3d305ecfb16075a047557f57bb7baf8babfc02975ad0d60ed8de9cb8adc9f667bc6826cbea8e260e4bff28a5ec19d38d1fc019db3cfaf310e764d78619cb27fb17af05a0e8ae831ce8413721e71138e62cc4ad8e7974d1506b4fb581c549a3dd7b7ef44ac37201aa3bce6f37f648d781bcb4f329fd45ffa640f1b04efb38a36e0ed0e2abcb07e4ad88ae3edfb6d840d75340204243d0e1c1c3139823b0d5ad196430bf4566619a1a97df4376a7e9a9e9c1d97b9f773c921778f2cb5165c02da1423305c502076177e4af50cb3343c10b01b78e3fe5520bdfae2b3dbe42db0f0eb55bbcb19038018d45ccdb8b0df400085a02c61b033f430fb6a7408e090c65798bc49d35e049d276fd1952d2b3dfd92a2548411e21be26216fe68fc3cf1c6625031260153708a53255b3d3d0411d5f0e8ab2102a97e539c34e9c769a7d9ef05e928c2c52775de467fa843cbcdabc290097eeb2ee7c58d86e3fccc39a5b694c18a4cc0d6af1e61d9c69e6466bc0cbef15365109e4f67a6268625f8c3f358fb7d567cbea52e1bc289bd8effda4e362a729e8cd3064970b97e3f72535d9ba88e97a14834cfd8dc86b5d2f9b35425a4162f3abe8b785ef462883e716c91b8eb281d81f68f606f16fcbc5cddfdec3b515818a647d86a4c17bae6ad525e95598052c49cdee821ceb45b2350dda13628db0dd266f30285241a2b147d65113b8ed3665a3451f7a56cf430ec98aeac702d9b9f776d97520a9d039e5b2fff34ac4d4e0a32e1f35c8f38e4f4fe1b3212a70f185ad71ec86b8c900"}, 0x11000}) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r8, 0x8b32, &(0x7f0000000040)) kernel console output (not intermixed with test programs): r 5 using dummy_hcd [ 106.211441][ T10] usb 2-1: device descriptor read/64, error -71 [ 106.257233][ T30] audit: type=1400 audit(1745214003.696:286): avc: denied { shutdown } for pid=6348 comm="syz.3.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 106.461054][ T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 106.632407][ T10] usb 2-1: device descriptor read/64, error -71 [ 106.652709][ T30] audit: type=1400 audit(1745214004.086:287): avc: denied { block_suspend } for pid=6359 comm="syz.3.119" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 106.917596][ T10] usb usb2-port1: attempt power cycle [ 106.969154][ T6367] fuse: Unknown parameter 'group_i00000000000000000000' [ 106.989566][ T2932] Bluetooth: hci5: Frame reassembly failed (-84) [ 107.030387][ T2932] Bluetooth: hci6: Frame reassembly failed (-90) [ 107.151343][ T30] audit: type=1400 audit(1745214004.566:288): avc: denied { shutdown } for pid=6362 comm="syz.0.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 107.291048][ T10] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 107.842900][ T10] usb 2-1: device descriptor read/8, error -71 [ 107.919822][ T6361] netlink: 'syz.3.119': attribute type 1 has an invalid length. [ 109.195293][ T5830] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 109.201870][ T55] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 109.209901][ T5830] Bluetooth: hci6: command 0x1003 tx timeout [ 109.255888][ T30] audit: type=1400 audit(1745214004.576:289): avc: denied { read } for pid=6362 comm="syz.0.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 109.280057][ T30] audit: type=1400 audit(1745214004.576:290): avc: denied { mount } for pid=6362 comm="syz.0.120" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 109.304729][ T30] audit: type=1400 audit(1745214004.586:291): avc: denied { mounton } for pid=6362 comm="syz.0.120" path="/30/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 109.394365][ T30] audit: type=1400 audit(1745214006.836:292): avc: denied { unmount } for pid=5818 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 109.726274][ T30] audit: type=1400 audit(1745214007.146:293): avc: denied { append } for pid=6375 comm="syz.4.123" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 110.571854][ T30] audit: type=1400 audit(1745214008.016:294): avc: denied { sys_module } for pid=6375 comm="syz.4.123" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 110.673427][ T5902] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 110.881162][ T5902] usb 1-1: unable to get BOS descriptor or descriptor too short [ 111.130354][ T5902] usb 1-1: config 107 has an invalid interface number: 11 but max is 0 [ 111.143087][ T5902] usb 1-1: config 107 has no interface number 0 [ 111.155459][ T5902] usb 1-1: config 107 interface 11 has no altsetting 0 [ 111.166533][ T5902] usb 1-1: string descriptor 0 read error: -22 [ 111.189096][ T5902] usb 1-1: New USB device found, idVendor=1199, idProduct=68aa, bcdDevice=83.77 [ 111.195024][ T30] audit: type=1400 audit(1745214008.636:295): avc: denied { write } for pid=6397 comm="syz.4.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 111.306155][ T30] audit: type=1400 audit(1745214008.746:296): avc: denied { shutdown } for pid=6403 comm="syz.4.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 111.334278][ T5902] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.410907][ T5902] usb 1-1: Expected 3 endpoints, found: 0 [ 111.523963][ T30] audit: type=1400 audit(1745214008.966:297): avc: denied { bind } for pid=6407 comm="syz.4.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 111.648513][ T5902] usb 1-1: USB disconnect, device number 8 [ 111.690804][ T6410] fuse: Unknown parameter 'group_i00000000000000000000' [ 111.711927][ T6411] hsr0 speed is unknown, defaulting to 1000 [ 112.166290][ T30] audit: type=1400 audit(1745214009.586:298): avc: denied { setopt } for pid=6413 comm="syz.2.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 112.497707][ T30] audit: type=1400 audit(1745214009.936:299): avc: denied { read } for pid=5181 comm="acpid" name="event8" dev="devtmpfs" ino=2765 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 112.526634][ T30] audit: type=1400 audit(1745214009.936:300): avc: denied { open } for pid=5181 comm="acpid" path="/dev/input/event8" dev="devtmpfs" ino=2765 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 112.550519][ T30] audit: type=1400 audit(1745214009.936:301): avc: denied { ioctl } for pid=5181 comm="acpid" path="/dev/input/event8" dev="devtmpfs" ino=2765 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 113.888042][ T6444] netlink: 12 bytes leftover after parsing attributes in process `syz.2.142'. [ 113.939352][ T6447] fuse: Unknown parameter 'group_i00000000000000000000' [ 114.018129][ T30] audit: type=1400 audit(1745214011.436:302): avc: denied { mounton } for pid=6441 comm="syz.3.143" path="/23/file0" dev="tmpfs" ino=151 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 114.203679][ T6457] netlink: 4 bytes leftover after parsing attributes in process `syz.3.143'. [ 115.391032][ T5869] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 115.563295][ T5869] usb 5-1: device descriptor read/64, error -71 [ 115.801012][ T5869] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 116.211193][ T5869] usb 5-1: device descriptor read/64, error -71 [ 116.335271][ T30] audit: type=1400 audit(1745214013.776:303): avc: denied { create } for pid=6471 comm="syz.0.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 116.416052][ T5869] usb usb5-port1: attempt power cycle [ 117.072103][ T30] audit: type=1400 audit(1745214013.776:304): avc: denied { ioctl } for pid=6471 comm="syz.0.150" path="socket:[9973]" dev="sockfs" ino=9973 ioctlcmd=0xaa00 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 117.405928][ T30] audit: type=1400 audit(1745214014.829:305): avc: denied { create } for pid=6481 comm="syz.4.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 117.503614][ T30] audit: type=1400 audit(1745214014.869:306): avc: denied { write } for pid=6481 comm="syz.4.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 117.601024][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 117.803279][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 117.815997][ T9] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 117.825451][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.835351][ T9] usb 1-1: Product: syz [ 117.839520][ T9] usb 1-1: Manufacturer: syz [ 117.844151][ T9] usb 1-1: SerialNumber: syz [ 117.850132][ T9] usb 1-1: config 0 descriptor?? [ 117.855354][ T10] psmouse serio2: Failed to reset mouse on : -5 [ 117.957312][ T6496] fuse: Unknown parameter 'group_id00000000000000000000' [ 118.117541][ T6485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.126825][ T6485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.154472][ T9] usb 1-1: USB disconnect, device number 9 [ 118.587129][ T1569] Bluetooth: Error in BCSP hdr checksum [ 119.548888][ T5819] Bluetooth: hci5: command 0x1003 tx timeout [ 119.555305][ T55] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 119.876633][ T6507] netlink: 84 bytes leftover after parsing attributes in process `syz.0.159'. [ 120.292726][ T5830] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 120.296416][ T30] audit: type=1400 audit(1745214017.629:307): avc: denied { setopt } for pid=6520 comm="syz.4.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 120.484173][ T30] audit: type=1400 audit(1745214017.629:308): avc: denied { write } for pid=6520 comm="syz.4.164" name="event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 120.703435][ T6530] fuse: Unknown parameter 'group_id00000000000000000000' [ 120.751606][ T5869] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 121.011148][ T5869] usb 3-1: Using ep0 maxpacket: 16 [ 121.020861][ T5869] usb 3-1: config 0 interface 0 has no altsetting 0 [ 121.028958][ T5869] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 122.249302][ T5869] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.265290][ T5869] usb 3-1: config 0 descriptor?? [ 122.279267][ T30] audit: type=1400 audit(1745214019.719:309): avc: denied { listen } for pid=6536 comm="syz.4.169" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 122.299672][ C0] vkms_vblank_simulate: vblank timer overrun [ 122.332035][ T6540] netlink: 8 bytes leftover after parsing attributes in process `syz.1.170'. [ 122.353623][ T30] audit: type=1400 audit(1745214019.719:310): avc: denied { connect } for pid=6536 comm="syz.4.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 122.433766][ T30] audit: type=1400 audit(1745214019.719:311): avc: denied { name_connect } for pid=6536 comm="syz.4.169" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 122.489789][ T30] audit: type=1400 audit(1745214019.789:312): avc: denied { ioctl } for pid=6536 comm="syz.4.169" path="/dev/sg0" dev="devtmpfs" ino=737 ioctlcmd=0x2272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 122.569410][ T30] audit: type=1400 audit(1745214019.799:313): avc: denied { ioctl } for pid=6536 comm="syz.4.169" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x55ca scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 122.727549][ T5869] hid (null): unknown global tag 0xd [ 122.733368][ T5869] hid (null): bogus close delimiter [ 122.742983][ T30] audit: type=1400 audit(1745214019.819:314): avc: denied { read } for pid=6536 comm="syz.4.169" path="socket:[10060]" dev="sockfs" ino=10060 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 122.747429][ T5869] hid (null): global environment stack underflow [ 122.766041][ C0] vkms_vblank_simulate: vblank timer overrun [ 122.801043][ T30] audit: type=1400 audit(1745214019.919:315): avc: denied { wake_alarm } for pid=6541 comm="syz.1.171" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 122.831075][ T10] misc userio: Buffer overflowed, userio client isn't keeping up [ 122.850741][ T30] audit: type=1400 audit(1745214019.969:316): avc: denied { create } for pid=6541 comm="syz.1.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 122.878222][ T30] audit: type=1400 audit(1745214019.979:317): avc: denied { ioctl } for pid=6541 comm="syz.1.171" path="socket:[10372]" dev="sockfs" ino=10372 ioctlcmd=0x8b36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 122.902754][ C0] vkms_vblank_simulate: vblank timer overrun [ 122.911798][ T30] audit: type=1400 audit(1745214020.249:318): avc: denied { rename } for pid=5178 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 122.918681][ T5871] libceph: connect (1)[c::]:6789 error -101 [ 122.934647][ C0] vkms_vblank_simulate: vblank timer overrun [ 123.085420][ T5869] hid (null): unknown global tag 0xc [ 123.091183][ T5869] hid (null): global environment stack underflow [ 123.101246][ T5869] hid (null): invalid report_count 496060018 [ 123.108857][ T5869] hid (null): nested delimiters [ 123.114439][ T5871] libceph: mon0 (1)[c::]:6789 connect error [ 123.121984][ T5869] hid (null): global environment stack underflow [ 123.593800][ T5869] libceph: connect (1)[c::]:6789 error -101 [ 123.613534][ T5869] libceph: mon0 (1)[c::]:6789 connect error [ 123.638211][ T6557] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6557 comm=syz.1.174 [ 124.116871][ T6572] fuse: Unknown parameter 'group_id00000000000000000000' [ 124.141398][ T5871] libceph: connect (1)[c::]:6789 error -101 [ 124.155288][ T5871] libceph: mon0 (1)[c::]:6789 connect error [ 124.213976][ T10] input: PS/2 Generic Mouse as /devices/serio2/input/input8 [ 124.339645][ T13] Bluetooth: hci5: Frame reassembly failed (-84) [ 124.604228][ T6525] ceph: No mds server is up or the cluster is laggy [ 125.493330][ T5871] libceph: connect (1)[c::]:6789 error -101 [ 125.849029][ T5871] libceph: mon0 (1)[c::]:6789 connect error [ 126.135463][ T10] psmouse serio2: Failed to enable mouse on [ 126.371075][ T5830] Bluetooth: hci5: command 0x1003 tx timeout [ 126.379517][ T55] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 126.402129][ T6047] udevd[6047]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 126.418141][ T10] usb 3-1: USB disconnect, device number 3 [ 127.999424][ T6607] lo speed is unknown, defaulting to 1000 [ 128.032631][ T6607] lo speed is unknown, defaulting to 1000 [ 128.051185][ T6607] lo speed is unknown, defaulting to 1000 [ 128.439946][ T6607] infiniband syz0: set active [ 128.444910][ T6607] infiniband syz0: added lo [ 128.455355][ T5869] lo speed is unknown, defaulting to 1000 [ 128.461992][ T6605] netlink: 'syz.4.184': attribute type 1 has an invalid length. [ 128.469648][ T6605] netlink: 224 bytes leftover after parsing attributes in process `syz.4.184'. [ 128.523036][ T6607] RDS/IB: syz0: added [ 128.523350][ T6607] smc: adding ib device syz0 with port count 1 [ 128.523393][ T6607] smc: ib device syz0 port 1 has pnetid [ 128.524887][ T6607] lo speed is unknown, defaulting to 1000 [ 128.564723][ T6610] loop9: detected capacity change from 0 to 7 [ 128.605604][ T6607] lo speed is unknown, defaulting to 1000 [ 128.688702][ T6607] lo speed is unknown, defaulting to 1000 [ 128.790739][ T6607] lo speed is unknown, defaulting to 1000 [ 128.865577][ T6607] lo speed is unknown, defaulting to 1000 [ 128.942705][ T10] lo speed is unknown, defaulting to 1000 [ 129.001313][ T6608] tty tty28: ldisc open failed (-12), clearing slot 27 [ 129.020011][ T6610] Dev loop9: unable to read RDB block 7 [ 129.026606][ T6610] loop9: unable to read partition table [ 129.032380][ T6610] loop9: partition table beyond EOD, truncated [ 129.038615][ T6610] loop_reread_partitions: partition scan of loop9 (被x󟣑 ) failed (rc=-5) [ 129.341791][ T5867] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 129.389636][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 129.389649][ T30] audit: type=1400 audit(1745214026.829:325): avc: denied { listen } for pid=6614 comm="syz.4.188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 129.442325][ T30] audit: type=1400 audit(1745214026.889:326): avc: denied { kexec_image_load } for pid=6614 comm="syz.4.188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 129.551162][ T5867] usb 3-1: Using ep0 maxpacket: 32 [ 129.750453][ T6622] evm: overlay not supported [ 130.307473][ T6614] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 130.671677][ T6619] fuse: Bad value for 'user_id' [ 130.676564][ T6619] fuse: Bad value for 'user_id' [ 130.811372][ T5867] usb 3-1: config 0 has an invalid interface number: 16 but max is 0 [ 130.823887][ T5867] usb 3-1: config 0 has no interface number 0 [ 130.834570][ T5867] usb 3-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 130.880114][ T5867] usb 3-1: config 0 interface 16 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 130.926789][ T5867] usb 3-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d [ 130.946622][ T5867] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.985934][ T5867] usb 3-1: Product: syz [ 131.015082][ T5867] usb 3-1: Manufacturer: syz [ 131.019721][ T5867] usb 3-1: SerialNumber: syz [ 131.080461][ T5867] usb 3-1: config 0 descriptor?? [ 131.091362][ T6613] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 131.098621][ T6613] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 131.255743][ T5867] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 131.777136][ T10] libceph: connect (1)[c::]:6789 error -101 [ 131.785870][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 131.798363][ T10] libceph: connect (1)[c::]:6789 error -101 [ 131.808296][ T30] audit: type=1400 audit(1745214029.249:327): avc: denied { create } for pid=6630 comm="syz.3.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 131.827931][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 131.847220][ T6633] ceph: No mds server is up or the cluster is laggy [ 131.863775][ T5867] usb 3-1: USB disconnect, device number 4 [ 131.869830][ T30] audit: type=1400 audit(1745214029.289:328): avc: denied { getopt } for pid=6630 comm="syz.3.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 132.081598][ T30] audit: type=1400 audit(1745214029.509:329): avc: denied { read } for pid=6639 comm="syz.0.194" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 132.238722][ T30] audit: type=1400 audit(1745214029.509:330): avc: denied { open } for pid=6639 comm="syz.0.194" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 132.317867][ T6643] netlink: 72 bytes leftover after parsing attributes in process `syz.4.193'. [ 132.375357][ T6115] udevd[6115]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.16/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 132.555287][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.585947][ T30] audit: type=1400 audit(1745214029.639:331): avc: denied { ioctl } for pid=6639 comm="syz.0.194" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 133.218486][ T30] audit: type=1400 audit(1745214030.659:332): avc: denied { write } for pid=6645 comm="syz.0.195" name="001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 133.260356][ T30] audit: type=1400 audit(1745214030.689:333): avc: denied { map } for pid=6645 comm="syz.0.195" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 135.463051][ T30] audit: type=1400 audit(1745214032.909:334): avc: denied { connect } for pid=6645 comm="syz.0.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 135.488426][ T30] audit: type=1400 audit(1745214032.929:335): avc: denied { write } for pid=6645 comm="syz.0.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 135.507782][ C1] vkms_vblank_simulate: vblank timer overrun [ 135.527970][ T30] audit: type=1400 audit(1745214032.929:336): avc: denied { read } for pid=6645 comm="syz.0.195" path="socket:[11336]" dev="sockfs" ino=11336 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 135.528775][ T6669] FAULT_INJECTION: forcing a failure. [ 135.528775][ T6669] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 135.575300][ T6671] fuse: Bad value for 'user_id' [ 135.580325][ T6671] fuse: Bad value for 'user_id' [ 135.585395][ T6669] CPU: 1 UID: 0 PID: 6669 Comm: syz.2.201 Not tainted 6.15.0-rc2-syzkaller-00493-gac71fabf1567 #0 PREEMPT(full) [ 135.585416][ T6669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 135.585425][ T6669] Call Trace: [ 135.585431][ T6669] [ 135.585437][ T6669] dump_stack_lvl+0x16c/0x1f0 [ 135.585459][ T6669] should_fail_ex+0x512/0x640 [ 135.585474][ T6669] _copy_from_user+0x2e/0xd0 [ 135.585487][ T6669] copy_msghdr_from_user+0x98/0x160 [ 135.585502][ T6669] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 135.585520][ T6669] ___sys_sendmsg+0xfe/0x1d0 [ 135.585533][ T6669] ? __pfx____sys_sendmsg+0x10/0x10 [ 135.585560][ T6669] __sys_sendmsg+0x16d/0x220 [ 135.585572][ T6669] ? __pfx___sys_sendmsg+0x10/0x10 [ 135.585588][ T6669] ? rcu_is_watching+0x12/0xc0 [ 135.585605][ T6669] do_syscall_64+0xcd/0x260 [ 135.585621][ T6669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.585631][ T6669] RIP: 0033:0x7fb2cd18e169 [ 135.585640][ T6669] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.585650][ T6669] RSP: 002b:00007fb2cdf1d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 135.585660][ T6669] RAX: ffffffffffffffda RBX: 00007fb2cd3b5fa0 RCX: 00007fb2cd18e169 [ 135.585666][ T6669] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 135.585671][ T6669] RBP: 00007fb2cdf1d090 R08: 0000000000000000 R09: 0000000000000000 [ 135.585677][ T6669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.585683][ T6669] R13: 0000000000000000 R14: 00007fb2cd3b5fa0 R15: 00007ffec6376488 [ 135.585695][ T6669] [ 135.753307][ C1] vkms_vblank_simulate: vblank timer overrun [ 135.929715][ T6667] syz.0.195 uses obsolete (PF_INET,SOCK_PACKET) [ 136.840175][ T6672] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 141.963440][ T2932] Bluetooth: (null): Invalid header checksum [ 141.969570][ T2932] Bluetooth: (null): Invalid header checksum [ 141.977794][ T2932] Bluetooth: (null): Invalid header checksum [ 142.064901][ T3457] Bluetooth: (null): Invalid header checksum [ 142.200035][ T13] Bluetooth: (null): Invalid header checksum [ 142.455017][ T6721] fuse: Bad value for 'user_id' [ 142.471032][ T6721] fuse: Bad value for 'user_id' [ 142.728385][ T55] Bluetooth: hci2: command tx timeout [ 142.733256][ T30] audit: type=1326 audit(1745214040.169:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6725 comm="syz.4.215" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f97b618e169 code=0x0 [ 142.957547][ T30] audit: type=1400 audit(1745214040.399:338): avc: denied { setopt } for pid=6718 comm="syz.0.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 143.066073][ T6737] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 144.294272][ T30] audit: type=1400 audit(1745214041.739:339): avc: denied { ioctl } for pid=6752 comm="syz.2.221" path="socket:[10866]" dev="sockfs" ino=10866 ioctlcmd=0xb100 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 144.372195][ T6757] IPv6: NLM_F_CREATE should be specified when creating new route [ 145.178481][ T6770] hsr0 speed is unknown, defaulting to 1000 [ 145.273100][ T30] audit: type=1400 audit(1745214042.639:340): avc: denied { mount } for pid=6773 comm="syz.4.227" name="/" dev="ramfs" ino=11588 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 145.309811][ T6770] lo speed is unknown, defaulting to 1000 [ 145.324863][ T30] audit: type=1400 audit(1745214042.649:341): avc: denied { execute } for pid=6773 comm="syz.4.227" path="/blkio.bfq.io_wait_time" dev="ramfs" ino=11589 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 146.291044][ T5902] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 146.305045][ T30] audit: type=1400 audit(1745214043.449:342): avc: denied { write } for pid=6782 comm="syz.4.229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 146.351880][ T6788] hsr0 speed is unknown, defaulting to 1000 [ 146.358726][ T6788] lo speed is unknown, defaulting to 1000 [ 146.579025][ T6792] fuse: Bad value for 'fd' [ 146.705456][ T5902] usb 4-1: Using ep0 maxpacket: 16 [ 146.714907][ T5902] usb 4-1: config 0 has an invalid interface number: 214 but max is 0 [ 146.723874][ T5902] usb 4-1: config 0 has no interface number 0 [ 146.730042][ T5902] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 146.754386][ T5902] usb 4-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 146.764163][ T5902] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.781065][ T5902] usb 4-1: Product: syz [ 146.798715][ T5902] usb 4-1: Manufacturer: syz [ 146.822616][ T5902] usb 4-1: SerialNumber: syz [ 146.871003][ T10] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 147.049826][ T5902] usb 4-1: config 0 descriptor?? [ 147.201881][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 147.213415][ T10] usb 2-1: config 0 has an invalid interface number: 214 but max is 0 [ 147.244230][ T10] usb 2-1: config 0 has no interface number 0 [ 147.257698][ T10] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 147.292144][ T10] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 147.307881][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.330290][ T10] usb 2-1: Product: syz [ 147.348006][ T10] usb 2-1: Manufacturer: syz [ 147.359666][ T10] usb 2-1: SerialNumber: syz [ 147.432618][ T10] usb 2-1: config 0 descriptor?? [ 147.626902][ T6810] GUP no longer grows the stack in syz.4.237 (6810): 200000005000-20000000a000 (200000001000) [ 147.642746][ T6810] CPU: 0 UID: 0 PID: 6810 Comm: syz.4.237 Not tainted 6.15.0-rc2-syzkaller-00493-gac71fabf1567 #0 PREEMPT(full) [ 147.642774][ T6810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 147.642788][ T6810] Call Trace: [ 147.642795][ T6810] [ 147.642802][ T6810] dump_stack_lvl+0x16c/0x1f0 [ 147.642830][ T6810] gup_vma_lookup+0x1d2/0x220 [ 147.642857][ T6810] __get_user_pages+0x234/0x36f0 [ 147.642885][ T6810] ? __pfx___might_resched+0x10/0x10 [ 147.642917][ T6810] ? __pfx___get_user_pages+0x10/0x10 [ 147.642941][ T6810] ? __pfx_down_read_killable+0x10/0x10 [ 147.642971][ T6810] ? __lock_acquire+0x5ca/0x1ba0 [ 147.642996][ T6810] __gup_longterm_locked+0x20d/0x1850 [ 147.643027][ T6810] ? try_get_folio+0x1d2/0x730 [ 147.643049][ T6810] ? __pfx___gup_longterm_locked+0x10/0x10 [ 147.643077][ T6810] ? try_get_folio+0x255/0x730 [ 147.643099][ T6810] ? find_held_lock+0x2b/0x80 [ 147.643121][ T6810] ? sanity_check_pinned_pages+0x3ac/0x11e0 [ 147.643151][ T6810] gup_fast_fallback+0x183d/0x2650 [ 147.643193][ T6810] ? __pfx_gup_fast_fallback+0x10/0x10 [ 147.643217][ T6810] ? is_bpf_text_address+0x94/0x1a0 [ 147.643237][ T6810] ? kernel_text_address+0x8d/0x100 [ 147.643262][ T6810] ? do_raw_spin_lock+0x12c/0x2b0 [ 147.643284][ T6810] pin_user_pages_fast+0xa7/0xf0 [ 147.643309][ T6810] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 147.643333][ T6810] ? rcu_is_watching+0x12/0xc0 [ 147.643353][ T6810] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 147.643374][ T6810] ? lockdep_hardirqs_on+0x7c/0x110 [ 147.643396][ T6810] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 147.643419][ T6810] iov_iter_extract_pages+0x3a2/0x2000 [ 147.643445][ T6810] ? __blkdev_direct_IO_simple+0x65b/0x810 [ 147.643465][ T6810] ? kasan_save_stack+0x42/0x60 [ 147.643479][ T6810] ? kasan_save_stack+0x33/0x60 [ 147.643494][ T6810] ? kasan_save_track+0x14/0x30 [ 147.643509][ T6810] ? __kasan_kmalloc+0xaa/0xb0 [ 147.643523][ T6810] ? __kmalloc_noprof+0x223/0x510 [ 147.643539][ T6810] ? __blkdev_direct_IO_simple+0x65b/0x810 [ 147.643556][ T6810] ? blkdev_direct_IO+0xa97/0x1cc0 [ 147.643576][ T6810] ? __pfx_iov_iter_extract_pages+0x10/0x10 [ 147.643596][ T6810] ? do_pwritev+0x1af/0x270 [ 147.643624][ T6810] ? __lock_acquire+0x5ca/0x1ba0 [ 147.643652][ T6810] bio_iov_iter_get_pages+0x374/0x10e0 [ 147.643677][ T6810] ? find_held_lock+0x2b/0x80 [ 147.643709][ T6810] ? __pfx_bio_iov_iter_get_pages+0x10/0x10 [ 147.643734][ T6810] ? bio_associate_blkg+0x137/0x2a0 [ 147.643766][ T6810] __blkdev_direct_IO_simple+0x358/0x810 [ 147.643791][ T6810] ? __pfx___blkdev_direct_IO_simple+0x10/0x10 [ 147.643833][ T6810] ? xas_start+0x153/0x790 [ 147.643857][ T6810] ? iov_iter_is_aligned+0xf2/0x5a0 [ 147.643874][ T6810] ? iov_iter_npages+0xf0/0x5a0 [ 147.643893][ T6810] blkdev_direct_IO+0xa97/0x1cc0 [ 147.643924][ T6810] ? __pfx_blkdev_direct_IO+0x10/0x10 [ 147.643944][ T6810] ? __mark_inode_dirty+0x2a7/0xe50 [ 147.643976][ T6810] blkdev_write_iter+0x702/0xdf0 [ 147.644006][ T6810] do_iter_readv_writev+0x654/0x950 [ 147.644032][ T6810] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 147.644056][ T6810] ? avc_policy_seqno+0x9/0x20 [ 147.644073][ T6810] ? selinux_file_permission+0x11f/0x580 [ 147.644103][ T6810] ? bpf_lsm_file_permission+0x9/0x10 [ 147.644128][ T6810] ? security_file_permission+0x71/0x210 [ 147.644154][ T6810] ? rw_verify_area+0xcf/0x680 [ 147.644181][ T6810] vfs_writev+0x353/0xdc0 [ 147.644214][ T6810] ? __pfx_vfs_writev+0x10/0x10 [ 147.644255][ T6810] ? __fget_files+0x20e/0x3c0 [ 147.644275][ T6810] ? do_pwritev+0x1af/0x270 [ 147.644294][ T6810] do_pwritev+0x1af/0x270 [ 147.644318][ T6810] ? __pfx_do_pwritev+0x10/0x10 [ 147.644345][ T6810] ? rcu_is_watching+0x12/0xc0 [ 147.644369][ T6810] __x64_sys_pwritev2+0xef/0x160 [ 147.644389][ T6810] do_syscall_64+0xcd/0x260 [ 147.644420][ T6810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.644437][ T6810] RIP: 0033:0x7f97b618e169 [ 147.644453][ T6810] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.644470][ T6810] RSP: 002b:00007f97b700c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 147.644487][ T6810] RAX: ffffffffffffffda RBX: 00007f97b63b5fa0 RCX: 00007f97b618e169 [ 147.644498][ T6810] RDX: 0000000000000002 RSI: 0000200000000240 RDI: 0000000000000004 [ 147.644508][ T6810] RBP: 00007f97b6210a68 R08: 0000000000000000 R09: 000000000000000b [ 147.644518][ T6810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 147.644528][ T6810] R13: 0000000000000000 R14: 00007f97b63b5fa0 R15: 00007ffc17f0e8b8 [ 147.644551][ T6810] [ 148.701129][ T30] audit: type=1400 audit(1745214046.139:343): avc: denied { unmount } for pid=5824 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 149.747717][ T5902] usbtouchscreen 4-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 149.763716][ T5902] usb 4-1: USB disconnect, device number 4 [ 150.713387][ T30] audit: type=1400 audit(1745214048.159:344): avc: denied { create } for pid=6837 comm="syz.2.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 150.745536][ T5871] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 150.769980][ T30] audit: type=1400 audit(1745214048.209:345): avc: denied { ioctl } for pid=6832 comm="syz.0.243" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 150.785317][ T10] usbtouchscreen 2-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 150.825325][ T10] usb 2-1: USB disconnect, device number 9 [ 150.921606][ T5871] usb 1-1: Using ep0 maxpacket: 32 [ 150.936778][ T5871] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 151.160274][ T5871] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 151.312937][ T5871] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 151.684978][ T5871] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 151.746701][ T5871] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 151.834923][ T5871] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 151.867150][ T5871] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.907659][ T5871] usb 1-1: Product: syz [ 151.940097][ T5871] usb 1-1: Manufacturer: syz [ 151.969634][ T5871] usb 1-1: SerialNumber: syz [ 151.982014][ T5871] usb 1-1: config 0 descriptor?? [ 152.036451][ T30] audit: type=1400 audit(1745214049.479:346): avc: denied { read write } for pid=6851 comm="syz.4.248" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 152.120168][ T30] audit: type=1400 audit(1745214049.479:347): avc: denied { open } for pid=6851 comm="syz.4.248" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 152.248713][ T30] audit: type=1400 audit(1745214049.689:348): avc: denied { write } for pid=6837 comm="syz.2.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 152.455698][ T5871] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 152.463867][ T5869] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 152.481025][ T5871] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 152.497093][ T5871] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 152.508438][ T5871] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 152.521034][ T5871] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 152.527396][ T5871] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 152.538425][ T5871] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 152.561472][ T5871] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 152.568040][ T5871] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 152.588790][ T5871] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 152.614622][ T5871] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 152.626640][ T5871] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 152.643304][ T5871] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 152.664748][ T5869] usb 5-1: Using ep0 maxpacket: 16 [ 152.704381][ T5869] usb 5-1: too many configurations: 123, using maximum allowed: 8 [ 152.760253][ T5871] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 152.911138][ T5871] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 152.919976][ T5869] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 152.935983][ T5871] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 152.950462][ T5871] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 152.961629][ T5869] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 152.991479][ T5871] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 153.004717][ T5869] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 153.021545][ T5869] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 153.033808][ T5871] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 153.039831][ T5871] input input12: Timeout waiting for response from device. [ 153.054797][ T5869] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 153.070274][ T5869] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 153.082107][ T5871] usb 1-1: USB disconnect, device number 10 [ 153.105064][ T5869] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 153.118659][ T5869] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 153.199195][ T5869] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 153.624615][ T5869] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 153.654776][ T5869] usb 5-1: SerialNumber: syz [ 153.943324][ T5869] usb 5-1: config 0 descriptor?? [ 154.066933][ T5869] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input13 [ 154.407601][ T6852] netlink: 4 bytes leftover after parsing attributes in process `syz.4.248'. [ 154.426111][ T5869] usb 5-1: USB disconnect, device number 8 [ 154.442608][ T5181] bcm5974 5-1:0.0: could not read from device [ 155.315286][ T6872] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 156.362940][ T6887] netlink: 'syz.2.259': attribute type 5 has an invalid length. [ 156.542694][ T30] audit: type=1400 audit(1745214053.889:349): avc: denied { ioctl } for pid=6884 comm="syz.1.257" path="socket:[11883]" dev="sockfs" ino=11883 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 156.858168][ T6892] Bluetooth: MGMT ver 1.23 [ 157.264136][ T6907] usb usb1: usbfs: process 6907 (syz.2.262) did not claim interface 63 before use [ 157.274833][ T30] audit: type=1400 audit(1745214054.709:350): avc: denied { append } for pid=6906 comm="syz.2.262" name="001" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 157.455944][ T5871] kernel write not supported for file /video8 (pid: 5871 comm: kworker/1:7) [ 158.789122][ T6914] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 160.130706][ T6922] netlink: 76 bytes leftover after parsing attributes in process `syz.0.266'. [ 160.420200][ T5822] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 161.541016][ T5822] usb 5-1: Using ep0 maxpacket: 8 [ 161.549337][ T5822] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 161.559133][ T5822] usb 5-1: config 0 has no interface number 0 [ 161.565566][ T5822] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 161.580056][ T5822] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 161.592225][ T5822] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 161.603465][ T5822] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 161.616733][ T5822] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 161.626021][ T5822] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.797751][ T5822] usb 5-1: config 0 descriptor?? [ 161.842729][ T5822] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 162.213143][ T30] audit: type=1400 audit(1745214059.649:351): avc: denied { read } for pid=6935 comm="syz.4.269" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 162.237959][ T10] usb 5-1: USB disconnect, device number 9 [ 162.265330][ T10] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 162.309925][ T30] audit: type=1400 audit(1745214059.649:352): avc: denied { open } for pid=6935 comm="syz.4.269" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 165.512599][ T6976] sctp: [Deprecated]: syz.4.279 (pid 6976) Use of int in max_burst socket option. [ 165.512599][ T6976] Use struct sctp_assoc_value instead [ 166.268737][ T6971] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 167.921203][ T5822] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 168.113283][ T5822] usb 5-1: config 0 has an invalid interface number: 213 but max is 0 [ 168.138544][ T5822] usb 5-1: config 0 has no interface number 0 [ 168.154339][ T5822] usb 5-1: New USB device found, idVendor=0079, idProduct=85eb, bcdDevice=90.b7 [ 168.163601][ T5822] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.171021][ T30] audit: type=1400 audit(1745214065.609:353): avc: denied { name_connect } for pid=7004 comm="syz.3.289" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 168.207630][ T5822] usb 5-1: Product: syz [ 168.221959][ T5869] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 168.286808][ T5822] usb 5-1: Manufacturer: syz [ 168.421730][ T7006] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 168.435986][ T5822] usb 5-1: SerialNumber: syz [ 168.481821][ T5822] usb 5-1: config 0 descriptor?? [ 170.090735][ T5869] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 170.400669][ T5869] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.483288][ T5869] usb 1-1: config 0 descriptor?? [ 170.508377][ T5822] usb 5-1: can't set config #0, error -71 [ 170.521149][ T5822] usb 5-1: USB disconnect, device number 10 [ 170.942219][ T7024] capability: warning: `syz.4.292' uses deprecated v2 capabilities in a way that may be insecure [ 170.978430][ T5871] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 170.991066][ T30] audit: type=1400 audit(1745214068.399:354): avc: denied { connect } for pid=7014 comm="syz.4.292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 171.383039][ T5869] usb 1-1: Cannot read MAC address [ 171.396443][ T5869] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -32 [ 171.430626][ T5869] usb 1-1: USB disconnect, device number 11 [ 171.628757][ T5871] usb 2-1: config 0 has an invalid interface number: 192 but max is 0 [ 171.655614][ T5871] usb 2-1: config 0 has no interface number 0 [ 171.780244][ T5871] usb 2-1: config 0 interface 192 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 171.862221][ T5871] usb 2-1: config 0 interface 192 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 10 [ 171.938115][ T5871] usb 2-1: New USB device found, idVendor=1435, idProduct=0828, bcdDevice= d.3c [ 172.019722][ T5871] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.186571][ T5871] usb 2-1: config 0 descriptor?? [ 172.267093][ T7017] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 172.379106][ T5871] usb 2-1: Could not find all expected endpoints [ 172.536766][ T7030] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.902977][ T5871] usb 2-1: USB disconnect, device number 10 [ 174.627685][ T30] audit: type=1326 audit(1745214072.069:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7043 comm="syz.0.301" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f90a818e169 code=0x0 [ 176.202684][ T30] audit: type=1326 audit(1745214073.609:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7045 comm="syz.1.302" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa1afd8e169 code=0x0 [ 176.928853][ T30] audit: type=1400 audit(1745214074.369:357): avc: denied { read } for pid=7071 comm="syz.1.306" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 177.023004][ T7073] syz.1.306: attempt to access beyond end of device [ 177.023004][ T7073] loop1: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 177.037611][ T7073] hfsplus: unable to find HFS+ superblock [ 177.831965][ T30] audit: type=1400 audit(1745214074.369:358): avc: denied { open } for pid=7071 comm="syz.1.306" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 178.023779][ T30] audit: type=1400 audit(1745214075.459:359): avc: denied { read } for pid=7075 comm="syz.3.308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 178.437087][ T30] audit: type=1400 audit(1745214075.879:360): avc: denied { mount } for pid=7082 comm="syz.1.309" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 178.459692][ T5871] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 178.494667][ T7083] netlink: 20 bytes leftover after parsing attributes in process `syz.1.309'. [ 178.555369][ T55] Bluetooth: min 8 > max 0 [ 178.611134][ T5871] usb 4-1: device descriptor read/64, error -71 [ 178.809953][ T30] audit: type=1400 audit(1745214076.249:361): avc: denied { unmount } for pid=5821 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 178.891472][ T5871] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 179.036102][ T5871] usb 4-1: device descriptor read/64, error -71 [ 179.141366][ T5822] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 179.179439][ T5871] usb usb4-port1: attempt power cycle [ 179.509289][ T5822] usb 5-1: Using ep0 maxpacket: 8 [ 179.560505][ T5822] usb 5-1: config 2 has an invalid interface number: 43 but max is 1 [ 179.669800][ T7089] netlink: 84 bytes leftover after parsing attributes in process `syz.1.311'. [ 179.768755][ T5822] usb 5-1: config 2 has an invalid interface number: 176 but max is 1 [ 179.817969][ T5822] usb 5-1: config 2 has an invalid interface number: 6 but max is 1 [ 179.821002][ T5871] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 179.844412][ T5822] usb 5-1: config 2 has 3 interfaces, different from the descriptor's value: 2 [ 179.974309][ T5871] usb 4-1: device descriptor read/8, error -71 [ 180.111173][ T5822] usb 5-1: config 2 has no interface number 0 [ 180.115344][ T30] audit: type=1400 audit(1745214077.549:362): avc: denied { accept } for pid=7090 comm="syz.2.312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 180.147506][ T5822] usb 5-1: config 2 has no interface number 1 [ 180.153871][ T5822] usb 5-1: config 2 has no interface number 2 [ 180.163896][ T5822] usb 5-1: config 2 interface 43 altsetting 2 bulk endpoint 0x7 has invalid maxpacket 32 [ 180.261107][ T5871] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 180.294403][ T5871] usb 4-1: device descriptor read/8, error -71 [ 180.302454][ T5822] usb 5-1: config 2 interface 43 altsetting 2 endpoint 0x4 has an invalid bInterval 212, changing to 11 [ 180.613896][ T55] Bluetooth: hci1: command tx timeout [ 181.273651][ T5822] usb 5-1: config 2 interface 43 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 181.286830][ T5822] usb 5-1: config 2 interface 176 altsetting 37 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 181.298086][ T5822] usb 5-1: config 2 interface 176 altsetting 37 has a duplicate endpoint with address 0xE, skipping [ 181.307426][ T5871] usb usb4-port1: unable to enumerate USB device [ 181.309069][ T5822] usb 5-1: config 2 interface 176 altsetting 37 has 7 endpoint descriptors, different from the interface descriptor's value: 16 [ 181.508034][ T5822] usb 5-1: config 2 interface 6 altsetting 251 has a duplicate endpoint with address 0xB, skipping [ 181.519333][ T5822] usb 5-1: config 2 interface 6 altsetting 251 has an invalid descriptor for endpoint zero, skipping [ 181.541513][ T5822] usb 5-1: config 2 interface 6 altsetting 251 has a duplicate endpoint with address 0x6, skipping [ 181.557038][ T5822] usb 5-1: config 2 interface 6 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 181.584228][ T5822] usb 5-1: config 2 interface 6 altsetting 251 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 181.630964][ T5822] usb 5-1: config 2 interface 6 altsetting 251 endpoint 0x5 has invalid maxpacket 1519, setting to 1024 [ 182.152321][ T5822] usb 5-1: config 2 interface 6 altsetting 251 bulk endpoint 0x5 has invalid maxpacket 1024 [ 182.667484][ T7101] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 183.187511][ T5822] usb 5-1: config 2 interface 43 has no altsetting 0 [ 183.194332][ T5822] usb 5-1: config 2 interface 176 has no altsetting 0 [ 183.201170][ T5822] usb 5-1: config 2 interface 6 has no altsetting 0 [ 183.211038][ T5822] usb 5-1: string descriptor 0 read error: -71 [ 183.228710][ T5822] usb 5-1: New USB device found, idVendor=0db0, idProduct=6899, bcdDevice=a1.e4 [ 183.247519][ T5822] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.311156][ T5822] usb 5-1: can't set config #2, error -71 [ 183.321811][ T5822] usb 5-1: USB disconnect, device number 11 [ 183.811696][ T5902] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 184.399608][ T7119] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 184.471173][ T5902] usb 3-1: Using ep0 maxpacket: 16 [ 185.046583][ T5902] usb 3-1: config 0 has an invalid interface number: 214 but max is 0 [ 185.061890][ T5902] usb 3-1: config 0 has no interface number 0 [ 185.081314][ T5902] usb 3-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 185.161650][ T5902] usb 3-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 185.181078][ T5902] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.200986][ T5902] usb 3-1: Product: syz [ 185.210970][ T5902] usb 3-1: Manufacturer: syz [ 185.220944][ T5902] usb 3-1: SerialNumber: syz [ 185.231918][ T5902] usb 3-1: config 0 descriptor?? [ 186.026287][ T5832] Bluetooth: hci4: command 0x0406 tx timeout [ 186.037217][ T5832] Bluetooth: hci1: command 0x0406 tx timeout [ 186.043321][ T5827] Bluetooth: hci3: command 0x0406 tx timeout [ 186.050148][ T5834] Bluetooth: hci2: command 0x0406 tx timeout [ 186.476005][ T3078] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 186.505593][ T7135] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 186.702191][ T3078] usb 1-1: Using ep0 maxpacket: 16 [ 187.589315][ T5902] usbtouchscreen 3-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 187.710640][ T5902] usb 3-1: USB disconnect, device number 5 [ 188.545377][ T3078] usb 1-1: config 0 has an invalid interface number: 214 but max is 0 [ 188.561100][ T3078] usb 1-1: config 0 has no interface number 0 [ 188.570354][ T3078] usb 1-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 188.786064][ T3078] usb 1-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 188.920791][ T3078] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.041393][ T3078] usb 1-1: Product: syz [ 189.118106][ T3078] usb 1-1: Manufacturer: syz [ 189.172141][ T7145] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 189.192557][ T3078] usb 1-1: SerialNumber: syz [ 189.377904][ T3078] usb 1-1: config 0 descriptor?? [ 189.473580][ T3078] usb 1-1: can't set config #0, error -71 [ 189.589928][ T3078] usb 1-1: USB disconnect, device number 12 [ 190.091105][ T5910] usb 4-1: new low-speed USB device number 9 using dummy_hcd [ 190.313028][ T5910] usb 4-1: device descriptor read/64, error -71 [ 190.583668][ T7156] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 190.665214][ T5910] usb 4-1: new low-speed USB device number 10 using dummy_hcd [ 191.131248][ T30] audit: type=1326 audit(1745214088.569:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7164 comm="syz.1.331" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa1afd8e169 code=0x0 [ 191.210333][ T5910] usb 4-1: device descriptor read/64, error -71 [ 191.351910][ T5910] usb usb4-port1: attempt power cycle [ 191.485379][ T7176] netlink: 56 bytes leftover after parsing attributes in process `syz.4.336'. [ 191.498955][ T7176] netlink: 12 bytes leftover after parsing attributes in process `syz.4.336'. [ 191.576703][ T7176] netlink: 31 bytes leftover after parsing attributes in process `syz.4.336'. [ 191.589183][ T7176] netlink: 'syz.4.336': attribute type 3 has an invalid length. [ 191.598488][ T7176] netlink: 'syz.4.336': attribute type 2 has an invalid length. [ 191.607038][ T7176] netlink: 31 bytes leftover after parsing attributes in process `syz.4.336'. [ 192.500996][ T5910] usb 4-1: new low-speed USB device number 11 using dummy_hcd [ 192.528206][ T7176] netlink: 120 bytes leftover after parsing attributes in process `syz.4.336'. [ 192.624258][ T5910] usb 4-1: device descriptor read/8, error -71 [ 194.021943][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.261780][ T7198] veth0_vlan: entered allmulticast mode [ 194.286539][ T7198] veth0_vlan: left promiscuous mode [ 194.293402][ T7198] veth0_vlan: entered promiscuous mode [ 194.611587][ T5910] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 195.731576][ T5910] usb 4-1: Using ep0 maxpacket: 16 [ 195.742394][ T5910] usb 4-1: config 0 has an invalid interface number: 214 but max is 0 [ 195.750618][ T5910] usb 4-1: config 0 has no interface number 0 [ 195.809930][ T5910] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 196.682548][ T7210] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 196.722197][ T7209] hsr0 speed is unknown, defaulting to 1000 [ 196.729738][ T7209] lo speed is unknown, defaulting to 1000 [ 196.821042][ T5910] usb 4-1: string descriptor 0 read error: -71 [ 196.827822][ T5910] usb 4-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 196.840964][ T5910] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.864564][ T5910] usb 4-1: config 0 descriptor?? [ 196.879662][ T5910] usb 4-1: can't set config #0, error -71 [ 196.889483][ T5910] usb 4-1: USB disconnect, device number 12 [ 197.079179][ T7217] loop7: detected capacity change from 0 to 7 [ 197.121722][ T7217] Buffer I/O error on dev loop7, logical block 0, async page read [ 197.137786][ T7217] Buffer I/O error on dev loop7, logical block 0, async page read [ 197.158836][ T7217] Buffer I/O error on dev loop7, logical block 0, async page read [ 197.200012][ T7217] Buffer I/O error on dev loop7, logical block 0, async page read [ 197.221530][ T7217] Buffer I/O error on dev loop7, logical block 0, async page read [ 197.255122][ T7217] Buffer I/O error on dev loop7, logical block 0, async page read [ 197.268909][ T7217] Buffer I/O error on dev loop7, logical block 0, async page read [ 197.307381][ T7217] ldm_validate_partition_table(): Disk read failed. [ 197.323063][ T7217] Buffer I/O error on dev loop7, logical block 0, async page read [ 197.451734][ T7217] Buffer I/O error on dev loop7, logical block 0, async page read [ 197.460317][ T7217] Buffer I/O error on dev loop7, logical block 0, async page read [ 197.470033][ T7217] Dev loop7: unable to read RDB block 0 [ 198.549233][ T7217] loop7: unable to read partition table [ 198.555786][ T7217] loop7: partition table beyond EOD, truncated [ 198.561963][ T7217] loop_reread_partitions: partition scan of loop7 (被x ) failed (rc=-5) [ 199.614052][ T7241] syz.0.350: attempt to access beyond end of device [ 199.614052][ T7241] loop0: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 199.648424][ T7241] hfsplus: unable to find HFS+ superblock [ 199.692497][ T7235] netlink: 84 bytes leftover after parsing attributes in process `syz.1.351'. [ 199.865913][ T7238] netlink: 84 bytes leftover after parsing attributes in process `syz.3.352'. [ 200.786216][ T30] audit: type=1326 audit(1745214097.769:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7246 comm="syz.3.354" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f602178e169 code=0x0 [ 201.641088][ T3078] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 201.661526][ T5869] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 201.801103][ T3078] usb 1-1: Using ep0 maxpacket: 16 [ 201.838804][ T3078] usb 1-1: config 0 has an invalid interface number: 214 but max is 0 [ 201.895738][ T5869] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 201.918642][ T3078] usb 1-1: config 0 has no interface number 0 [ 201.964696][ T3078] usb 1-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 202.015051][ T5869] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 202.094211][ T3078] usb 1-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 202.132871][ T5869] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 202.175859][ T3078] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.267015][ T5869] usb 4-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 202.286354][ T3078] usb 1-1: Product: syz [ 202.337276][ T3078] usb 1-1: Manufacturer: syz [ 202.362101][ T5869] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.384625][ T3078] usb 1-1: SerialNumber: syz [ 202.450574][ T5869] usb 4-1: Product: syz [ 202.513725][ T3078] usb 1-1: config 0 descriptor?? [ 202.541540][ T5869] usb 4-1: Manufacturer: syz [ 202.590289][ T5869] usb 4-1: SerialNumber: syz [ 202.595057][ T7266] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 202.730617][ T5869] usb 4-1: config 0 descriptor?? [ 203.936340][ T3078] usbtouchscreen 1-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 204.117662][ T7271] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 204.809596][ T3078] usb 1-1: USB disconnect, device number 13 [ 205.666557][ T30] audit: type=1400 audit(1745214103.009:365): avc: denied { create } for pid=7284 comm="syz.4.363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 206.751018][ T30] audit: type=1400 audit(1745214103.889:366): avc: denied { connect } for pid=7286 comm="syz.0.364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 206.843736][ T7293] ceph: No mds server is up or the cluster is laggy [ 206.850751][ T5910] libceph: connect (1)[c::]:6789 error -101 [ 206.857184][ T5910] libceph: mon0 (1)[c::]:6789 connect error [ 206.877420][ T30] audit: type=1400 audit(1745214104.209:367): avc: denied { write } for pid=7290 comm="syz.1.365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 207.879026][ T5910] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 208.161068][ T5910] usb 2-1: Using ep0 maxpacket: 8 [ 208.177027][ T5910] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 208.193198][ T5910] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 208.220995][ T5910] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 208.245968][ T5910] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 208.314933][ T5910] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 208.349506][ T5910] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 208.360400][ T7314] syz.4.370: attempt to access beyond end of device [ 208.360400][ T7314] loop4: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 208.375877][ T5910] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.390317][ T7314] hfsplus: unable to find HFS+ superblock [ 208.591601][ T5910] usb 2-1: usb_control_msg returned -32 [ 208.614734][ T5910] usbtmc 2-1:16.0: can't read capabilities [ 208.631800][ T7304] block nbd1: shutting down sockets [ 208.771094][ T5830] Bluetooth: hci4: command 0x0406 tx timeout [ 208.964935][ T30] audit: type=1400 audit(1745214106.399:368): avc: denied { read } for pid=7298 comm="syz.2.366" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 209.518460][ T7324] usbtmc 2-1:16.0: usb_control_msg returned -32 [ 209.547174][ T30] audit: type=1400 audit(1745214106.989:369): avc: denied { accept } for pid=7327 comm="syz.2.374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 209.586519][ T7329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.629617][ T7329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.663665][ T7304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.686688][ T7335] fuse: Unknown parameter 'user_i00000000000000000000' [ 209.747639][ T7304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.218491][ T5910] usb 2-1: USB disconnect, device number 11 [ 210.337672][ T7332] netlink: 84 bytes leftover after parsing attributes in process `syz.0.373'. [ 211.773261][ T7349] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 211.825137][ T3078] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 212.480997][ T3078] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 212.504925][ T3078] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 212.920714][ T30] audit: type=1326 audit(1745214110.019:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7357 comm="syz.3.383" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f602178e169 code=0x0 [ 213.153295][ T3078] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65296, setting to 64 [ 213.348570][ T7352] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 213.709214][ T3078] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 213.914542][ T5869] iguanair 4-1:0.0: failed to get version [ 213.962095][ T5869] iguanair 4-1:0.0: probe with driver iguanair failed with error -110 [ 214.019530][ T3078] usb 5-1: string descriptor 0 read error: -71 [ 214.050936][ T5869] usb 4-1: USB disconnect, device number 13 [ 214.057320][ T3078] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 214.963678][ T7366] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 215.046128][ T3078] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 215.066246][ T7372] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 215.295829][ T3078] usb 5-1: config 0 descriptor?? [ 215.308416][ T3078] usb 5-1: can't set config #0, error -71 [ 215.366877][ T3078] usb 5-1: USB disconnect, device number 12 [ 215.426440][ T7377] fuse: Unknown parameter 'user_i00000000000000000000' [ 215.595835][ T5869] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 216.696936][ T5869] usb 4-1: config 0 has an invalid interface number: 156 but max is 0 [ 216.707987][ T5869] usb 4-1: config 0 has no interface number 0 [ 216.715081][ T5869] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 216.727172][ T5869] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid maxpacket 8960, setting to 1024 [ 216.745847][ T5869] usb 4-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 216.834994][ T5869] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.801401][ T7400] FAULT_INJECTION: forcing a failure. [ 217.801401][ T7400] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 217.814506][ T7400] CPU: 1 UID: 0 PID: 7400 Comm: syz.0.394 Not tainted 6.15.0-rc2-syzkaller-00493-gac71fabf1567 #0 PREEMPT(full) [ 217.814531][ T7400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 217.814540][ T7400] Call Trace: [ 217.814546][ T7400] [ 217.814553][ T7400] dump_stack_lvl+0x16c/0x1f0 [ 217.814586][ T7400] should_fail_ex+0x512/0x640 [ 217.814608][ T7400] _copy_from_user+0x2e/0xd0 [ 217.814628][ T7400] __sys_bpf+0x21d/0x4d80 [ 217.814654][ T7400] ? __pfx___sys_bpf+0x10/0x10 [ 217.814676][ T7400] ? ksys_write+0x190/0x240 [ 217.814696][ T7400] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 217.814734][ T7400] ? fput+0x70/0xf0 [ 217.814753][ T7400] ? ksys_write+0x1b9/0x240 [ 217.814767][ T7400] ? __pfx_ksys_write+0x10/0x10 [ 217.814780][ T7400] ? rcu_is_watching+0x12/0xc0 [ 217.814806][ T7400] __x64_sys_bpf+0x78/0xc0 [ 217.814827][ T7400] ? lockdep_hardirqs_on+0x7c/0x110 [ 217.814848][ T7400] do_syscall_64+0xcd/0x260 [ 217.814873][ T7400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.814889][ T7400] RIP: 0033:0x7f90a818e169 [ 217.814903][ T7400] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 217.814919][ T7400] RSP: 002b:00007f90a8fb9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 217.814935][ T7400] RAX: ffffffffffffffda RBX: 00007f90a83b6160 RCX: 00007f90a818e169 [ 217.814946][ T7400] RDX: 0000000000000050 RSI: 0000200000000100 RDI: 0000000000000000 [ 217.814956][ T7400] RBP: 00007f90a8fb9090 R08: 0000000000000000 R09: 0000000000000000 [ 217.814966][ T7400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 217.814976][ T7400] R13: 0000000000000000 R14: 00007f90a83b6160 R15: 00007ffe387d9578 [ 217.814998][ T7400] [ 218.112409][ T5869] usb 4-1: config 0 descriptor?? [ 218.140961][ T30] audit: type=1400 audit(1745214115.549:371): avc: denied { mounton } for pid=7403 comm="syz.1.396" path="/proc/288/task" dev="proc" ino=14433 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 218.248963][ T5869] usb 4-1: can't set config #0, error -71 [ 218.313695][ T5869] usb 4-1: USB disconnect, device number 14 [ 218.357960][ T30] audit: type=1400 audit(1745214115.789:372): avc: denied { write } for pid=7411 comm="syz.3.399" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 219.267813][ T7412] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 219.363567][ T7418] fuse: Unknown parameter 'user_i00000000000000000000' [ 219.615778][ T30] audit: type=1400 audit(1745214117.059:373): avc: denied { getopt } for pid=7420 comm="syz.2.402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 219.653906][ T7421] netlink: 12 bytes leftover after parsing attributes in process `syz.2.402'. [ 220.086132][ T7434] FAULT_INJECTION: forcing a failure. [ 220.086132][ T7434] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 220.099214][ T7434] CPU: 0 UID: 0 PID: 7434 Comm: syz.1.405 Not tainted 6.15.0-rc2-syzkaller-00493-gac71fabf1567 #0 PREEMPT(full) [ 220.099232][ T7434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 220.099238][ T7434] Call Trace: [ 220.099243][ T7434] [ 220.099247][ T7434] dump_stack_lvl+0x16c/0x1f0 [ 220.099266][ T7434] should_fail_ex+0x512/0x640 [ 220.099280][ T7434] _copy_from_user+0x2e/0xd0 [ 220.099294][ T7434] ucma_write+0x128/0x330 [ 220.099310][ T7434] ? __pfx_ucma_write+0x10/0x10 [ 220.099325][ T7434] ? bpf_lsm_file_permission+0x9/0x10 [ 220.099340][ T7434] ? security_file_permission+0x71/0x210 [ 220.099357][ T7434] ? rw_verify_area+0xcf/0x680 [ 220.099373][ T7434] vfs_write+0x25c/0x1180 [ 220.099388][ T7434] ? __pfx_ucma_write+0x10/0x10 [ 220.099405][ T7434] ? __pfx_vfs_write+0x10/0x10 [ 220.099420][ T7434] ? find_held_lock+0x2b/0x80 [ 220.099434][ T7434] ? __fget_files+0x204/0x3c0 [ 220.099446][ T7434] ? __fget_files+0x20e/0x3c0 [ 220.099458][ T7434] ksys_write+0x205/0x240 [ 220.099468][ T7434] ? __pfx_ksys_write+0x10/0x10 [ 220.099480][ T7434] do_syscall_64+0xcd/0x260 [ 220.099500][ T7434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.099511][ T7434] RIP: 0033:0x7fa1afd8e169 [ 220.099520][ T7434] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 220.099530][ T7434] RSP: 002b:00007fa1b0c19038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 220.099540][ T7434] RAX: ffffffffffffffda RBX: 00007fa1affb5fa0 RCX: 00007fa1afd8e169 [ 220.099547][ T7434] RDX: 0000000000000118 RSI: 0000200000000280 RDI: 0000000000000005 [ 220.099553][ T7434] RBP: 00007fa1b0c19090 R08: 0000000000000000 R09: 0000000000000000 [ 220.099559][ T7434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 220.099564][ T7434] R13: 0000000000000000 R14: 00007fa1affb5fa0 R15: 00007fffa8b27af8 [ 220.099577][ T7434] [ 220.394998][ T7440] FAULT_INJECTION: forcing a failure. [ 220.394998][ T7440] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 220.470060][ T7440] CPU: 0 UID: 0 PID: 7440 Comm: syz.3.406 Not tainted 6.15.0-rc2-syzkaller-00493-gac71fabf1567 #0 PREEMPT(full) [ 220.470081][ T7440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 220.470087][ T7440] Call Trace: [ 220.470091][ T7440] [ 220.470096][ T7440] dump_stack_lvl+0x16c/0x1f0 [ 220.470115][ T7440] should_fail_ex+0x512/0x640 [ 220.470128][ T7440] _copy_from_user+0x2e/0xd0 [ 220.470142][ T7440] __sys_bpf+0x21d/0x4d80 [ 220.470158][ T7440] ? __pfx___sys_bpf+0x10/0x10 [ 220.470172][ T7440] ? ksys_write+0x190/0x240 [ 220.470183][ T7440] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 220.470206][ T7440] ? fput+0x70/0xf0 [ 220.470218][ T7440] ? ksys_write+0x1b9/0x240 [ 220.470226][ T7440] ? __pfx_ksys_write+0x10/0x10 [ 220.470234][ T7440] ? rcu_is_watching+0x12/0xc0 [ 220.470252][ T7440] __x64_sys_bpf+0x78/0xc0 [ 220.470266][ T7440] ? lockdep_hardirqs_on+0x7c/0x110 [ 220.470280][ T7440] do_syscall_64+0xcd/0x260 [ 220.470295][ T7440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.470306][ T7440] RIP: 0033:0x7f602178e169 [ 220.470314][ T7440] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 220.470325][ T7440] RSP: 002b:00007f6022699038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 220.470335][ T7440] RAX: ffffffffffffffda RBX: 00007f60219b5fa0 RCX: 00007f602178e169 [ 220.470342][ T7440] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 220.470347][ T7440] RBP: 00007f6022699090 R08: 0000000000000000 R09: 0000000000000000 [ 220.470353][ T7440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 220.470359][ T7440] R13: 0000000000000000 R14: 00007f60219b5fa0 R15: 00007ffdc73a6fc8 [ 220.470372][ T7440] [ 220.851626][ T7450] fuse: Bad value for 'fd' [ 221.672786][ T30] audit: type=1400 audit(1745214118.309:374): avc: denied { create } for pid=7447 comm="syz.4.409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 221.762120][ T30] audit: type=1400 audit(1745214118.789:375): avc: denied { mount } for pid=7445 comm="syz.0.410" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 221.881588][ T30] audit: type=1400 audit(1745214119.289:376): avc: denied { append } for pid=7458 comm="syz.3.411" name="nbd3" dev="devtmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 221.970429][ T30] audit: type=1400 audit(1745214119.339:377): avc: denied { unmount } for pid=5818 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 222.002030][ T7461] fuse: Unknown parameter 'user_id00000000000000000000' [ 222.111546][ T7465] netlink: 4 bytes leftover after parsing attributes in process `syz.3.411'. [ 222.124481][ T30] audit: type=1400 audit(1745214119.549:378): avc: denied { bind } for pid=7458 comm="syz.3.411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 222.935008][ T7470] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 223.454529][ T30] audit: type=1400 audit(1745214120.579:379): avc: denied { audit_write } for pid=7458 comm="syz.3.411" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 224.419851][ T7476] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 224.600870][ T7482] 9pnet_fd: p9_fd_create_tcp (7482): problem connecting socket to 127.0.0.1 [ 224.731433][ T30] audit: type=1400 audit(1745214122.119:380): avc: denied { write } for pid=7480 comm="syz.3.419" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 225.045537][ T7487] netlink: 'syz.1.420': attribute type 2 has an invalid length. [ 225.083917][ T30] audit: type=1400 audit(1745214122.509:381): avc: denied { setopt } for pid=7485 comm="syz.1.420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 227.106271][ T7512] fuse: Unknown parameter 'user_id00000000000000000000' [ 227.304979][ T7517] netlink: 8 bytes leftover after parsing attributes in process `syz.2.427'. [ 227.334712][ T7517] dccp_xmit_packet: Payload too large (65475) for featneg. [ 227.350108][ T30] audit: type=1400 audit(1745214124.769:382): avc: denied { setopt } for pid=7516 comm="syz.2.427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 227.387729][ T7519] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=128 sclass=netlink_route_socket pid=7519 comm=syz.1.428 [ 227.449235][ T30] audit: type=1400 audit(1745214124.769:383): avc: denied { write } for pid=7516 comm="syz.2.427" laddr=127.0.0.1 lport=57728 faddr=127.0.0.1 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 228.447137][ T30] audit: type=1400 audit(1745214125.869:384): avc: denied { create } for pid=7523 comm="syz.2.429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 228.655115][ T30] audit: type=1400 audit(1745214125.879:385): avc: denied { listen } for pid=7523 comm="syz.2.429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 228.699637][ T30] audit: type=1400 audit(1745214125.879:386): avc: denied { setopt } for pid=7523 comm="syz.2.429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 228.721630][ T30] audit: type=1400 audit(1745214125.889:387): avc: denied { accept } for pid=7523 comm="syz.2.429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 230.002659][ T7551] netlink: 8 bytes leftover after parsing attributes in process `syz.4.436'. [ 230.076328][ T7554] fuse: Unknown parameter 'user_id00000000000000000000' [ 230.167656][ T7556] syz.0.438: attempt to access beyond end of device [ 230.167656][ T7556] loop0: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 230.181407][ T7556] hfsplus: unable to find HFS+ superblock [ 230.189708][ T30] audit: type=1400 audit(1745214127.609:388): avc: denied { read } for pid=7550 comm="syz.4.436" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 230.300471][ T30] audit: type=1400 audit(1745214127.609:389): avc: denied { open } for pid=7550 comm="syz.4.436" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 230.342308][ T7558] syz.1.439: attempt to access beyond end of device [ 230.342308][ T7558] loop1: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 230.356658][ T7558] hfsplus: unable to find HFS+ superblock [ 230.562131][ T30] audit: type=1400 audit(1745214127.979:390): avc: denied { ioctl } for pid=7568 comm="syz.1.444" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 230.611010][ T24] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 230.687441][ T7578] SET target dimension over the limit! [ 230.703473][ T30] audit: type=1400 audit(1745214128.149:391): avc: denied { write } for pid=7576 comm="syz.1.446" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 230.734126][ T30] audit: type=1400 audit(1745214128.169:392): avc: denied { ioctl } for pid=7576 comm="syz.1.446" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9371 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 230.831965][ T24] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 230.847269][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.902866][ T5910] libceph: connect (1)[c::]:6789 error -101 [ 230.924525][ T5910] libceph: mon0 (1)[c::]:6789 connect error [ 231.009425][ T24] usb 3-1: config 0 descriptor?? [ 231.146198][ T24] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 231.231999][ T5910] libceph: connect (1)[c::]:6789 error -101 [ 231.240153][ T5910] libceph: mon0 (1)[c::]:6789 connect error [ 231.312921][ T24] gp8psk: usb in 128 operation failed. [ 231.431549][ T7590] FAULT_INJECTION: forcing a failure. [ 231.431549][ T7590] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 231.465015][ T7590] CPU: 1 UID: 0 PID: 7590 Comm: syz.0.449 Not tainted 6.15.0-rc2-syzkaller-00493-gac71fabf1567 #0 PREEMPT(full) [ 231.465034][ T7590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 231.465040][ T7590] Call Trace: [ 231.465044][ T7590] [ 231.465049][ T7590] dump_stack_lvl+0x16c/0x1f0 [ 231.465069][ T7590] should_fail_ex+0x512/0x640 [ 231.465084][ T7590] _copy_from_user+0x2e/0xd0 [ 231.465098][ T7590] copy_msghdr_from_user+0x98/0x160 [ 231.465115][ T7590] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 231.465134][ T7590] ___sys_sendmsg+0xfe/0x1d0 [ 231.465147][ T7590] ? __pfx____sys_sendmsg+0x10/0x10 [ 231.465176][ T7590] __sys_sendmsg+0x16d/0x220 [ 231.465189][ T7590] ? __pfx___sys_sendmsg+0x10/0x10 [ 231.465206][ T7590] ? rcu_is_watching+0x12/0xc0 [ 231.465223][ T7590] do_syscall_64+0xcd/0x260 [ 231.465243][ T7590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.465254][ T7590] RIP: 0033:0x7f90a818e169 [ 231.465263][ T7590] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 231.465274][ T7590] RSP: 002b:00007f90a8ffb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 231.465285][ T7590] RAX: ffffffffffffffda RBX: 00007f90a83b5fa0 RCX: 00007f90a818e169 [ 231.465292][ T7590] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000008 [ 231.465298][ T7590] RBP: 00007f90a8ffb090 R08: 0000000000000000 R09: 0000000000000000 [ 231.465303][ T7590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 231.465309][ T7590] R13: 0000000000000000 R14: 00007f90a83b5fa0 R15: 00007ffe387d9578 [ 231.465322][ T7590] [ 231.640130][ T24] gp8psk: usb in 146 operation failed. [ 231.645708][ T24] gp8psk: failed to get FW version [ 231.653853][ T24] gp8psk: usb in 149 operation failed. [ 231.659340][ T24] gp8psk: failed to get FPGA version [ 231.677008][ T7580] ceph: No mds server is up or the cluster is laggy [ 231.762115][ T7594] fuse: Bad value for 'fd' [ 231.861730][ T7598] syz.0.452: attempt to access beyond end of device [ 231.861730][ T7598] loop0: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 231.888357][ T7598] hfsplus: unable to find HFS+ superblock [ 231.890365][ T30] audit: type=1400 audit(1745214129.319:393): avc: denied { read write } for pid=7559 comm="syz.2.440" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 231.912768][ T3078] hid-generic 00A0:0008:0003.0002: unknown main item tag 0x0 [ 231.956277][ T30] audit: type=1400 audit(1745214129.319:394): avc: denied { open } for pid=7559 comm="syz.2.440" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 231.982603][ T3078] hid-generic 00A0:0008:0003.0002: unknown main item tag 0x0 [ 231.990079][ T3078] hid-generic 00A0:0008:0003.0002: unknown main item tag 0x0 [ 232.029864][ T3078] hid-generic 00A0:0008:0003.0002: unknown main item tag 0x0 [ 232.056065][ T3078] hid-generic 00A0:0008:0003.0002: unknown main item tag 0x4 [ 232.085640][ T3078] hid-generic 00A0:0008:0003.0002: unknown main item tag 0x0 [ 232.136133][ T3078] hid-generic 00A0:0008:0003.0002: unknown main item tag 0x0 [ 232.146507][ T6666] Bluetooth: hci5: Frame reassembly failed (-90) [ 232.286289][ T3078] hid-generic 00A0:0008:0003.0002: unknown main item tag 0x0 [ 232.335900][ T3078] hid-generic 00A0:0008:0003.0002: unknown main item tag 0x0 [ 232.593479][ T24] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 233.487359][ T24] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 233.951281][ T3078] hid-generic 00A0:0008:0003.0002: unknown main item tag 0x2 [ 233.960205][ T3078] hid-generic 00A0:0008:0003.0002: unknown main item tag 0x0 [ 234.130998][ T5833] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 234.191594][ T3078] hid-generic 00A0:0008:0003.0002: hidraw0: HID v0.05 Device [syz1] on syz0 [ 234.240362][ T5902] usb 3-1: USB disconnect, device number 6 [ 234.285562][ T6597] Bluetooth: hci5: Frame reassembly failed (-84) [ 235.396179][ T30] audit: type=1326 audit(1745214132.609:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7623 comm="syz.3.460" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f602178e169 code=0x0 [ 235.591904][ T7631] fuse: Bad value for 'fd' [ 235.698572][ T7633] xt_CT: You must specify a L4 protocol and not use inversions on it [ 236.431165][ T5830] Bluetooth: hci5: command 0x1003 tx timeout [ 236.458376][ T5833] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 237.062511][ T7635] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 237.619163][ T13] Bluetooth: hci5: Frame reassembly failed (-90) [ 239.651110][ T5830] Bluetooth: hci5: command 0x1003 tx timeout [ 239.658637][ T5833] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 239.677773][ T7646] netlink: 84 bytes leftover after parsing attributes in process `syz.4.468'. [ 241.390563][ T7652] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 242.060026][ T7666] netlink: 56 bytes leftover after parsing attributes in process `syz.0.472'. [ 242.069085][ T7666] netlink: 12 bytes leftover after parsing attributes in process `syz.0.472'. [ 242.078036][ T7666] netlink: 31 bytes leftover after parsing attributes in process `syz.0.472'. [ 242.102591][ T7666] netlink: 'syz.0.472': attribute type 3 has an invalid length. [ 242.116430][ T7669] netlink: 8 bytes leftover after parsing attributes in process `syz.1.473'. [ 242.121108][ T7666] netlink: 'syz.0.472': attribute type 2 has an invalid length. [ 242.135507][ T7666] netlink: 31 bytes leftover after parsing attributes in process `syz.0.472'. [ 242.335276][ T7666] netlink: 120 bytes leftover after parsing attributes in process `syz.0.472'. [ 243.294867][ T7671] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 244.136795][ T7679] hsr0 speed is unknown, defaulting to 1000 [ 244.178290][ T30] audit: type=1400 audit(1745214141.619:396): avc: denied { ioctl } for pid=7678 comm="syz.0.477" path="socket:[15000]" dev="sockfs" ino=15000 ioctlcmd=0x89e7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 244.519474][ T30] audit: type=1400 audit(1745214141.959:397): avc: denied { module_request } for pid=7675 comm="syz.4.476" kmod="net-pf-10-proto-7" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 244.562597][ T7679] lo speed is unknown, defaulting to 1000 [ 244.573746][ T7689] netlink: 6 bytes leftover after parsing attributes in process `syz.2.479'. [ 244.788173][ T30] audit: type=1400 audit(1745214141.959:398): avc: denied { prog_load } for pid=7678 comm="syz.0.477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 244.842138][ T30] audit: type=1400 audit(1745214141.959:399): avc: denied { bpf } for pid=7678 comm="syz.0.477" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 245.090512][ T30] audit: type=1400 audit(1745214141.989:400): avc: denied { create } for pid=7688 comm="syz.2.479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 245.208004][ T30] audit: type=1400 audit(1745214141.999:401): avc: denied { write } for pid=7688 comm="syz.2.479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 245.235946][ T30] audit: type=1400 audit(1745214142.019:402): avc: denied { read } for pid=7688 comm="syz.2.479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 245.279806][ T30] audit: type=1400 audit(1745214142.019:403): avc: denied { read } for pid=5178 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 245.321050][ T12] Bluetooth: hci5: Frame reassembly failed (-90) [ 245.321481][ T30] audit: type=1400 audit(1745214142.019:404): avc: denied { search } for pid=5178 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 246.377891][ T30] audit: type=1400 audit(1745214142.019:405): avc: denied { append } for pid=5178 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 247.024280][ T7711] fuse: Unknown parameter '0x0000000000000003' [ 247.331133][ T5833] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 249.198843][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 249.198858][ T30] audit: type=1400 audit(1745214146.639:464): avc: denied { setopt } for pid=7735 comm="syz.1.494" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 249.304112][ T30] audit: type=1400 audit(1745214146.749:465): avc: denied { create } for pid=7737 comm="syz.0.496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 249.336476][ T30] audit: type=1400 audit(1745214146.769:466): avc: denied { allowed } for pid=7737 comm="syz.0.496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 249.346336][ T7742] fuse: Unknown parameter '0x0000000000000003' [ 249.357181][ T30] audit: type=1400 audit(1745214146.769:467): avc: denied { ioctl } for pid=7737 comm="syz.0.496" path="/dev/input/event2" dev="devtmpfs" ino=926 ioctlcmd=0x4503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 249.392994][ T3078] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 249.395108][ T30] audit: type=1400 audit(1745214146.769:468): avc: denied { read } for pid=7737 comm="syz.0.496" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 249.465732][ T30] audit: type=1400 audit(1745214146.769:469): avc: denied { open } for pid=7737 comm="syz.0.496" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 249.495164][ T30] audit: type=1400 audit(1745214146.869:470): avc: denied { ioctl } for pid=7737 comm="syz.0.496" path="socket:[15844]" dev="sockfs" ino=15844 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 249.610980][ T3078] usb 5-1: Using ep0 maxpacket: 32 [ 249.625588][ T3078] usb 5-1: config 0 has an invalid interface number: 89 but max is 0 [ 249.743141][ T3078] usb 5-1: config 0 has no interface number 0 [ 249.791788][ T3078] usb 5-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 249.841055][ T3078] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.861070][ T3078] usb 5-1: Product: syz [ 249.865270][ T3078] usb 5-1: Manufacturer: syz [ 249.881057][ T3078] usb 5-1: SerialNumber: syz [ 249.888849][ T3078] usb 5-1: config 0 descriptor?? [ 249.895017][ T30] audit: type=1400 audit(1745214147.339:471): avc: denied { create } for pid=7750 comm="syz.1.500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 249.900350][ T7751] netlink: 12 bytes leftover after parsing attributes in process `syz.1.500'. [ 249.915866][ T3078] hub 5-1:0.89: bad descriptor, ignoring hub [ 249.931599][ T30] audit: type=1400 audit(1745214147.339:472): avc: denied { connect } for pid=7750 comm="syz.1.500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 249.945686][ T7751] netlink: 12 bytes leftover after parsing attributes in process `syz.1.500'. [ 249.951497][ T3078] hub 5-1:0.89: probe with driver hub failed with error -5 [ 249.974304][ T3078] option 5-1:0.89: GSM modem (1-port) converter detected [ 249.988032][ T3078] usb 5-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 250.231225][ T5867] usb 4-1: new low-speed USB device number 15 using dummy_hcd [ 250.404852][ T5867] usb 4-1: too many endpoints for config 0 interface 0 altsetting 7: 254, using maximum allowed: 30 [ 250.452971][ T5867] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 250.579064][ T5867] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid maxpacket 512, setting to 8 [ 250.732353][ T5867] usb 4-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 250.874501][ T5867] usb 4-1: config 0 interface 0 has no altsetting 0 [ 250.921234][ T3078] usb 5-1: USB disconnect, device number 13 [ 250.933226][ T30] audit: type=1400 audit(1745214148.359:473): avc: denied { listen } for pid=7757 comm="syz.0.503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 250.975717][ T5867] usb 4-1: New USB device found, idVendor=046d, idProduct=c227, bcdDevice= 0.00 [ 252.019248][ T7757] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 252.131016][ T5833] Bluetooth: hci5: command 0x1003 tx timeout [ 252.150484][ T5830] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 252.418341][ T3078] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 252.664175][ T5867] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.681913][ T3078] option 5-1:0.89: device disconnected [ 252.693090][ T5867] usb 4-1: config 0 descriptor?? [ 252.699485][ T7753] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 253.391397][ T5867] lg-g15 0003:046D:C227.0003: unknown main item tag 0x0 [ 253.561353][ T7762] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 253.908030][ T5867] lg-g15 0003:046D:C227.0003: unknown main item tag 0x0 [ 254.206307][ T5867] lg-g15 0003:046D:C227.0003: hidraw0: USB HID v0.00 Device [HID 046d:c227] on usb-dummy_hcd.3-1/input0 [ 254.321267][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 254.321285][ T30] audit: type=1400 audit(1745214151.759:485): avc: denied { write } for pid=7767 comm="syz.1.506" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 255.059835][ T7771] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 255.332821][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.651096][ T30] audit: type=1400 audit(1745214151.759:486): avc: denied { create } for pid=7767 comm="syz.1.506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 255.678109][ T30] audit: type=1400 audit(1745214151.759:487): avc: denied { bind } for pid=7767 comm="syz.1.506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 255.720413][ T30] audit: type=1400 audit(1745214151.759:488): avc: denied { write } for pid=7767 comm="syz.1.506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 255.739581][ C1] vkms_vblank_simulate: vblank timer overrun [ 255.867566][ T30] audit: type=1400 audit(1745214153.309:489): avc: denied { read write } for pid=7779 comm="syz.4.509" name="sg0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 255.891456][ C1] vkms_vblank_simulate: vblank timer overrun [ 255.910153][ T3078] usb 4-1: USB disconnect, device number 15 [ 255.959452][ T30] audit: type=1400 audit(1745214153.309:490): avc: denied { open } for pid=7779 comm="syz.4.509" path="/dev/sg0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 256.062923][ T30] audit: type=1400 audit(1745214153.309:491): avc: denied { sys_module } for pid=7777 comm="syz.1.510" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 256.088122][ T30] audit: type=1400 audit(1745214153.449:492): avc: denied { bind } for pid=7782 comm="syz.0.508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 256.088166][ T30] audit: type=1326 audit(1745214153.489:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7779 comm="syz.4.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97b618e169 code=0x7ffc0000 [ 256.088202][ T30] audit: type=1326 audit(1745214153.489:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7779 comm="syz.4.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97b618e169 code=0x7ffc0000 [ 256.533872][ T7795] xt_CT: You must specify a L4 protocol and not use inversions on it [ 257.287943][ T7813] netlink: 20 bytes leftover after parsing attributes in process `syz.1.516'. [ 257.422793][ T7813] netlink: 20 bytes leftover after parsing attributes in process `syz.1.516'. [ 258.050988][ T5830] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 258.508654][ T7814] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 259.421307][ T24] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 260.019740][ T7817] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 260.723914][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.735252][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 260.750964][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 260.775376][ T24] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 260.786552][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.825874][ T24] usb 1-1: config 0 descriptor?? [ 261.153999][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 261.154030][ T30] audit: type=1400 audit(1745214158.479:518): avc: denied { sqpoll } for pid=7831 comm="syz.4.523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 261.421143][ T30] audit: type=1400 audit(1745214158.479:519): avc: denied { bind } for pid=7831 comm="syz.4.523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 261.707613][ T30] audit: type=1400 audit(1745214158.589:520): avc: denied { read write } for pid=7831 comm="syz.4.523" name="video6" dev="devtmpfs" ino=938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 262.038108][ T7824] netlink: 12 bytes leftover after parsing attributes in process `syz.0.520'. [ 262.077337][ T30] audit: type=1400 audit(1745214158.589:521): avc: denied { open } for pid=7831 comm="syz.4.523" path="/dev/video6" dev="devtmpfs" ino=938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 262.131424][ T30] audit: type=1400 audit(1745214159.149:522): avc: denied { create } for pid=7834 comm="syz.1.524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 262.201824][ T24] usbhid 1-1:0.0: can't add hid device: -71 [ 262.225344][ T24] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 262.239839][ T30] audit: type=1400 audit(1745214159.679:523): avc: denied { mounton } for pid=7841 comm="syz.2.525" path="/108/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 262.278007][ T24] usb 1-1: USB disconnect, device number 14 [ 262.281016][ T4190] Bluetooth: hci5: Frame reassembly failed (-90) [ 262.651091][ T30] audit: type=1400 audit(1745214159.699:524): avc: denied { ioctl } for pid=7846 comm="syz.1.528" path="/dev/video3" dev="devtmpfs" ino=934 ioctlcmd=0x5608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 262.689409][ T7851] ALSA: mixer_oss: invalid OSS volume 'LiNE1' [ 262.696323][ T7851] ALSA: mixer_oss: invalid OSS volume 'P}V`-;kZQo(v^.' [ 262.798339][ T30] audit: type=1400 audit(1745214160.129:525): avc: denied { ioctl } for pid=7850 comm="syz.4.529" path="socket:[16551]" dev="sockfs" ino=16551 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 262.823270][ T30] audit: type=1400 audit(1745214160.129:526): avc: denied { setopt } for pid=7850 comm="syz.4.529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 262.844068][ T30] audit: type=1400 audit(1745214160.179:527): avc: denied { write } for pid=7850 comm="syz.4.529" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 263.172032][ T24] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 263.208409][ T7866] netlink: 56 bytes leftover after parsing attributes in process `syz.2.532'. [ 263.218128][ T7866] netlink: 12 bytes leftover after parsing attributes in process `syz.2.532'. [ 263.227365][ T7866] netlink: 31 bytes leftover after parsing attributes in process `syz.2.532'. [ 263.236335][ T7866] netlink: 'syz.2.532': attribute type 3 has an invalid length. [ 263.245836][ T7866] netlink: 'syz.2.532': attribute type 2 has an invalid length. [ 263.253534][ T7866] netlink: 31 bytes leftover after parsing attributes in process `syz.2.532'. [ 263.264662][ T7866] netlink: 120 bytes leftover after parsing attributes in process `syz.2.532'. [ 263.322325][ T24] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 263.337574][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.348908][ T24] usb 4-1: config 0 descriptor?? [ 263.356395][ T24] cp210x 4-1:0.0: cp210x converter detected [ 263.573659][ T10] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 263.693990][ T7872] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 263.700895][ T7872] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 263.731153][ T7877] netlink: 24 bytes leftover after parsing attributes in process `syz.0.534'. [ 263.755997][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 263.761517][ T24] cp210x 4-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 263.774497][ T7872] vhci_hcd vhci_hcd.0: Device attached [ 263.804050][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 263.820548][ T10] usb 5-1: config 1 interface 0 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 64 [ 263.839222][ T24] usb 4-1: cp210x converter now attached to ttyUSB0 [ 263.840572][ T10] usb 5-1: config 1 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 263.935470][ T10] usb 5-1: config 1 interface 0 has no altsetting 0 [ 264.021001][ T3078] usb 37-1: new high-speed USB device number 2 using vhci_hcd [ 264.773744][ T7878] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 264.863511][ T5833] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 264.869982][ T5830] Bluetooth: hci5: command 0x1003 tx timeout [ 264.878678][ T5822] usb 4-1: USB disconnect, device number 16 [ 265.029988][ T10] usb 5-1: string descriptor 0 read error: -22 [ 265.037060][ T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 265.067980][ T5822] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 265.083609][ T7874] vhci_hcd: connection reset by peer [ 265.090930][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.104760][ T4190] vhci_hcd: stop threads [ 265.109530][ T4190] vhci_hcd: release socket [ 265.137694][ T5822] cp210x 4-1:0.0: device disconnected [ 265.139435][ T4190] vhci_hcd: disconnect device [ 265.185643][ T7862] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 265.193464][ T7883] netlink: 124 bytes leftover after parsing attributes in process `syz.1.536'. [ 265.905834][ T7862] netlink: 'syz.4.530': attribute type 10 has an invalid length. [ 266.090493][ T7893] netlink: 8 bytes leftover after parsing attributes in process `syz.0.539'. [ 266.462784][ T7862] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 266.490219][ T7861] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 266.500229][ T7896] netlink: 124 bytes leftover after parsing attributes in process `syz.1.540'. [ 266.522951][ T24] usb 5-1: USB disconnect, device number 14 [ 266.626186][ T7899] fuse: Unknown parameter 'fd0x0000000000000003' [ 267.589840][ T7900] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 267.759074][ T7904] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7904 comm=syz.0.543 [ 267.947392][ T13] Bluetooth: hci5: Frame reassembly failed (-90) [ 269.980972][ T3078] vhci_hcd: vhci_device speed not set [ 269.986838][ T5833] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 270.906236][ T7913] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 270.983510][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 270.983526][ T30] audit: type=1400 audit(1745214168.429:555): avc: denied { accept } for pid=7912 comm="syz.0.548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 271.039909][ T30] audit: type=1400 audit(1745214168.459:556): avc: denied { read } for pid=7911 comm="syz.2.547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 271.081024][ T30] audit: type=1400 audit(1745214168.509:557): avc: denied { setopt } for pid=7911 comm="syz.2.547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 271.099921][ T7923] hsr0 speed is unknown, defaulting to 1000 [ 271.250851][ T7924] netlink: 32 bytes leftover after parsing attributes in process `syz.3.550'. [ 271.268259][ T30] audit: type=1400 audit(1745214168.689:558): avc: denied { create } for pid=7922 comm="syz.3.550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 271.287618][ T30] audit: type=1400 audit(1745214168.689:559): avc: denied { getopt } for pid=7922 comm="syz.3.550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 271.310119][ T7923] lo speed is unknown, defaulting to 1000 [ 272.733765][ T7939] fuse: Unknown parameter 'fd0x0000000000000003' [ 272.745601][ T30] audit: type=1400 audit(1745214170.179:560): avc: denied { create } for pid=7940 comm="syz.4.554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 273.500216][ T30] audit: type=1400 audit(1745214170.179:561): avc: denied { setopt } for pid=7940 comm="syz.4.554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 273.621352][ T30] audit: type=1400 audit(1745214170.269:562): avc: denied { write } for pid=7942 comm="syz.4.557" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 273.642474][ C0] vkms_vblank_simulate: vblank timer overrun [ 273.648648][ T30] audit: type=1400 audit(1745214170.319:563): avc: denied { read } for pid=7942 comm="syz.4.557" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 273.670738][ T30] audit: type=1326 audit(1745214171.119:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7946 comm="syz.2.556" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb2cd18e169 code=0x0 [ 273.693430][ C0] vkms_vblank_simulate: vblank timer overrun [ 273.744258][ T7951] syz.0.559: attempt to access beyond end of device [ 273.744258][ T7951] loop0: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 273.757572][ T7951] hfsplus: unable to find HFS+ superblock [ 273.896567][ T7958] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 273.899447][ T7955] SELinux: ebitmap: truncated map [ 274.005327][ T7955] SELinux: failed to load policy [ 275.364860][ T7973] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 276.364268][ T7988] fuse: Unknown parameter 'fd0x0000000000000003' [ 276.452999][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 276.453015][ T30] audit: type=1400 audit(1745214173.899:573): avc: denied { create } for pid=7989 comm="syz.3.571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 276.622774][ T7992] syz.2.572: attempt to access beyond end of device [ 276.622774][ T7992] loop2: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 276.671416][ T7992] hfsplus: unable to find HFS+ superblock [ 277.156440][ T30] audit: type=1400 audit(1745214174.599:574): avc: denied { write } for pid=7989 comm="syz.3.571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 277.344673][ T30] audit: type=1400 audit(1745214174.749:575): avc: denied { create } for pid=7996 comm="syz.2.574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 277.431819][ T10] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 277.448042][ T8006] netlink: 'syz.2.574': attribute type 4 has an invalid length. [ 277.653370][ T30] audit: type=1400 audit(1745214174.909:576): avc: denied { block_suspend } for pid=8009 comm="syz.4.579" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 278.040935][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 278.068586][ T10] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 278.089776][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 278.105029][ T10] usb 2-1: config 0 has no interface number 0 [ 278.114550][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 278.131440][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.139915][ T10] usb 2-1: Product: syz [ 278.146502][ T10] usb 2-1: Manufacturer: syz [ 278.151968][ T10] usb 2-1: SerialNumber: syz [ 278.159391][ T10] usb 2-1: config 0 descriptor?? [ 278.180247][ T10] usb 2-1: Found UVC 0.00 device syz (046d:08f3) [ 278.198198][ T10] usb 2-1: No valid video chain found. [ 278.385065][ T5902] usb 2-1: USB disconnect, device number 12 [ 279.250808][ T8019] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 281.223917][ T30] audit: type=1400 audit(1745214178.671:577): avc: denied { setattr } for pid=8039 comm="syz.4.587" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 281.261162][ T3078] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 281.421198][ T3078] usb 4-1: Using ep0 maxpacket: 16 [ 281.436623][ T3078] usb 4-1: config 0 has an invalid interface number: 214 but max is 0 [ 281.610836][ T3078] usb 4-1: config 0 has no interface number 0 [ 281.707898][ T3078] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 281.863081][ T3078] usb 4-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 281.872256][ T3078] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.884488][ T3078] usb 4-1: Product: syz [ 281.888743][ T3078] usb 4-1: Manufacturer: syz [ 281.893730][ T3078] usb 4-1: SerialNumber: syz [ 281.927215][ T3078] usb 4-1: config 0 descriptor?? [ 282.153073][ T30] audit: type=1326 audit(1745214179.511:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8049 comm="syz.0.589" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f90a818e169 code=0x0 [ 282.954333][ T8053] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 283.473129][ T8060] netlink: 4 bytes leftover after parsing attributes in process `syz.2.592'. [ 283.628818][ T8060] bridge_slave_1: left allmulticast mode [ 283.643532][ T8060] bridge_slave_1: left promiscuous mode [ 283.650114][ T8060] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.476437][ T3078] usbtouchscreen 4-1:0.214: Failed to read FW rev: -32 [ 284.483631][ T3078] usbtouchscreen 4-1:0.214: probe with driver usbtouchscreen failed with error -32 [ 284.526352][ T8060] bridge_slave_0: left allmulticast mode [ 284.536259][ T8060] bridge_slave_0: left promiscuous mode [ 284.546024][ T8060] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.548553][ T30] audit: type=1400 audit(1745214181.981:579): avc: denied { connect } for pid=8056 comm="syz.2.592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 285.373575][ T5902] usb 4-1: USB disconnect, device number 17 [ 286.149129][ T30] audit: type=1400 audit(1745214183.591:580): avc: denied { setopt } for pid=8072 comm="syz.4.593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 286.233262][ T8073] can0: slcan on ttyprintk. [ 286.258813][ T30] audit: type=1400 audit(1745214183.681:581): avc: denied { read } for pid=5490 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 286.314306][ T30] audit: type=1400 audit(1745214183.701:582): avc: denied { watch watch_reads } for pid=8072 comm="syz.4.593" path="/128" dev="tmpfs" ino=763 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 286.468605][ T30] audit: type=1400 audit(1745214183.701:583): avc: denied { write } for pid=8072 comm="syz.4.593" path="socket:[17592]" dev="sockfs" ino=17592 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 286.492996][ T30] audit: type=1400 audit(1745214183.731:584): avc: denied { connect } for pid=8072 comm="syz.4.593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 286.513051][ T30] audit: type=1400 audit(1745214183.741:585): avc: denied { search } for pid=5490 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 286.531564][ T8072] can0 (unregistered): slcan off ttyprintk. [ 286.534475][ T5902] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 286.976970][ T30] audit: type=1400 audit(1745214183.741:586): avc: denied { read } for pid=5490 comm="dhcpcd" name="n100" dev="tmpfs" ino=4157 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 287.008175][ T30] audit: type=1400 audit(1745214183.741:587): avc: denied { open } for pid=5490 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=4157 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 287.321451][ T5902] usb 4-1: Using ep0 maxpacket: 8 [ 287.393270][ T5902] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 287.401708][ T5902] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 287.413575][ T5902] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 287.449732][ T5902] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 287.490960][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 287.490975][ T30] audit: type=1400 audit(1745214184.931:592): avc: denied { create } for pid=8093 comm="syz.1.599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 287.545992][ T5902] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 287.577704][ T5902] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 287.742032][ T30] audit: type=1400 audit(1745214184.931:593): avc: denied { write } for pid=8093 comm="syz.1.599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 287.761274][ T5902] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.770418][ T30] audit: type=1400 audit(1745214184.931:594): avc: denied { open } for pid=8093 comm="syz.1.599" path="/dev/ttyq6" dev="devtmpfs" ino=381 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 287.801455][ T30] audit: type=1400 audit(1745214184.961:595): avc: denied { ioctl } for pid=8093 comm="syz.1.599" path="socket:[17615]" dev="sockfs" ino=17615 ioctlcmd=0x6100 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 288.228337][ T30] audit: type=1400 audit(1745214184.991:596): avc: denied { ioctl } for pid=8095 comm="syz.0.600" path="/dev/sg0" dev="devtmpfs" ino=737 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 288.259905][ T5902] usb 4-1: usb_control_msg returned -32 [ 288.269718][ T5902] usbtmc 4-1:16.0: can't read capabilities [ 288.373731][ T30] audit: type=1400 audit(1745214185.811:597): avc: denied { write } for pid=8084 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1707 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 288.602535][ T30] audit: type=1400 audit(1745214185.811:598): avc: denied { add_name } for pid=8084 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 288.916426][ T8127] netlink: 20 bytes leftover after parsing attributes in process `syz.4.607'. [ 288.926684][ T8127] netlink: 40 bytes leftover after parsing attributes in process `syz.4.607'. [ 291.182052][ T5867] usb 4-1: USB disconnect, device number 18 [ 291.417942][ T30] audit: type=1400 audit(1745214185.811:599): avc: denied { create } for pid=8084 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 291.442118][ T30] audit: type=1400 audit(1745214185.811:600): avc: denied { write } for pid=8084 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.can0.link" dev="tmpfs" ino=4185 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 291.471806][ T30] audit: type=1400 audit(1745214185.811:601): avc: denied { append } for pid=8084 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" dev="tmpfs" ino=4185 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 292.056409][ T8136] fuse: Unknown parameter '!f ' [ 293.781278][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 293.781294][ T30] audit: type=1400 audit(1745214190.431:610): avc: denied { create } for pid=8143 comm="syz.1.612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 293.809770][ T30] audit: type=1400 audit(1745214190.431:611): avc: denied { getopt } for pid=8143 comm="syz.1.612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 294.311086][ T30] audit: type=1326 audit(1745214191.711:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8158 comm="syz.3.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f602178e169 code=0x7ffc0000 [ 294.428518][ T30] audit: type=1326 audit(1745214191.711:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8158 comm="syz.3.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f602178e169 code=0x7ffc0000 [ 294.538654][ T30] audit: type=1326 audit(1745214191.721:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8158 comm="syz.3.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f602178e169 code=0x7ffc0000 [ 294.606384][ T30] audit: type=1326 audit(1745214191.721:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8158 comm="syz.3.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f602178e169 code=0x7ffc0000 [ 294.669497][ T5830] Bluetooth: hci1: unexpected event for opcode 0x2035 [ 294.690019][ T30] audit: type=1326 audit(1745214191.721:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8158 comm="syz.3.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f602178e169 code=0x7ffc0000 [ 294.713434][ T30] audit: type=1326 audit(1745214191.721:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8158 comm="syz.3.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7f602178e169 code=0x7ffc0000 [ 294.766254][ T30] audit: type=1326 audit(1745214191.721:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8158 comm="syz.3.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f602178e169 code=0x7ffc0000 [ 294.813475][ T30] audit: type=1326 audit(1745214191.721:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8158 comm="syz.3.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f602178e169 code=0x7ffc0000 [ 294.991197][ T3078] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 295.025790][ T8186] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 295.032328][ T8186] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 295.050669][ T8186] vhci_hcd vhci_hcd.0: Device attached [ 295.175519][ T3078] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 295.185984][ T3078] usb 5-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 295.220991][ T9] vhci_hcd: vhci_device speed not set [ 295.240207][ T3078] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 295.276450][ T3078] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.293353][ T9] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 295.432571][ T3078] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 295.451047][ T3078] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 295.497419][ T5811] udevd[5811]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 295.643488][ T8182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.665373][ T8182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.889702][ T8187] vhci_hcd: connection reset by peer [ 295.897195][ T53] vhci_hcd: stop threads [ 295.902748][ T53] vhci_hcd: release socket [ 295.908029][ T53] vhci_hcd: disconnect device [ 298.127666][ T10] IPVS: starting estimator thread 0... [ 298.251196][ T8219] IPVS: using max 77 ests per chain, 184800 per kthread [ 298.277305][ T10] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 298.412725][ T3078] usb 5-1: USB disconnect, device number 15 [ 298.559107][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 298.582941][ T10] usb 4-1: config 0 has an invalid interface number: 214 but max is 0 [ 298.591339][ T10] usb 4-1: config 0 has no interface number 0 [ 298.603024][ T10] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 298.626854][ T10] usb 4-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 298.647653][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.779566][ T5830] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 298.789075][ T5830] Bluetooth: hci1: Injecting HCI hardware error event [ 298.801087][ T5830] Bluetooth: hci1: hardware error 0x00 [ 298.812046][ T10] usb 4-1: Product: syz [ 298.816429][ T10] usb 4-1: Manufacturer: syz [ 298.821296][ T10] usb 4-1: SerialNumber: syz [ 298.888797][ T10] usb 4-1: config 0 descriptor?? [ 299.135887][ T10] usbtouchscreen 4-1:0.214: Failed to read FW rev: -32 [ 299.337368][ T10] usbtouchscreen 4-1:0.214: probe with driver usbtouchscreen failed with error -32 [ 300.300446][ T8244] netlink: 'syz.2.635': attribute type 3 has an invalid length. [ 300.313649][ T8246] netlink: 56 bytes leftover after parsing attributes in process `syz.4.636'. [ 300.346845][ T8246] netlink: 12 bytes leftover after parsing attributes in process `syz.4.636'. [ 300.355834][ T8246] netlink: 31 bytes leftover after parsing attributes in process `syz.4.636'. [ 300.364830][ T8246] netlink: 'syz.4.636': attribute type 3 has an invalid length. [ 300.373119][ T8246] netlink: 'syz.4.636': attribute type 2 has an invalid length. [ 300.384227][ T8246] netlink: 31 bytes leftover after parsing attributes in process `syz.4.636'. [ 300.489706][ T8241] page: refcount:3 mapcount:0 mapping:ffff888023ef41f8 index:0x2 pfn:0x1214e [ 300.498697][ T8241] memcg:ffff888058e42000 [ 300.503073][ T8241] aops:def_blk_aops ino:fa00000 [ 300.507946][ T8241] flags: 0xfff6800000003d(locked|referenced|uptodate|dirty|lru|node=0|zone=1|lastcpupid=0x7ff) [ 300.518628][ T8241] raw: 00fff6800000003d ffffea00004853c8 ffffea000146d008 ffff888023ef41f8 [ 300.527510][ T8241] raw: 0000000000000002 0000000000000000 00000003ffffffff ffff888058e42000 [ 300.536162][ T8241] page dumped because: VM_BUG_ON_FOLIO(!folio_contains(folio, index)) [ 300.544357][ T8241] page_owner tracks the page as allocated [ 300.550075][ T8241] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 8240, tgid 8240 (syz.0.632), ts 300324990028, free_ts 300231365604 [ 300.570738][ T8241] post_alloc_hook+0x181/0x1b0 [ 300.576011][ T8241] get_page_from_freelist+0x135c/0x3920 [ 300.581699][ T8241] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 300.587612][ T8241] alloc_pages_mpol+0x1fb/0x550 [ 300.592488][ T8241] folio_alloc_noprof+0x20/0x2d0 [ 300.597428][ T8241] filemap_alloc_folio_noprof+0x3a1/0x470 [ 300.603182][ T8241] page_cache_ra_order+0x4c0/0xd00 [ 300.608293][ T8241] filemap_fault+0x147c/0x2740 [ 300.613161][ T8241] __do_fault+0x10a/0x490 [ 300.617759][ T8241] do_pte_missing+0x1a6/0x3fb0 [ 300.622774][ T8241] __handle_mm_fault+0x103d/0x2a40 [ 300.627906][ T8241] handle_mm_fault+0x3fe/0xad0 [ 300.632689][ T8241] do_user_addr_fault+0x60c/0x1370 [ 300.637818][ T8241] exc_page_fault+0x5c/0xc0 [ 300.642336][ T8241] asm_exc_page_fault+0x26/0x30 [ 300.647192][ T8241] page last free pid 6118 tgid 6118 stack trace: [ 300.653522][ T8241] __free_frozen_pages+0x69d/0xff0 [ 300.658638][ T8241] qlist_free_all+0x4e/0x120 [ 300.663263][ T8241] kasan_quarantine_reduce+0x195/0x1e0 [ 300.668723][ T8241] __kasan_slab_alloc+0x69/0x90 [ 300.673583][ T8241] kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 300.679048][ T8241] getname_flags.part.0+0x4c/0x550 [ 300.684196][ T8241] getname_flags+0x93/0xf0 [ 300.688612][ T8241] do_sys_openat2+0xb8/0x1d0 [ 300.693214][ T8241] __x64_sys_openat+0x174/0x210 [ 300.698068][ T8241] do_syscall_64+0xcd/0x260 [ 300.702584][ T8241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.708542][ T8241] ------------[ cut here ]------------ [ 300.714010][ T8241] kernel BUG at mm/filemap.c:3433! [ 300.719410][ T8241] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 300.725807][ T8241] CPU: 0 UID: 0 PID: 8241 Comm: syz.0.632 Not tainted 6.15.0-rc2-syzkaller-00493-gac71fabf1567 #0 PREEMPT(full) [ 300.737665][ T8241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 300.747694][ T8241] RIP: 0010:filemap_fault+0x1862/0x2740 [ 300.753219][ T8241] Code: 00 e9 bf ec ff ff 48 8b 7c 24 28 e8 98 48 2d 00 e9 66 f3 ff ff e8 1e cd c7 ff 48 c7 c6 40 ee 98 8b 48 89 df e8 2f 94 10 00 90 <0f> 0b e8 07 cd c7 ff 48 c7 c6 a0 e4 98 8b 48 89 df e8 18 94 10 00 [ 300.772803][ T8241] RSP: 0018:ffffc90003647510 EFLAGS: 00010246 [ 300.778858][ T8241] RAX: 0000000000080000 RBX: ffffea0000485380 RCX: ffffc90004e11000 [ 300.786804][ T8241] RDX: 0000000000080000 RSI: ffffffff81f382e1 RDI: ffff88806acd2884 [ 300.794761][ T8241] RBP: ffffc900036477e0 R08: 0000000000000001 R09: 0000000000000001 [ 300.802718][ T8241] R10: ffffffff90864917 R11: 1ffffffff1c79489 R12: ffff888023ef41f8 [ 300.810660][ T8241] R13: 0000000000000001 R14: 0000000000000001 R15: 0000000000000000 [ 300.818604][ T8241] FS: 00007f90a8ffb6c0(0000) GS:ffff8881249b2000(0000) knlGS:0000000000000000 [ 300.827522][ T8241] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 300.834082][ T8241] CR2: 0000200000001911 CR3: 00000000573cc000 CR4: 00000000003526f0 [ 300.842029][ T8241] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 300.849989][ T8241] DR3: 000000000000000c DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 300.857933][ T8241] Call Trace: [ 300.861194][ T8241] [ 300.864107][ T8241] ? __pfx_filemap_fault+0x10/0x10 [ 300.869210][ T8241] __do_fault+0x10a/0x490 [ 300.873526][ T8241] do_pte_missing+0x1031/0x3fb0 [ 300.878355][ T8241] ? __handle_mm_fault+0x1010/0x2a40 [ 300.883621][ T8241] __handle_mm_fault+0x103d/0x2a40 [ 300.888727][ T8241] ? __pfx___handle_mm_fault+0x10/0x10 [ 300.894172][ T8241] ? find_vma+0xbf/0x140 [ 300.898390][ T8241] ? __pfx_find_vma+0x10/0x10 [ 300.903056][ T8241] handle_mm_fault+0x3fe/0xad0 [ 300.907821][ T8241] do_user_addr_fault+0x7a6/0x1370 [ 300.912908][ T8241] ? rcu_is_watching+0x12/0xc0 [ 300.917649][ T8241] exc_page_fault+0x5c/0xc0 [ 300.922134][ T8241] asm_exc_page_fault+0x26/0x30 [ 300.926974][ T8241] RIP: 0010:rep_movs_alternative+0xf/0x90 [ 300.932682][ T8241] Code: c4 10 c3 cc cc cc cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 66 [ 300.952264][ T8241] RSP: 0018:ffffc90003647a78 EFLAGS: 00050202 [ 300.958329][ T8241] RAX: 0000000000000001 RBX: 0000200000001911 RCX: 0000000000000001 [ 300.966284][ T8241] RDX: ffffed100fec6ccb RSI: 0000200000001911 RDI: ffff88807f636651 [ 300.974229][ T8241] RBP: 0000000000000001 R08: 0000000000000001 R09: ffffed100fec6cca [ 300.982174][ T8241] R10: ffff88807f636651 R11: 0000000000000000 R12: 0000000000000000 [ 300.990118][ T8241] R13: ffff88807f636651 R14: dffffc0000000000 R15: 0000200000001911 [ 300.998082][ T8241] _copy_from_user+0x98/0xd0 [ 301.002666][ T8241] snd_rawmidi_kernel_write1+0x50a/0x8a0 [ 301.008295][ T8241] snd_rawmidi_write+0x26e/0xc10 [ 301.013205][ T8241] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 301.018653][ T8241] ? avc_policy_seqno+0x9/0x20 [ 301.023388][ T8241] ? selinux_file_permission+0x11f/0x580 [ 301.029005][ T8241] ? __pfx_default_wake_function+0x10/0x10 [ 301.034793][ T8241] ? bpf_lsm_file_permission+0x9/0x10 [ 301.040160][ T8241] ? security_file_permission+0x71/0x210 [ 301.045776][ T8241] ? rw_verify_area+0xcf/0x680 [ 301.050524][ T8241] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 301.055965][ T8241] vfs_writev+0x6c4/0xdc0 [ 301.060283][ T8241] ? __pfx_vfs_writev+0x10/0x10 [ 301.065113][ T8241] ? kmem_cache_free+0x2d4/0x4d0 [ 301.070030][ T8241] ? __fget_files+0x20e/0x3c0 [ 301.074682][ T8241] ? do_writev+0x295/0x330 [ 301.079074][ T8241] do_writev+0x295/0x330 [ 301.083295][ T8241] ? __pfx_do_writev+0x10/0x10 [ 301.088036][ T8241] ? rcu_is_watching+0x12/0xc0 [ 301.092778][ T8241] do_syscall_64+0xcd/0x260 [ 301.097260][ T8241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.103137][ T8241] RIP: 0033:0x7f90a818e169 [ 301.107529][ T8241] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 301.127119][ T8241] RSP: 002b:00007f90a8ffb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 301.135520][ T8241] RAX: ffffffffffffffda RBX: 00007f90a83b5fa0 RCX: 00007f90a818e169 [ 301.143466][ T8241] RDX: 0000000000000002 RSI: 0000200000000840 RDI: 0000000000000006 [ 301.151410][ T8241] RBP: 00007f90a8210a68 R08: 0000000000000000 R09: 0000000000000000 [ 301.159365][ T8241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 301.167310][ T8241] R13: 0000000000000000 R14: 00007f90a83b5fa0 R15: 00007ffe387d9578 [ 301.175270][ T8241] [ 301.178262][ T8241] Modules linked in: [ 301.182167][ C0] vkms_vblank_simulate: vblank timer overrun [ 301.190305][ T8241] ---[ end trace 0000000000000000 ]--- [ 301.196265][ T8241] RIP: 0010:filemap_fault+0x1862/0x2740 [ 301.201861][ T8241] Code: 00 e9 bf ec ff ff 48 8b 7c 24 28 e8 98 48 2d 00 e9 66 f3 ff ff e8 1e cd c7 ff 48 c7 c6 40 ee 98 8b 48 89 df e8 2f 94 10 00 90 <0f> 0b e8 07 cd c7 ff 48 c7 c6 a0 e4 98 8b 48 89 df e8 18 94 10 00 [ 301.221524][ T8241] RSP: 0018:ffffc90003647510 EFLAGS: 00010246 [ 301.227606][ T8241] RAX: 0000000000080000 RBX: ffffea0000485380 RCX: ffffc90004e11000 [ 301.235758][ T8241] RDX: 0000000000080000 RSI: ffffffff81f382e1 RDI: ffff88806acd2884 [ 301.243923][ T8241] RBP: ffffc900036477e0 R08: 0000000000000001 R09: 0000000000000001 [ 301.251904][ T8241] R10: ffffffff90864917 R11: 1ffffffff1c79489 R12: ffff888023ef41f8 [ 301.259889][ T8241] R13: 0000000000000001 R14: 0000000000000001 R15: 0000000000000000 [ 301.267915][ T8241] FS: 00007f90a8ffb6c0(0000) GS:ffff8881249b2000(0000) knlGS:0000000000000000 [ 301.276898][ T8241] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 301.283500][ T8241] CR2: 0000200000001911 CR3: 00000000573cc000 CR4: 00000000003526f0 [ 301.291503][ T8241] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 301.299475][ T8241] DR3: 000000000000000c DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 301.307476][ T8241] Kernel panic - not syncing: Fatal exception [ 301.313746][ T8241] Kernel Offset: disabled [ 301.318044][ T8241] Rebooting in 86400 seconds..