last executing test programs: 8.989494985s ago: executing program 2 (id=321): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x6) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f00000010c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000c80)="93bffce623851797a8dc79018d7716840ffc6946a067f6d345b18bc896d8f016f5f206bb2b0eb2fe32d2f0048678cd35ef833c35225ff95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb688db8aee2963a9a5c8b454270e3c084fd5232dd1e17566d440d9f479034f26806b25dcfc18c50ee6f365a1bd150cc423678f1ef69b0667c83d4ff77606fa2419a623de490ccf13b8e517b86ec867b9a8aef91ab13bfed96b1de8ac45fc2c5616665e00f6778bfbe71ac4b64342a98bb0234e03f78e546662f807b2ed652abdd0a45cc882ef7fcebba66cf3e75506d6c969632e0988518b9593346c9a6c8076751b053be0345b0d14a9f162a5dff0fb68c8e7df1a1bddbdb06c7183765a791437f5da3994750711f8797dc575fae592e1654adb2434b37b874ad1ac4aa6a50a384e601e3756b08ae220a4cf026ec168e60dc61f86eae68e5529a77ced1208dba91a88b770", 0x194}, {&(0x7f00000007c0)="02999344565d9c61d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e432bcb0330483c0604aaf296d8218e240055cb92f17b1b47fd7b1b178ca0d1c470154ed985a179f87c9bc402189195e92dc1d73fce0d96439a53073df328509806e9", 0x7c}, {&(0x7f00000002c0)="ec75d081fcb7e79634ec1a1abfdebb6a38b0c57cc77b83d2eea81aad8f73b36abc2019cb08fcaaec9647a07d0a0965f0f1e39afd84e7e2523aaded5e09aa1e36fcc90c269ad6d38d57619127cee4253655c33b71054226c3b00b9ee6ae29f0b07bc6fe79", 0x64}, {&(0x7f0000000f00)="397d5f2e855cb2b0b1e61d3fe47dc3e798cf47cfebf169e77257f308b498e5b417227094d569a4456954e58ea1850000000000000000355c5f42d9f2aa", 0x3d}, {&(0x7f0000000480)="3b98c053d6287182fb77fa2573c0175eac0342191cae67c6aab799113bf6df72d6bae38ad4d70cf4923614c77b93f41a8de623711dbfe9124532ef0a290a9801ffac63d114b63603306210bd0ee6922a71edb08dc4d93aab9c40b4839e5cbaf0c4d28a016f64b1f07bdfba8f695191bd5d838b4395e9bbc0cab1184676af212a79208290e0a4e5de", 0x88}], 0x5}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000840)="3f1c4a04940ee0b20aec8b4090986a3bff84255d40657e7ee0d40a25584e869ef417cfb843df9bab6a733f72f13c385945fbe4f6592503b0013edc972aa7f382cfe6f924e9b3058c5dc3a39af5f6868c9031d7f0fba663fed16b868a4e53436b1be7a082f826014791", 0x69}, {&(0x7f00000008c0)="ab802595e16402267afad4132bae032aeebc5d3df8873915f385de7623fdcdbb497d2913cabe2bd146dee84fdcbeaa251db4f747090dc6c625ed3b915aae8dda1394c0d541055b3e89cab518a94118fb170c1d73", 0x54}, {&(0x7f0000000940)="2c5e42e310fe2f095389d5264f44036f83f52415194225b1d75664af0bb8c7db4032895089bf7ed9c49da28ec002a2250c905af982041e9c842ea9dab20db6473e1556aca64e9c40548f5b0381db15e028b2a4f9983a447bb0aacb1b0267c1f54c88d99ea07b387d4be282d5d56e7acb15ebce07ad8846bcbbb754e3cee15d0455ceb58e34bd0c398ab501a6044e76a0569297449768bcba1cfc884267", 0x9d}, {&(0x7f0000000b80)="5e93f51c80552080613760264b6008795ee1e8b68965025b8a5b43529d3a64b1947ab79563d895ac06f8e1df8ce3befc5707528570ed617ff1c87305dad0d4", 0x3f}], 0x4}}], 0x3, 0xc0) 8.853557937s ago: executing program 2 (id=322): r0 = syz_usb_connect(0x2, 0x52, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bd3619204433f0224def010203010902400001020000000904"], 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e20, @empty}}, 0x6, 0x5, 0x0, 0xf, 0x36, 0x7, 0x5}, &(0x7f00000005c0)=0x9b) mmap(&(0x7f00000c2000/0x3000)=nil, 0x3000, 0x1000000, 0x40150, r1, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000540)={0x14, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 8.352407552s ago: executing program 0 (id=324): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010102, @local}, {{0x4001, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x0, 0x1, 0x0, 0x0, {[@md5sig={0x13, 0x12, "473ecfe039a1f617fd02722e3486ebd9"}]}}}}}}}, 0x0) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4f3, 0x755, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000340)={0x2c, &(0x7f0000000080)={0x0, 0x6, 0x31, {0x31, 0x11, "46ff4490d70a1e0ab42eff40f3c390ebf8df59b57888860b96fafa197e1fa4e3f7e94737998fa188cd3339ca29552e"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r2, 0x6, 0x6, 0x0, &(0x7f0000000500)) r3 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) ioctl$HIDIOCGRDESC(r3, 0x90044802, &(0x7f0000000a00)) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44003}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 7.800311161s ago: executing program 1 (id=328): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, 0x0, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000500)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f00000004c0)=0x5}) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r5, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x24008010) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r6, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000540)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x59, &(0x7f0000000600)=[{}], 0x8, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0xa2, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002800)={0x94, 0x0, 0x1, 0x401, 0x0, 0xfff5, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x14, 0x2, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x8094}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1f, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3f}, {0x85, 0x0, 0x0, 0x4}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0xa}}, 0x26}}, 0x0) 7.145486008s ago: executing program 4 (id=329): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, &(0x7f0000000040)=0x54) socket$l2tp6(0xa, 0x2, 0x73) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x3000) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000300)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="0031d3"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r2, 0x800452d3, &(0x7f0000000100)) 6.858146248s ago: executing program 1 (id=331): r0 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x800, 0xb8) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00000000010000080000000c2c0000000000ef3f", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYRESDEC=r0, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000240000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x37) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f0000000000)='exfat\x00', 0x8000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000680)={0x0}, 0x1, 0x0, 0x0, 0x4081}, 0xc0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1b00000000000000000000000000800004000000", @ANYRES16=r1, @ANYBLOB="00e79e000000f2ffffffffffffe50000", @ANYRESDEC=r5, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = dup(0xffffffffffffffff) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) write$binfmt_misc(r6, &(0x7f0000000600)="12495e31d0cc874e71aa6258187aa3f056dacdfd8d14c1997d2129b97e8047f10962e16c4e625f24425b8c8b96b0c8e433908df578f8967b70f77dc1df65ea2ce208d820fcd89af0e3940b745af286caeb0943f1fdc81e98d4171a9af0d764b6a1f1cc0a8e123930ec93767c88b4", 0x6e) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_submit(0x0, 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r6, 0x40383d03, &(0x7f00000004c0)={{0x162771e3, 0xc}, {0x4, 0x7}, 0x8}) write$rfkill(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x1, 0x3, 0x1}, 0x8) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="03010000"], 0xc8) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r7}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="180000003c000701fcffffff00000000027cb3315d79ebca"], 0x18}, 0x1, 0x0, 0x0, 0x88c4}, 0x0) syz_io_uring_setup(0x7e9c, &(0x7f0000000140)={0x0, 0x10c4, 0x20, 0x4000, 0x580000}, &(0x7f0000000240)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) pselect6(0x40, &(0x7f00000000c0)={0x200, 0x5, 0x2, 0x7, 0x864, 0xfffffffffffffff9, 0x7, 0x2}, &(0x7f0000000200)={0x200, 0x50000, 0x2, 0x5, 0x3, 0x4, 0xffff, 0x5df9}, &(0x7f0000000400)={0x2, 0x1ff, 0x3, 0x1000, 0x9ef8, 0x3e, 0x7f5, 0x4764a590}, &(0x7f0000000440), &(0x7f00000005c0)={&(0x7f0000000480)={[0x1]}, 0x8}) 5.728653581s ago: executing program 0 (id=334): setxattr$security_ima(&(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0xa, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f7f"], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xff010000) 5.257356591s ago: executing program 1 (id=335): setrlimit(0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r1, r3}, 0x10) bpf$ITER_CREATE(0x22, &(0x7f0000000040)={r4}, 0x8) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x2000) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r7, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102393, 0x18ff9}], 0x1, 0x0, 0x0) syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003489c5240fd0b1100629591c10102030510000000011000283c093d88385b6952d01a0905080040000510914d07010905d573bc843c03f0"], &(0x7f0000003080)={0x0, 0x0, 0x0, 0x0}) signalfd(r6, &(0x7f0000000080)={[0xe861]}, 0x8) 4.803858518s ago: executing program 3 (id=337): r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) copy_file_range(r0, 0x0, r1, 0x0, 0x401, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, "2dbe0000000000e0f7d6a4ae6dddebd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b58c66ee677df701905bbaafab4afbaf755a3f6a004", "cba3d627780820d1cbf7db00000000aa37a0ef8da65697e4298d1e02dce0eb8c6b105d9600fdff0000000000438ea359866cfe1a00", "be1d0000ae9ef30bea2a004000010000000000008000", [0x800]}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) prlimit64(0x0, 0xe, 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x38) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) r3 = syz_open_procfs(0x0, &(0x7f0000000680)='mountinfo\x00') lseek(r3, 0x10001, 0x0) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000600)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast2}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) r5 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r5, 0xc0505510, &(0x7f0000000140)={0x4, 0x9, 0x2, 0x10000, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]}) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) 4.730692147s ago: executing program 0 (id=338): getdents64(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) dup2(r0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12, 0xffffffffffffffff, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x1, {{0x1, 0x2}, 0x4}}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000180)="1556c17e90c002b8e846b10e72f4b4aa570e7425677931a7e28b566b610790cb2ac88fe78e199c36440c2acbf5e65be45a7e97e97026dd279132ee509edd0531a6a67318ed686b0bd0ecbf232b4e865794d7ae5dd81ffca108aa231bbca484f9b2ecf859e6b212e8cbd9f016fc0d3d26559858134204444936098cb50ec18931dc951e965a3b0ed5b5c8a42b8f641dc22d78eac39cddd40017db5f974fea78e97495bf3bfe9c85a2135f7eee4e87d077c8d88c5f9bd8b2aa845d340f63b50c3120e5ce3afd92b68545f37a653879ae70377cd27c9e96243ca5722d2dba162acbda512d3b699d561b8ad63f856b9de16c32", 0xf1}], 0x1, 0x0, 0x0, 0x20008000}, 0x20000010) mbind(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x8002, &(0x7f0000000300)=0xffffffffffffffff, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_clone(0x900a000, 0x0, 0x0, 0x0, 0x0, 0x0) 3.746108781s ago: executing program 0 (id=339): socket$netlink(0x10, 0x3, 0x8000000004) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x10) r0 = socket$inet(0x2, 0x6, 0x7f) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x8, 0x3, 0x9, 0x1}]}) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 3.681235481s ago: executing program 3 (id=340): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d40)={&(0x7f00000009c0)='sched_switch\x00', r5}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040), 0x4) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r6 = dup(r1) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000001000010002000000000000009b770000", @ANYRES32=0x0, @ANYBLOB="0000000780140400080004000006000008001b0000000000"], 0x30}, 0x1, 0x0, 0x0, 0x5}, 0x0) 3.553361711s ago: executing program 4 (id=341): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r0}, 0x10) (async) connect$unix(0xffffffffffffffff, 0x0, 0x0) (async) openat(0xffffffffffffffff, 0x0, 0x828101, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@mpls_newroute={0x24, 0x18, 0x100, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_TTL_PROPAGATE={0x5, 0x1a, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4009}, 0x4040054) (async, rerun: 32) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (rerun: 32) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xc0001, 0x0) waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x8, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) r6 = syz_io_uring_setup(0x1a2e, &(0x7f00000002c0)={0x0, 0x4533, 0x10100, 0x0, 0x0, 0x0, r5}, &(0x7f00000000c0)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r6, 0x2ded, 0x4000, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000003c0)={0x0, 0x8, 0xfa00, {0x0, 0x0}}, 0x20) (async) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) (async) r9 = syz_open_dev$tty20(0xc, 0x4, 0x0) readv(r9, &(0x7f0000000080)=[{&(0x7f0000000140)=""/135, 0x87}], 0x1) (async, rerun: 64) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x15) (async, rerun: 64) ioctl$TCSETS(r3, 0x40384708, &(0x7f0000000040)={0x8, 0x1, 0x9, 0x800, 0x1a, "3eccd25569e20900"}) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r10}, 0x10) (async) close(r2) 3.009364026s ago: executing program 2 (id=342): socket$pppl2tp(0x18, 0x1, 0x1) socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) syz_open_dev$dri(&(0x7f00000000c0), 0x328d, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x5e21, @local}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) r2 = socket$inet(0x2, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) r4 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r4, 0x6b, 0x3, &(0x7f0000000240), 0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000780)={0x4, 0x395e, 0x3, {0x1, @sdr={0x3031334d, 0xdd17}}, 0x6}) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_UNMAP(r8, 0x3b86, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r8, 0x3b85, &(0x7f0000000380)={0x28, 0x7, 0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000}) sendmmsg(r3, &(0x7f0000000440)=[{{&(0x7f0000000700)=@tipc=@name={0x1e, 0x2, 0x3, {{0x1, 0x3}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000600)="e7ace7eff182dee7b5efda7afea5", 0xe}], 0x1}}], 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) 2.539162754s ago: executing program 2 (id=343): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e22, 0x1, @mcast2, 0x6}}, 0x3, 0x9}, 0x90) setsockopt(r0, 0x84, 0x81, &(0x7f0000000440)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000280)={0x0, 0x3}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000100)="b8", 0x1, 0x4008010, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) close(0xffffffffffffffff) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES32], 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x78, r2, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x38, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xf8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xf3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}]}, 0x78}, 0x1, 0x0, 0x0, 0x60004000}, 0x41) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0}, 0x20) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) 2.538783601s ago: executing program 3 (id=344): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={{0x14, 0x10, 0x1, 0x0, 0xf5}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd4}}, 0x0) 2.454207647s ago: executing program 4 (id=345): r0 = mq_open(&(0x7f00005a1ffb)='eth0\x04', 0x42, 0x0, 0x0) mq_notify(r0, &(0x7f0000000280)={0x0, 0xd, 0x0, @thr={0x0, &(0x7f0000000400)}}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$rtc(&(0x7f0000000080), 0x0, 0x9800) ioctl$RTC_AIE_ON(r1, 0x7001) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@map=r2, 0x2e, 0x0, 0x0, &(0x7f0000000000)=[0x0], 0x1, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) ioctl$RTC_AIE_OFF(r1, 0x7002) 2.409506926s ago: executing program 3 (id=346): capset(&(0x7f0000000100)={0x19980330}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="8500001f08000000760000000000000127000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3f) 2.331670875s ago: executing program 2 (id=347): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = io_uring_setup(0x4822, &(0x7f0000000180)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='debugfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x1c5) lseek(r3, 0x0, 0x1) r4 = accept4(r2, 0x0, 0x0, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f00000010c0)=0xffff) close_range(r1, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="84020000100001042cbd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="7b130000018000003c0012800b00010062726964676500002c00028008001b00e709000008001b00ff03001005002c0005000000050016000000000008001a"], 0x284}}, 0x20000844) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.310331927s ago: executing program 4 (id=348): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, &(0x7f0000000300)={0xc, r2}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000100)={0x28, 0x4, r2, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@o_path={&(0x7f0000000000)='./file1\x00', 0x0, 0x4010, r5}, 0x14) r6 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r6, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) ioctl$IOMMU_VFIO_SET_IOMMU(r1, 0x3b66, 0x1) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r1, 0x3b72, &(0x7f0000000440)=ANY=[@ANYBLOB="1800007f000000000020"]) close_range(r0, 0xffffffffffffffff, 0x0) 2.228020242s ago: executing program 3 (id=349): bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f0000000200)=""/88) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) socket$inet(0x2, 0x2, 0x0) unshare(0x20000400) pselect6(0x517, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x700, 0xfefdffffffffffff}, &(0x7f0000000240)={0x0, 0x989680}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xc, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x9, 0x8, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r3}, 0x0, &(0x7f0000000100)=r2}, 0x20) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) mq_open(0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x80000000001}) r6 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000000)='/', 0x1, 0xfffffffffffffffe) r7 = add_key$user(0x0, &(0x7f0000000440), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r6, r7}, &(0x7f0000000480)=""/237, 0xed, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2.165303242s ago: executing program 1 (id=350): bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$packet(0x11, 0x3, 0x300) r0 = epoll_create1(0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000001c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f00000001c0)={0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="2021cd000000cd0b7f0c274e1fa96eb96a944c541ad3bf9a1b66ede4aa27884f9d3e4eb0ebaa329a9131ccd5a9b50c933d476485cb09bec60b7879f11dd00458d4035aaade3a4aafd7d5bb16d5af449c95e538316fe98837c82789566d9dd7d9f2d21f477c9074252b5aae4b69fccde938cf8f7a8328051188c774aaad8536d12fde01ae69cb44b90db9961c1de0dff3e5c7bcd90ffac3b9a5392dffc91a3a9c6fab66d833515b9d1a66c74877c41181fc1f2f086704128f40e7b5404ab7"], 0x0}, 0x0) epoll_create1(0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x5450, &(0x7f0000000180)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000000f08000140000000140900010073797a30000000000900020073797a3200000000"], 0x78}}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r7, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x1000000, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878396}, 0x9c) 945.96125ms ago: executing program 0 (id=351): r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(0xffffffffffffffff, 0xa3d, 0x0, 0x0, 0x0, 0xff39) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) r2 = socket$pppoe(0x18, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0) connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x1, @multicast, 'ip6gre0\x00'}}, 0x1e) socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg(r2, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010027bd7000fddbdf253400000008000300", @ANYRES32=r7, @ANYBLOB="14005500"], 0x5c}, 0x1, 0x0, 0x0, 0x40090}, 0x2002) 605.913141ms ago: executing program 4 (id=352): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x3ffffffffffffffd, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000041c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f0000006280)="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", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2000000020, 0xfffffffffffffffd, 0x80000000000, 0x0, 0x10, 0x4, 0x0, 0x8000, 0x2, r4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r2, &(0x7f0000000380)={0x50, 0x0, r3, {0x7, 0x27, 0x0, 0x300000, 0x66d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x50) r6 = getuid() r7 = fspick(r1, &(0x7f00000001c0)='./file0\x00', 0x1) fcntl$lock(r7, 0x5, &(0x7f0000000240)={0x1, 0x1, 0x1, 0x10000, r5}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) write$FUSE_ATTR(r1, &(0x7f0000000100)={0x78, 0x0, r3, {0x0, 0x0, 0x0, {0x6, 0x55, 0x5, 0x9, 0xc, 0x81, 0x5, 0x10001, 0x43be, 0x1000, 0x3, r6, r8, 0x7d3}}}, 0x78) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000200)) 109.458778ms ago: executing program 1 (id=353): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x111, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback, 0x5}, {0xa, 0x4e22, 0x0, @mcast2, 0xfdfffffc}, 0xffffffffffffffff, 0xfffffffc}}, 0x48) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f00000001c0)={0x12, 0x10, 0xfa00, {&(0x7f0000000080), 0xffffffffffffffff, r0}}, 0x18) 109.170787ms ago: executing program 4 (id=354): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r1, 0x3) r2 = socket$inet_dccp(0x2, 0x6, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400200142603600e122f00160006000500a8000600200006400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdfb8951f215ce3bbce81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92782f9ffcdb020e6f3baf26d57a000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) connect$inet(r2, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r4 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000007940), 0x55, 0x30, 0x0) sendmsg$AUDIT_USER_AVC(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="1000060053ffff0029bd7000ffdbdf25e6b25165264b5c20f7407e49ed2d591e9c8274c155c38c6634a65c41d5eee93498711829e07487ba1102"], 0x10}, 0x1, 0x0, 0x0, 0x40800}, 0x4001) close(r4) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r0) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r5, 0x1, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x40) 105.039068ms ago: executing program 3 (id=355): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x18) symlinkat(&(0x7f0000000000)='.\x00', r3, &(0x7f0000000040)='./file0\x00') openat2(r3, &(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x8}, 0x18) write$tun(0xffffffffffffffff, 0x0, 0xfdef) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000c, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$MRT_FLUSH(r4, 0x0, 0xd0, &(0x7f0000000000)=0x9, 0x4) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r6, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r8}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0, r8, 0x6b3}, 0xc) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000040)=0x20075a) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) 52.837685ms ago: executing program 2 (id=356): r0 = socket(0x1, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast1}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', r4, 0x0, 0x0, 0x0, 0x1, 0x0, @dev, @dev, 0x0, 0x0, 0x3}}) 20.552678ms ago: executing program 0 (id=357): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000100)}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'vcan0\x00', 0x0}) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x9, [@var={0xa, 0x0, 0x0, 0xe, 0x5, 0x2}, @float={0xa, 0x0, 0x0, 0x10, 0x2}, @typedef={0x5, 0x0, 0x0, 0x8, 0x1}, @fwd={0x2}]}, {0x0, [0x5f, 0x2e, 0x1e, 0x2e, 0x0, 0x5f, 0x61]}}, &(0x7f0000000540)=""/176, 0x55, 0xb0, 0x1, 0x6, 0x0, @void, @value}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0x20, &(0x7f0000000780)={&(0x7f00000006c0)=""/84, 0x54, 0x0, &(0x7f0000000740)=""/20, 0x14}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x14, 0x7, &(0x7f0000000800)=ANY=[@ANYRESDEC=r1, @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], &(0x7f0000001080)='syzkaller\x00', 0x3, 0xf6, &(0x7f0000000880)=""/246, 0x41100, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000980)={0x2, 0x0, 0x0, 0x8001}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, &(0x7f00000009c0)=[0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000a00)=[{0x3, 0x4, 0x0, 0x5}, {0x4, 0x4, 0x2, 0x9}, {0x4, 0x2, 0xc, 0x7}], 0x10, 0x6, @void, @value}, 0x94) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000b00), 0x400, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000c00)={{0x1, 0xffffffffffffffff}, &(0x7f0000000b80), &(0x7f0000000bc0)='%+9llu \x00'}, 0x20) r7 = creat(&(0x7f0000000c40)='./file0\x00', 0xc0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000c80)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x2, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000ec0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="000000009a0c11558577ee3731795c25ff5f29450000008d00"/34, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000006000000000000ed32414b8a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x10, &(0x7f0000000fc0)=ANY=[@ANYBLOB="481808000000000000000000bf7200000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000000009500000000000000a520f8ff01000000bf9800000000000056080000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000e80)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x11, 0x16, &(0x7f00000010c0)=@raw=[@call={0x85, 0x0, 0x0, 0xbc}, @call={0x85, 0x0, 0x0, 0x7}, @generic={0xe, 0x8, 0xb, 0x3, 0x8001}, @alu={0x7, 0x0, 0xb, 0x9cf75ba8ba7d3312, 0xb, 0x20, 0xffffffffffffffff}, @tail_call, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffa}}], &(0x7f00000002c0)='syzkaller\x00', 0x933, 0x97, &(0x7f0000000300)=""/151, 0x41100, 0xc, '\x00', r1, @fallback=0x21, r2, 0x8, &(0x7f0000000640)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x4, 0x6, 0x96a}, 0x10, r3, r4, 0x4, &(0x7f0000000d40)=[r5, r6, r7, 0x1, r8, 0x1, r9, r10], &(0x7f0000000d80)=[{0x3, 0x5, 0x4, 0x4}, {0x3, 0x2, 0xe, 0x9}, {0x2, 0x1, 0xc, 0xa}, {0x3, 0x4, 0xc, 0x8}], 0x10, 0x8, @void, @value}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) eventfd(0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) r11 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup(r12) getsockname$packet(r13, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="ec0000001000010800"/20, @ANYRES32=r14, @ANYBLOB="0b00000000000000cc001a8018000a80"], 0xec}}, 0x0) 0s ago: executing program 1 (id=358): timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x74) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x7, 0x2261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = userfaultfd(0x80801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000002, 0x80031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000600)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r5) r6 = userfaultfd(0x80801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_UNREGISTER(r5, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d80)={{r3, 0xffffffffffffffff}, &(0x7f0000000d00), &(0x7f0000000d40)='%+9llu \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000009c0)={{r7, 0xffffffffffffffff}, &(0x7f00000008c0), &(0x7f0000000980)='%pB \x00'}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000a40)={r8, &(0x7f0000000dc0), 0x0}, 0x20) sendmmsg$unix(r0, &(0x7f0000000b00)=[{{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0x1}], 0x1}}], 0x1, 0x0) kernel console output (not intermixed with test programs): t tclass=filesystem permissive=1 [ 57.682784][ T5809] cgroup: Unknown subsys name 'cpuset' [ 57.690392][ T5809] cgroup: Unknown subsys name 'rlimit' [ 57.815010][ T30] audit: type=1400 audit(1744299041.059:91): avc: denied { setattr } for pid=5809 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 57.838700][ T30] audit: type=1400 audit(1744299041.059:92): avc: denied { create } for pid=5809 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 57.860539][ T30] audit: type=1400 audit(1744299041.059:93): avc: denied { write } for pid=5809 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 57.881133][ T30] audit: type=1400 audit(1744299041.059:94): avc: denied { read } for pid=5809 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 57.901592][ T30] audit: type=1400 audit(1744299041.089:95): avc: denied { mounton } for pid=5809 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 57.927264][ T30] audit: type=1400 audit(1744299041.089:96): avc: denied { mount } for pid=5809 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 57.950597][ T30] audit: type=1400 audit(1744299041.109:97): avc: denied { read } for pid=5491 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 57.972963][ T5812] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 58.824105][ T5809] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 62.488526][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 62.496461][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 62.504595][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 62.512987][ T5836] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 62.520502][ T5836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 62.528748][ T5839] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 62.538151][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 62.540225][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 62.545904][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 62.560224][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 62.565511][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 62.569166][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 62.575201][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 62.582104][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 62.589428][ T5838] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 62.595069][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 62.603221][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 62.618941][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 62.626713][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 62.634537][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 62.634572][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 62.645834][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 62.645845][ T30] audit: type=1400 audit(1744299045.889:107): avc: denied { read } for pid=5822 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 62.660332][ T5836] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 62.683160][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 62.699531][ T30] audit: type=1400 audit(1744299045.919:108): avc: denied { open } for pid=5833 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 62.700618][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 62.759796][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 62.761127][ T30] audit: type=1400 audit(1744299045.919:109): avc: denied { mounton } for pid=5833 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 62.983530][ T30] audit: type=1400 audit(1744299046.229:110): avc: denied { module_request } for pid=5833 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 63.066009][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 63.226255][ T5822] chnl_net:caif_netlink_parms(): no params data found [ 63.288942][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.297015][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.304676][ T5833] bridge_slave_0: entered allmulticast mode [ 63.311524][ T5833] bridge_slave_0: entered promiscuous mode [ 63.318933][ T5821] chnl_net:caif_netlink_parms(): no params data found [ 63.350067][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.357213][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.364548][ T5833] bridge_slave_1: entered allmulticast mode [ 63.371222][ T5833] bridge_slave_1: entered promiscuous mode [ 63.378035][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 63.448089][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.455346][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.464513][ T5822] bridge_slave_0: entered allmulticast mode [ 63.471300][ T5822] bridge_slave_0: entered promiscuous mode [ 63.483570][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.499960][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.513911][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.521048][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.528118][ T5822] bridge_slave_1: entered allmulticast mode [ 63.535767][ T5822] bridge_slave_1: entered promiscuous mode [ 63.542330][ T5820] chnl_net:caif_netlink_parms(): no params data found [ 63.609045][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.625006][ T5833] team0: Port device team_slave_0 added [ 63.632789][ T5833] team0: Port device team_slave_1 added [ 63.653961][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.723317][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.730425][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.756647][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.768411][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.775713][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.783208][ T5821] bridge_slave_0: entered allmulticast mode [ 63.790377][ T5821] bridge_slave_0: entered promiscuous mode [ 63.802332][ T5822] team0: Port device team_slave_0 added [ 63.828845][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.835977][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.862349][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.878476][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.886150][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.893616][ T5821] bridge_slave_1: entered allmulticast mode [ 63.900790][ T5821] bridge_slave_1: entered promiscuous mode [ 63.908274][ T5822] team0: Port device team_slave_1 added [ 63.921798][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.928877][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.936425][ T5827] bridge_slave_0: entered allmulticast mode [ 63.943809][ T5827] bridge_slave_0: entered promiscuous mode [ 63.982236][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.989285][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.996800][ T5820] bridge_slave_0: entered allmulticast mode [ 64.003958][ T5820] bridge_slave_0: entered promiscuous mode [ 64.011271][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.018350][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.026203][ T5827] bridge_slave_1: entered allmulticast mode [ 64.033621][ T5827] bridge_slave_1: entered promiscuous mode [ 64.060008][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.066970][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.093204][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.106231][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.113687][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.139848][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.151319][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.158461][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.165663][ T5820] bridge_slave_1: entered allmulticast mode [ 64.172724][ T5820] bridge_slave_1: entered promiscuous mode [ 64.195084][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.214102][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.236748][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.249370][ T5833] hsr_slave_0: entered promiscuous mode [ 64.255615][ T5833] hsr_slave_1: entered promiscuous mode [ 64.263684][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.292535][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.326730][ T5821] team0: Port device team_slave_0 added [ 64.343327][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.363894][ T5827] team0: Port device team_slave_0 added [ 64.372133][ T5827] team0: Port device team_slave_1 added [ 64.379190][ T5821] team0: Port device team_slave_1 added [ 64.433384][ T5822] hsr_slave_0: entered promiscuous mode [ 64.440787][ T5822] hsr_slave_1: entered promiscuous mode [ 64.446614][ T5822] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.454686][ T5822] Cannot create hsr debugfs directory [ 64.462693][ T5820] team0: Port device team_slave_0 added [ 64.480734][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.487676][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.513858][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.526388][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.533363][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.559472][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.571558][ T5820] team0: Port device team_slave_1 added [ 64.598252][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.605382][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.631568][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.643849][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.650888][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.670433][ T5831] Bluetooth: hci2: command tx timeout [ 64.679176][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.709936][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.716880][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.742824][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.753397][ T5831] Bluetooth: hci4: command tx timeout [ 64.759734][ T5831] Bluetooth: hci1: command tx timeout [ 64.781100][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.788040][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.814502][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.829975][ T5831] Bluetooth: hci3: command tx timeout [ 64.830104][ T54] Bluetooth: hci0: command tx timeout [ 64.882491][ T5821] hsr_slave_0: entered promiscuous mode [ 64.888459][ T5821] hsr_slave_1: entered promiscuous mode [ 64.894546][ T5821] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.902133][ T5821] Cannot create hsr debugfs directory [ 64.958084][ T5827] hsr_slave_0: entered promiscuous mode [ 64.964294][ T5827] hsr_slave_1: entered promiscuous mode [ 64.970345][ T5827] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.977910][ T5827] Cannot create hsr debugfs directory [ 64.994808][ T5820] hsr_slave_0: entered promiscuous mode [ 65.001442][ T5820] hsr_slave_1: entered promiscuous mode [ 65.007288][ T5820] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.014867][ T5820] Cannot create hsr debugfs directory [ 65.264640][ T5833] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 65.296529][ T5833] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 65.306665][ T5833] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 65.318397][ T5833] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 65.365623][ T5822] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 65.379228][ T5822] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 65.400661][ T5822] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 65.409441][ T5822] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 65.464209][ T5820] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 65.474410][ T5820] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 65.483605][ T5820] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 65.495180][ T5820] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 65.564316][ T5827] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 65.577075][ T5827] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 65.597648][ T5827] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 65.606691][ T5827] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 65.658449][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.702347][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.715286][ T5821] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 65.726049][ T5821] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 65.736007][ T5821] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 65.756111][ T5821] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 65.767505][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.785787][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.805564][ T3519] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.812823][ T3519] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.838843][ T3519] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.845931][ T3519] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.854855][ T3519] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.861986][ T3519] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.897515][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.904637][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.936419][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.956900][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.004330][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.018493][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.032251][ T3519] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.039333][ T3519] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.069297][ T5833] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 66.080842][ T5833] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.099140][ T3519] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.106295][ T3519] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.115621][ T3519] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.122773][ T3519] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.133188][ T3519] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.140303][ T3519] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.197658][ T5827] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 66.210936][ T30] audit: type=1400 audit(1744299049.429:111): avc: denied { sys_module } for pid=5822 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 66.237032][ T5827] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.328777][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.372272][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.397816][ T3519] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.404974][ T3519] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.424947][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.455071][ T3519] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.462227][ T3519] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.518775][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.609211][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.666026][ T5822] veth0_vlan: entered promiscuous mode [ 66.705667][ T5822] veth1_vlan: entered promiscuous mode [ 66.752825][ T54] Bluetooth: hci2: command tx timeout [ 66.781701][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.792426][ T5827] veth0_vlan: entered promiscuous mode [ 66.829986][ T54] Bluetooth: hci1: command tx timeout [ 66.833401][ T5831] Bluetooth: hci4: command tx timeout [ 66.847098][ T5827] veth1_vlan: entered promiscuous mode [ 66.867458][ T5820] veth0_vlan: entered promiscuous mode [ 66.906166][ T5820] veth1_vlan: entered promiscuous mode [ 66.912882][ T5831] Bluetooth: hci0: command tx timeout [ 66.912890][ T54] Bluetooth: hci3: command tx timeout [ 66.935955][ T5822] veth0_macvtap: entered promiscuous mode [ 66.959591][ T5833] veth0_vlan: entered promiscuous mode [ 66.975330][ T5822] veth1_macvtap: entered promiscuous mode [ 66.988330][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.008015][ T5833] veth1_vlan: entered promiscuous mode [ 67.028047][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.039053][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.056218][ T5820] veth0_macvtap: entered promiscuous mode [ 67.064224][ T5822] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.074688][ T5822] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.084023][ T5822] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.092872][ T5822] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.103686][ T5827] veth0_macvtap: entered promiscuous mode [ 67.113602][ T5827] veth1_macvtap: entered promiscuous mode [ 67.124228][ T5820] veth1_macvtap: entered promiscuous mode [ 67.161999][ T5833] veth0_macvtap: entered promiscuous mode [ 67.179473][ T5833] veth1_macvtap: entered promiscuous mode [ 67.196248][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.206882][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.218724][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.229333][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.239989][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.251253][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.276215][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.286804][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.297558][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.308152][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.320750][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.331647][ T5827] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.340610][ T5827] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.349281][ T5827] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.358215][ T5827] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.385732][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.397607][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.408750][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.419292][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.430703][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.439148][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.450980][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.460868][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.473293][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.483302][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.493745][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.504525][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.522549][ T5821] veth0_vlan: entered promiscuous mode [ 67.531443][ T5820] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.540387][ T5820] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.549071][ T5820] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.550232][ T2947] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.565255][ T5820] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.566106][ T2947] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.579558][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.593832][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.603791][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.614324][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.624142][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.635266][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.647618][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.664486][ T5821] veth1_vlan: entered promiscuous mode [ 67.677938][ T5833] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.686747][ T5833] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.696685][ T5833] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.705622][ T5833] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.749282][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.757922][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.781713][ T30] audit: type=1400 audit(1744299051.029:112): avc: denied { mounton } for pid=5822 comm="syz-executor" path="/root/syzkaller.Ixs6Le/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 67.818016][ T30] audit: type=1400 audit(1744299051.029:113): avc: denied { mount } for pid=5822 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 67.845446][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.857794][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.877373][ T30] audit: type=1400 audit(1744299051.029:114): avc: denied { mounton } for pid=5822 comm="syz-executor" path="/root/syzkaller.Ixs6Le/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 67.906390][ T30] audit: type=1400 audit(1744299051.029:115): avc: denied { mount } for pid=5822 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 67.932320][ T30] audit: type=1400 audit(1744299051.029:116): avc: denied { mounton } for pid=5822 comm="syz-executor" path="/root/syzkaller.Ixs6Le/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 67.938788][ T5822] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 67.978332][ T30] audit: type=1400 audit(1744299051.029:117): avc: denied { mounton } for pid=5822 comm="syz-executor" path="/root/syzkaller.Ixs6Le/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=6853 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 67.987311][ T5821] veth0_macvtap: entered promiscuous mode [ 68.010510][ T30] audit: type=1400 audit(1744299051.039:118): avc: denied { unmount } for pid=5822 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 68.044270][ T5821] veth1_macvtap: entered promiscuous mode [ 68.055214][ T30] audit: type=1400 audit(1744299051.059:119): avc: denied { mounton } for pid=5822 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2728 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 68.083359][ T30] audit: type=1400 audit(1744299051.059:120): avc: denied { mount } for pid=5822 comm="syz-executor" name="/" dev="gadgetfs" ino=6855 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 68.106833][ T30] audit: type=1400 audit(1744299051.099:121): avc: denied { mounton } for pid=5822 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 68.155494][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.171103][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.181275][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.192405][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.202284][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.214199][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.226573][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.237126][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.247943][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.261616][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.270717][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.286144][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.290211][ T2947] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.300483][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.318054][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.329828][ T2947] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.338351][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.348753][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.360125][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.370596][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.381473][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.392236][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.409431][ T5821] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.425266][ T5821] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.434151][ T5821] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.443336][ T5821] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.484596][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.497331][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.525217][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.544175][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.739076][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.747403][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.919792][ T5831] Bluetooth: hci1: command tx timeout [ 68.925676][ T5831] Bluetooth: hci4: command tx timeout [ 68.931840][ T54] Bluetooth: hci2: command tx timeout [ 68.990086][ T54] Bluetooth: hci3: command tx timeout [ 68.996050][ T5831] Bluetooth: hci0: command tx timeout [ 69.030033][ T2947] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.053956][ T2947] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.115499][ T3519] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.127184][ T3519] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.497466][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 69.599962][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 69.805529][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 69.907160][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 70.331566][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 70.454896][ T5937] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9'. [ 70.490471][ T5940] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 70.636535][ T5944] : entered promiscuous mode [ 71.247211][ T54] Bluetooth: hci2: command tx timeout [ 71.252698][ T5831] Bluetooth: hci4: command tx timeout [ 71.258085][ T5831] Bluetooth: hci1: command tx timeout [ 71.263519][ T5839] Bluetooth: hci3: command tx timeout [ 71.268909][ T5839] Bluetooth: hci0: command tx timeout [ 71.299747][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.309451][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.455072][ T5955] netlink: 'syz.1.12': attribute type 1 has an invalid length. [ 71.462955][ T5955] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12'. [ 71.547733][ T5958] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.14' sets config #0 [ 71.572565][ T5958] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.14' sets config #1 [ 71.647866][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 72.364935][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 72.658288][ T5955] netlink: 'syz.1.12': attribute type 1 has an invalid length. [ 72.671365][ T5955] netlink: 224 bytes leftover after parsing attributes in process `syz.1.12'. [ 72.671953][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 72.672841][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 72.672952][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 72.754787][ T5972] vlan2: entered allmulticast mode [ 73.013112][ T30] kauditd_printk_skb: 70 callbacks suppressed [ 73.013123][ T30] audit: type=1400 audit(1744299056.259:192): avc: denied { create } for pid=5977 comm="syz.2.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 73.850883][ T30] audit: type=1400 audit(1744299056.339:193): avc: denied { map } for pid=5977 comm="syz.2.20" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8583 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 73.878050][ T30] audit: type=1400 audit(1744299056.339:194): avc: denied { read write } for pid=5977 comm="syz.2.20" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8583 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 73.902497][ C0] vkms_vblank_simulate: vblank timer overrun [ 73.909750][ T30] audit: type=1400 audit(1744299056.349:195): avc: denied { write } for pid=5977 comm="syz.2.20" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 73.932516][ C0] vkms_vblank_simulate: vblank timer overrun [ 73.940748][ T30] audit: type=1400 audit(1744299056.399:196): avc: denied { write } for pid=5978 comm="syz.0.21" path="socket:[8581]" dev="sockfs" ino=8581 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 73.963797][ C0] vkms_vblank_simulate: vblank timer overrun [ 74.087304][ T30] audit: type=1400 audit(1744299057.329:197): avc: denied { create } for pid=5983 comm="syz.4.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 74.116647][ T5984] Zero length message leads to an empty skb [ 74.125930][ T970] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 74.359799][ T5811] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 74.370307][ T970] usb 3-1: device descriptor read/64, error -71 [ 74.447443][ T30] audit: type=1400 audit(1744299057.689:198): avc: denied { create } for pid=5990 comm="syz.1.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 74.469567][ T30] audit: type=1400 audit(1744299057.689:199): avc: denied { setopt } for pid=5990 comm="syz.1.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 74.501805][ T30] audit: type=1400 audit(1744299057.689:200): avc: denied { connect } for pid=5990 comm="syz.1.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 74.522584][ T5811] usb 5-1: Using ep0 maxpacket: 16 [ 74.529265][ T30] audit: type=1400 audit(1744299057.689:201): avc: denied { name_connect } for pid=5990 comm="syz.1.24" dest=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 74.557920][ T5811] usb 5-1: config 7 has an invalid interface number: 76 but max is 0 [ 74.566334][ T5811] usb 5-1: config 7 has no interface number 0 [ 74.572989][ T5811] usb 5-1: config 7 interface 76 altsetting 7 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 74.584057][ T5811] usb 5-1: config 7 interface 76 has no altsetting 0 [ 74.595943][ T5811] usb 5-1: New USB device found, idVendor=0499, idProduct=103e, bcdDevice=b7.d3 [ 74.605554][ T5811] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.614718][ T5811] usb 5-1: Product: syz [ 74.621973][ T5811] usb 5-1: Manufacturer: syz [ 74.622287][ T970] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 74.626689][ T5811] usb 5-1: SerialNumber: syz [ 74.689776][ T81] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 74.790348][ T970] usb 3-1: device descriptor read/64, error -71 [ 74.851909][ T81] usb 2-1: Using ep0 maxpacket: 16 [ 74.871172][ T81] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 75.738738][ T970] usb usb3-port1: attempt power cycle [ 75.747801][ T81] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 75.778953][ T81] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 75.788335][ T81] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.804784][ T81] usb 2-1: Product: syz [ 75.809303][ T81] usb 2-1: Manufacturer: syz [ 75.814256][ T81] usb 2-1: SerialNumber: syz [ 75.822979][ T6001] Bluetooth: MGMT ver 1.23 [ 76.058416][ T9] cfg80211: failed to load regulatory.db [ 76.059973][ T5991] netlink: 20 bytes leftover after parsing attributes in process `syz.1.24'. [ 76.105402][ T970] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 76.159188][ T5991] Context (ID=0x1) not attached to queue pair (handle=0x1:0x0) [ 76.212341][ T81] usb 2-1: skipping empty audio interface (v1) [ 76.311354][ T81] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 76.375161][ T970] usb 3-1: device not accepting address 4, error -71 [ 76.489175][ T81] usb 2-1: USB disconnect, device number 2 [ 76.808343][ T6006] udevd[6006]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 76.907512][ T6018] capability: warning: `syz.3.31' uses 32-bit capabilities (legacy support in use) [ 77.397462][ T5811] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 77.456937][ T6028] fuse: Bad value for 'fd' [ 77.471793][ T5811] snd-usb-audio 5-1:7.76: probe with driver snd-usb-audio failed with error -2 [ 77.492854][ T6028] fuse: Bad value for 'user_id' [ 77.507849][ T6028] fuse: Bad value for 'user_id' [ 77.508437][ T5811] usb 5-1: USB disconnect, device number 2 [ 77.679685][ T5874] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 77.732234][ T5834] udevd[5834]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:7.76/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 77.788323][ T24] usb 1-1: new low-speed USB device number 2 using dummy_hcd [ 77.852481][ T5874] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.871023][ T5874] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.882489][ T5874] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 77.903265][ T5874] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.916553][ T5874] usb 4-1: config 0 descriptor?? [ 77.919762][ T24] usb 1-1: device descriptor read/64, error -71 [ 78.562612][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 78.562641][ T30] audit: type=1400 audit(1744299061.789:223): avc: denied { read write } for pid=6036 comm="syz.1.36" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 78.615817][ T24] usb 1-1: new low-speed USB device number 3 using dummy_hcd [ 78.669949][ T5874] hid-steam 0003:28DE:1142.0001: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 78.685280][ T30] audit: type=1400 audit(1744299061.789:224): avc: denied { open } for pid=6036 comm="syz.1.36" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 78.753358][ T30] audit: type=1400 audit(1744299061.989:225): avc: denied { read } for pid=5182 comm="acpid" name="event9" dev="devtmpfs" ino=2741 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 78.769734][ T24] usb 1-1: device descriptor read/64, error -71 [ 78.776001][ T30] audit: type=1400 audit(1744299061.989:226): avc: denied { open } for pid=5182 comm="acpid" path="/dev/input/event9" dev="devtmpfs" ino=2741 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 78.805029][ T30] audit: type=1400 audit(1744299061.989:227): avc: denied { ioctl } for pid=5182 comm="acpid" path="/dev/input/event9" dev="devtmpfs" ino=2741 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 78.996561][ T6018] capability: warning: `syz.3.31' uses deprecated v2 capabilities in a way that may be insecure [ 79.324370][ T81] usb 4-1: USB disconnect, device number 2 [ 79.370039][ T24] usb usb1-port1: attempt power cycle [ 79.393086][ T30] audit: type=1400 audit(1744299062.489:228): avc: denied { execute } for pid=6041 comm="syz.4.37" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8752 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 79.473697][ T30] audit: type=1400 audit(1744299062.589:229): avc: denied { create } for pid=6046 comm="syz.4.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 79.732667][ T30] audit: type=1400 audit(1744299062.599:230): avc: denied { execute } for pid=6046 comm="syz.4.39" name="file1" dev="tmpfs" ino=45 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 79.754952][ T24] usb 1-1: new low-speed USB device number 4 using dummy_hcd [ 79.793145][ T30] audit: type=1400 audit(1744299062.689:231): avc: denied { write } for pid=6048 comm="syz.1.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 79.793181][ T30] audit: type=1400 audit(1744299062.749:232): avc: denied { watch } for pid=6048 comm="syz.1.38" path="/5" dev="tmpfs" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 79.849223][ T24] usb 1-1: device descriptor read/8, error -71 [ 80.102408][ T24] usb 1-1: new low-speed USB device number 5 using dummy_hcd [ 80.289989][ T24] usb 1-1: device descriptor read/8, error -71 [ 80.460521][ T6061] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 80.524647][ T24] usb usb1-port1: unable to enumerate USB device [ 81.179795][ T24] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 81.306492][ T5874] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 81.329837][ T24] usb 4-1: device descriptor read/64, error -71 [ 81.639689][ T5874] usb 1-1: device descriptor read/64, error -71 [ 81.751312][ T6080] mmap: syz.1.48 (6080) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 81.763224][ T24] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 81.909825][ T24] usb 4-1: device descriptor read/64, error -71 [ 81.988020][ T5874] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 82.030468][ T24] usb usb4-port1: attempt power cycle [ 82.240169][ T5874] usb 1-1: device descriptor read/64, error -71 [ 82.691536][ T5874] usb usb1-port1: attempt power cycle [ 82.750634][ T24] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 82.813554][ T24] usb 4-1: device descriptor read/8, error -71 [ 82.952688][ T6097] ALSA: mixer_oss: invalid OSS volume '' [ 83.160335][ T5874] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 83.160360][ T24] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 83.180537][ T5874] usb 1-1: device descriptor read/8, error -71 [ 83.438862][ T6108] netlink: 'syz.2.56': attribute type 1 has an invalid length. [ 83.451049][ T24] usb 4-1: device descriptor read/8, error -71 [ 83.570720][ T24] usb usb4-port1: unable to enumerate USB device [ 83.598742][ T6113] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 83.669856][ T5874] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 83.700099][ T5874] usb 1-1: device descriptor read/8, error -71 [ 83.701454][ T6116] netlink: 24 bytes leftover after parsing attributes in process `syz.4.59'. [ 83.739725][ T5873] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 83.883859][ T5874] usb usb1-port1: unable to enumerate USB device [ 84.469695][ T5873] usb 3-1: Using ep0 maxpacket: 32 [ 84.965373][ T5873] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 84.979655][ T5873] usb 3-1: config 0 has no interface number 0 [ 85.069052][ T5873] usb 3-1: config 0 interface 184 has no altsetting 0 [ 85.094704][ T5873] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 85.128908][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 85.128921][ T30] audit: type=1400 audit(1744299068.369:252): avc: denied { read } for pid=6129 comm="syz.4.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 85.128936][ T5873] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.196322][ T6133] tmpfs: Bad value for 'mpol' [ 85.199299][ T30] audit: type=1400 audit(1744299068.439:253): avc: denied { mounton } for pid=6135 comm="syz.1.65" path="/9/file0" dev="tmpfs" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 85.329018][ T5873] usb 3-1: Product: syz [ 85.333629][ T5873] usb 3-1: Manufacturer: syz [ 85.338272][ T5873] usb 3-1: SerialNumber: syz [ 85.353316][ T5873] usb 3-1: config 0 descriptor?? [ 85.382824][ T5873] smsc75xx v1.0.0 [ 85.445594][ T6141] netlink: 'syz.3.64': attribute type 11 has an invalid length. [ 85.453349][ T6141] netlink: 224 bytes leftover after parsing attributes in process `syz.3.64'. [ 85.870551][ T5873] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 85.932053][ T5873] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 85.994905][ T30] audit: type=1400 audit(1744299069.239:254): avc: denied { search } for pid=5491 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.067150][ T5873] usb 3-1: USB disconnect, device number 6 [ 86.331721][ T30] audit: type=1400 audit(1744299069.309:255): avc: denied { read } for pid=5491 comm="dhcpcd" name="n100" dev="tmpfs" ino=2081 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 86.353475][ T30] audit: type=1400 audit(1744299069.309:256): avc: denied { open } for pid=5491 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=2081 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 86.379097][ T30] audit: type=1400 audit(1744299069.309:257): avc: denied { getattr } for pid=5491 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=2081 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 86.404378][ T5811] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 86.567428][ T30] audit: type=1400 audit(1744299069.759:258): avc: denied { mount } for pid=6153 comm="syz.1.69" name="/" dev="ramfs" ino=8984 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 86.617521][ T5811] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 86.642427][ T5811] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 86.657113][ T30] audit: type=1400 audit(1744299069.759:259): avc: denied { read } for pid=6155 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.696273][ T5811] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 86.744832][ T5811] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 86.764029][ T6161] syzkaller1: entered promiscuous mode [ 86.773732][ T6161] syzkaller1: entered allmulticast mode [ 86.779371][ T30] audit: type=1400 audit(1744299069.759:260): avc: denied { open } for pid=6155 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.805361][ T5811] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 86.866729][ T30] audit: type=1400 audit(1744299069.759:261): avc: denied { getattr } for pid=6155 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.897590][ T5811] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 86.998730][ T5811] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 87.018149][ T5811] usb 5-1: Product: syz [ 87.022373][ T5811] usb 5-1: Manufacturer: syz [ 87.177624][ T5811] cdc_wdm 5-1:1.0: skipping garbage [ 87.188021][ T5811] cdc_wdm 5-1:1.0: skipping garbage [ 87.405519][ T5811] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 87.449914][ T5811] cdc_wdm 5-1:1.0: Unknown control protocol [ 87.482457][ T5811] usb 5-1: USB disconnect, device number 3 [ 87.724991][ T6179] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.72' sets config #0 [ 87.744590][ T6179] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.72' sets config #1 [ 88.489142][ T6174] warning: `syz.1.70' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 88.591636][ T6194] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.74' sets config #0 [ 89.013974][ T6171] sctp: failed to load transform for md5: -2 [ 89.027864][ T6192] can0: slcan on ptm0. [ 89.313891][ T6189] can0 (unregistered): slcan off ptm0. [ 89.840002][ T5876] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 89.861556][ T5960] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 90.039659][ T5876] usb 3-1: Using ep0 maxpacket: 16 [ 90.056861][ T5876] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 90.091577][ T5960] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 90.094834][ T5876] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 90.124419][ T5960] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.135302][ T5876] usb 3-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 90.138098][ T6231] tipc: Can't bind to reserved service type 0 [ 90.144672][ T30] kauditd_printk_skb: 139 callbacks suppressed [ 90.144683][ T30] audit: type=1400 audit(1744299073.379:401): avc: denied { create } for pid=6230 comm="syz.3.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 90.161111][ T5960] usb 1-1: Product: syz [ 90.185348][ T81] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 90.190965][ T5876] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=19 [ 90.206273][ T5873] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 90.209750][ T5876] usb 3-1: Product: syz [ 90.222061][ T5960] usb 1-1: Manufacturer: syz [ 90.226792][ T5960] usb 1-1: SerialNumber: syz [ 90.228229][ T5876] usb 3-1: Manufacturer: syz [ 90.232097][ T5873] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 90.236048][ T30] audit: type=1400 audit(1744299073.379:402): avc: denied { bind } for pid=6230 comm="syz.3.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 90.267062][ T30] audit: type=1400 audit(1744299073.439:403): avc: denied { read write } for pid=6230 comm="syz.3.82" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 90.279119][ T5876] usb 3-1: SerialNumber: syz [ 90.302703][ T5960] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 90.309671][ T5876] usb 3-1: config 0 descriptor?? [ 90.385771][ T970] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 90.396311][ T81] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 90.420673][ T30] audit: type=1400 audit(1744299073.439:404): avc: denied { open } for pid=6230 comm="syz.3.82" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 90.444859][ T81] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 90.456401][ T81] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.466542][ T30] audit: type=1400 audit(1744299073.439:405): avc: denied { getopt } for pid=6230 comm="syz.3.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 90.486371][ T5873] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 90.495702][ T81] usb 5-1: config 0 descriptor?? [ 90.506457][ T81] pwc: Askey VC010 type 2 USB webcam detected. [ 90.514967][ T30] audit: type=1400 audit(1744299073.579:406): avc: denied { firmware_load } for pid=970 comm="kworker/1:2" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=287 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 90.544698][ T30] audit: type=1400 audit(1744299073.579:407): avc: denied { ioctl } for pid=6207 comm="syz.0.79" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 90.588301][ T6203] netlink: 60 bytes leftover after parsing attributes in process `syz.2.77'. [ 90.608167][ T5876] usb 3-1: USB disconnect, device number 7 [ 90.670203][ T5873] usb 4-1: Using ep0 maxpacket: 32 [ 90.682677][ T5873] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 90.696272][ T5873] usb 4-1: can't read configurations, error -61 [ 90.743923][ T30] audit: type=1400 audit(1744299073.989:408): avc: denied { read write } for pid=6248 comm="syz.1.83" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 90.775862][ T30] audit: type=1400 audit(1744299073.989:409): avc: denied { open } for pid=6248 comm="syz.1.83" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 90.872380][ T5873] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 90.919911][ T81] pwc: recv_control_msg error -32 req 02 val 2b00 [ 90.930106][ T81] pwc: recv_control_msg error -32 req 02 val 2700 [ 90.938302][ T81] pwc: recv_control_msg error -32 req 02 val 2c00 [ 90.954516][ T81] pwc: recv_control_msg error -32 req 04 val 1000 [ 90.964903][ T30] audit: type=1400 audit(1744299074.209:410): avc: denied { setattr } for pid=6207 comm="syz.0.79" name="file0" dev="tmpfs" ino=94 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 90.990867][ T81] pwc: recv_control_msg error -32 req 04 val 1300 [ 90.998213][ T81] pwc: recv_control_msg error -32 req 04 val 1400 [ 91.009712][ T81] pwc: recv_control_msg error -32 req 02 val 2000 [ 91.019788][ T5875] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 91.028498][ T81] pwc: recv_control_msg error -32 req 02 val 2100 [ 91.036937][ T81] pwc: recv_control_msg error -32 req 04 val 1500 [ 91.044101][ T5873] usb 4-1: Using ep0 maxpacket: 32 [ 91.052492][ T5873] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 91.061359][ T5873] usb 4-1: can't read configurations, error -61 [ 91.068126][ T5873] usb usb4-port1: attempt power cycle [ 91.180101][ T5875] usb 2-1: Using ep0 maxpacket: 16 [ 91.189370][ T5875] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 91.208768][ T5875] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 91.218224][ T5875] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.269123][ T5875] usb 2-1: config 0 descriptor?? [ 91.297614][ T81] pwc: recv_control_msg error -71 req 02 val 2400 [ 91.357897][ T81] pwc: recv_control_msg error -71 req 02 val 2600 [ 91.384892][ T81] pwc: recv_control_msg error -71 req 02 val 2900 [ 91.469832][ T970] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 91.480006][ T5873] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 91.489893][ T970] ath9k_htc: Failed to initialize the device [ 91.500243][ T81] pwc: recv_control_msg error -71 req 02 val 2800 [ 91.509827][ T5875] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input7 [ 91.529686][ T81] pwc: recv_control_msg error -71 req 04 val 1100 [ 91.542108][ T5873] usb 4-1: Using ep0 maxpacket: 32 [ 91.609108][ T81] pwc: recv_control_msg error -71 req 04 val 1200 [ 91.644028][ T5873] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 91.673552][ T970] usb 1-1: ath9k_htc: USB layer deinitialized [ 91.681316][ T5873] usb 4-1: can't read configurations, error -61 [ 91.688166][ T81] pwc: Registered as video103. [ 91.715889][ T81] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input8 [ 91.831013][ T5182] bcm5974 2-1:0.0: could not read from device [ 91.842873][ T5873] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 91.873203][ T5873] usb 4-1: Using ep0 maxpacket: 32 [ 91.897599][ T5182] bcm5974 2-1:0.0: could not read from device [ 91.913058][ T5811] usb 1-1: USB disconnect, device number 10 [ 91.913369][ T5873] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 91.930885][ T5875] usb 2-1: USB disconnect, device number 3 [ 91.943171][ T5182] bcm5974 2-1:0.0: could not read from device [ 91.963134][ T5873] usb 4-1: can't read configurations, error -61 [ 91.971939][ T81] usb 5-1: USB disconnect, device number 4 [ 91.989907][ T5873] usb usb4-port1: unable to enumerate USB device [ 93.087959][ T6289] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.88' sets config #0 [ 93.610173][ T5811] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 93.637495][ T6293] netlink: 16 bytes leftover after parsing attributes in process `syz.4.92'. [ 93.750034][ T5811] usb 2-1: device descriptor read/64, error -71 [ 93.929714][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 93.969745][ T5876] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 93.989849][ T5811] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 94.079647][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 94.086539][ T9] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 94.098548][ T9] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 94.110297][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 94.121277][ T5811] usb 2-1: device descriptor read/64, error -71 [ 94.127533][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 94.140987][ T5876] usb 5-1: too many configurations: 137, using maximum allowed: 8 [ 94.151091][ T9] usb 1-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 94.160388][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.168545][ T5876] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 94.176779][ T9] usb 1-1: Product: syz [ 94.181607][ T5876] usb 5-1: can't read configurations, error -61 [ 94.187860][ T9] usb 1-1: Manufacturer: syz [ 94.198322][ T9] usb 1-1: SerialNumber: syz [ 94.206376][ T9] usb 1-1: config 0 descriptor?? [ 94.208376][ T6307] syz.3.97 uses obsolete (PF_INET,SOCK_PACKET) [ 94.228088][ T9] input: iMON Panel, Knob and Mouse(15c2:003b) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input9 [ 94.241284][ T5811] usb usb2-port1: attempt power cycle [ 94.319836][ T5876] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 94.470479][ T5876] usb 5-1: too many configurations: 137, using maximum allowed: 8 [ 94.519235][ T5876] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 94.540358][ T5876] usb 5-1: can't read configurations, error -61 [ 94.555397][ T5876] usb usb5-port1: attempt power cycle [ 94.567286][ T9] imon:send_packet: packet tx failed (-71) [ 94.579800][ T5811] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 94.694238][ T9] imon 1-1:0.0: panel buttons/knobs setup failed [ 94.740198][ T5811] usb 2-1: device descriptor read/8, error -71 [ 95.539792][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 95.539806][ T30] audit: type=1400 audit(1744299078.779:423): avc: denied { search } for pid=5179 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.589761][ T9] rc_core: IR keymap rc-imon-pad not found [ 95.595681][ T9] Registered IR keymap rc-empty [ 95.600855][ T5876] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 95.626501][ T9] imon 1-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 95.634978][ T6324] netlink: 276 bytes leftover after parsing attributes in process `syz.0.101'. [ 95.656540][ T5876] usb 5-1: too many configurations: 137, using maximum allowed: 8 [ 95.690239][ T9] imon 1-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 95.743168][ T30] audit: type=1400 audit(1744299078.969:424): avc: denied { lock } for pid=6323 comm="syz.2.102" path="socket:[9427]" dev="sockfs" ino=9427 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 95.821633][ T5876] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 95.837153][ T9] imon:send_packet: packet tx failed (-71) [ 95.883119][ T5811] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 95.897818][ T6329] netlink: 32 bytes leftover after parsing attributes in process `syz.2.102'. [ 95.921850][ T5876] usb 5-1: can't read configurations, error -61 [ 95.942995][ T5811] usb 2-1: device descriptor read/8, error -71 [ 95.949962][ T9] imon 1-1:0.0: remote input dev register failed [ 95.960234][ T9] imon 1-1:0.0: imon_init_intf0: rc device setup failed [ 96.096253][ T5811] usb usb2-port1: unable to enumerate USB device [ 96.109650][ T5876] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 96.150963][ T5876] usb 5-1: too many configurations: 137, using maximum allowed: 8 [ 96.163241][ T5876] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 96.174594][ T5876] usb 5-1: can't read configurations, error -61 [ 96.192769][ T5876] usb usb5-port1: unable to enumerate USB device [ 96.207328][ T9] imon 1-1:0.0: unable to initialize intf0, err 0 [ 96.225535][ T9] imon:imon_probe: failed to initialize context! [ 96.239323][ T9] imon 1-1:0.0: unable to register, err -19 [ 96.348247][ T9] usb 1-1: USB disconnect, device number 11 [ 96.999733][ T9] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 97.043415][ T81] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 97.160984][ T9] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 97.171423][ T9] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 97.182117][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 97.191313][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 97.202552][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 97.224089][ T9] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 97.234747][ T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 97.239775][ T81] usb 4-1: Using ep0 maxpacket: 8 [ 97.260531][ T81] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 97.262093][ T9] usb 1-1: Product: syz [ 97.268691][ T81] usb 4-1: config 16 has an invalid descriptor of length 205, skipping remainder of the config [ 97.268709][ T81] usb 4-1: config 16 has 0 interfaces, different from the descriptor's value: 1 [ 97.268740][ T81] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 97.285396][ T9] usb 1-1: Manufacturer: syz [ 97.294634][ T81] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.313648][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 97.319429][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 97.339195][ T9] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 97.346903][ T9] cdc_wdm 1-1:1.0: Unknown control protocol [ 97.486475][ T30] audit: type=1400 audit(1744299080.729:425): avc: denied { bind } for pid=6359 comm="syz.1.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 97.701202][ T6366] syz.2.111: attempt to access beyond end of device [ 97.701202][ T6366] nbd2: rw=0, sector=2, nr_sectors = 2 limit=0 [ 97.715181][ T6366] syz.2.111: attempt to access beyond end of device [ 97.715181][ T6366] nbd2: rw=0, sector=16, nr_sectors = 2 limit=0 [ 98.062334][ T30] audit: type=1400 audit(1744299081.309:426): avc: denied { watch } for pid=6330 comm="syz.0.103" path="/18" dev="tmpfs" ino=110 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 98.130710][ T30] audit: type=1400 audit(1744299081.309:427): avc: denied { watch_sb } for pid=6330 comm="syz.0.103" path="/18" dev="tmpfs" ino=110 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 98.237195][ T30] audit: type=1400 audit(1744299081.479:428): avc: denied { write } for pid=6377 comm="syz.4.115" name="igmp6" dev="proc" ino=4026532984 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 98.267298][ T6383] input: syz0 as /devices/virtual/input/input11 [ 98.271362][ T30] audit: type=1400 audit(1744299081.509:429): avc: denied { ioctl } for pid=6375 comm="syz.1.114" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 99.012507][ T30] audit: type=1400 audit(1744299082.259:430): avc: denied { ioctl } for pid=6394 comm="syz.1.119" path="socket:[10398]" dev="sockfs" ino=10398 ioctlcmd=0x4947 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 99.012953][ T6395] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.119'. [ 99.065399][ T30] audit: type=1400 audit(1744299082.309:431): avc: denied { map } for pid=6394 comm="syz.1.119" path="socket:[10399]" dev="sockfs" ino=10399 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 99.100507][ T6400] netlink: 8 bytes leftover after parsing attributes in process `syz.4.120'. [ 99.148295][ T6400] veth0_vlan: entered allmulticast mode [ 99.178181][ T6400] veth0_vlan: left promiscuous mode [ 99.186329][ T6400] veth0_vlan: entered promiscuous mode [ 99.802944][ T5811] usb 4-1: USB disconnect, device number 11 [ 99.878648][ T81] usb 1-1: USB disconnect, device number 12 [ 99.932173][ T30] audit: type=1400 audit(1744299083.169:432): avc: denied { read } for pid=6403 comm="syz.2.121" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 100.159856][ T5811] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 100.320631][ T5811] usb 4-1: Using ep0 maxpacket: 16 [ 100.327319][ T5811] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 100.340693][ T5811] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 100.360323][ T5811] usb 4-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 100.369481][ T5811] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=19 [ 100.385165][ T5811] usb 4-1: Product: syz [ 100.400204][ T5811] usb 4-1: Manufacturer: syz [ 100.410590][ T5811] usb 4-1: SerialNumber: syz [ 100.424094][ T5811] usb 4-1: config 0 descriptor?? [ 100.649501][ T6402] netlink: 60 bytes leftover after parsing attributes in process `syz.3.122'. [ 100.660607][ T81] usb 4-1: USB disconnect, device number 12 [ 102.199124][ T6453] xt_nat: multiple ranges no longer supported [ 103.040088][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 103.040102][ T30] audit: type=1400 audit(1744299086.139:436): avc: denied { read } for pid=6451 comm="syz.4.135" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 103.230067][ T30] audit: type=1400 audit(1744299086.139:437): avc: denied { ioctl } for pid=6451 comm="syz.4.135" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x640d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 103.301249][ T30] audit: type=1400 audit(1744299086.519:438): avc: denied { create } for pid=6456 comm="syz.1.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 103.323513][ T6465] FAULT_INJECTION: forcing a failure. [ 103.323513][ T6465] name failslab, interval 1, probability 0, space 0, times 1 [ 103.490753][ T30] audit: type=1400 audit(1744299086.739:439): avc: denied { setopt } for pid=6468 comm="syz.2.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 103.524215][ T6465] CPU: 0 UID: 0 PID: 6465 Comm: syz.3.138 Not tainted 6.15.0-rc1-syzkaller-00065-g3b07108ada81 #0 PREEMPT(full) [ 103.524236][ T6465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 103.524243][ T6465] Call Trace: [ 103.524248][ T6465] [ 103.524253][ T6465] dump_stack_lvl+0x16c/0x1f0 [ 103.524276][ T6465] should_fail_ex+0x512/0x640 [ 103.524291][ T6465] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 103.524307][ T6465] should_failslab+0xc2/0x120 [ 103.524323][ T6465] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 103.524335][ T6465] ? __kasan_slab_free+0x51/0x70 [ 103.524349][ T6465] ? kmem_cache_free+0x2d4/0x4d0 [ 103.524360][ T6465] ? __alloc_skb+0x2b2/0x380 [ 103.524378][ T6465] __alloc_skb+0x2b2/0x380 [ 103.524392][ T6465] ? __pfx___alloc_skb+0x10/0x10 [ 103.524405][ T6465] ? __lock_acquire+0x5ca/0x1ba0 [ 103.524427][ T6465] alloc_skb_with_frags+0xe0/0x860 [ 103.524447][ T6465] ? find_held_lock+0x2b/0x80 [ 103.524466][ T6465] sock_alloc_send_pskb+0x7fb/0x990 [ 103.524489][ T6465] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 103.524504][ T6465] ? selinux_socket_getpeersec_dgram+0x1a4/0x370 [ 103.524523][ T6465] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 103.524551][ T6465] unix_dgram_sendmsg+0x463/0x1910 [ 103.524570][ T6465] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 103.524594][ T6465] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 103.524615][ T6465] ____sys_sendmsg+0xa95/0xc70 [ 103.524638][ T6465] ? copy_msghdr_from_user+0x10a/0x160 [ 103.524654][ T6465] ? __pfx_____sys_sendmsg+0x10/0x10 [ 103.524677][ T6465] ? kfree+0x252/0x4d0 [ 103.524697][ T6465] ? find_held_lock+0x2b/0x80 [ 103.524715][ T6465] ___sys_sendmsg+0x134/0x1d0 [ 103.524733][ T6465] ? __pfx____sys_sendmsg+0x10/0x10 [ 103.524771][ T6465] ? __pfx___might_resched+0x10/0x10 [ 103.524798][ T6465] __sys_sendmmsg+0x200/0x420 [ 103.524820][ T6465] ? __pfx___sys_sendmmsg+0x10/0x10 [ 103.524846][ T6465] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 103.524879][ T6465] ? fput+0x70/0xf0 [ 103.524898][ T6465] ? ksys_write+0x1b9/0x240 [ 103.524911][ T6465] ? __pfx_ksys_write+0x10/0x10 [ 103.524923][ T6465] ? rcu_is_watching+0x12/0xc0 [ 103.524954][ T6465] __x64_sys_sendmmsg+0x9c/0x100 [ 103.524972][ T6465] ? lockdep_hardirqs_on+0x7c/0x110 [ 103.524993][ T6465] do_syscall_64+0xcd/0x260 [ 103.525016][ T6465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.525031][ T6465] RIP: 0033:0x7fa2aff8d169 [ 103.525045][ T6465] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.525060][ T6465] RSP: 002b:00007fa2b0d9a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 103.525075][ T6465] RAX: ffffffffffffffda RBX: 00007fa2b01a5fa0 RCX: 00007fa2aff8d169 [ 103.525085][ T6465] RDX: 0400000000000159 RSI: 0000200000001c00 RDI: 0000000000000005 [ 103.525095][ T6465] RBP: 00007fa2b0d9a090 R08: 0000000000000000 R09: 0000000000000000 [ 103.525108][ T6465] R10: 0000000000040840 R11: 0000000000000246 R12: 0000000000000002 [ 103.525117][ T6465] R13: 0000000000000000 R14: 00007fa2b01a5fa0 R15: 00007ffe29ca3738 [ 103.525138][ T6465] [ 103.830578][ C0] vkms_vblank_simulate: vblank timer overrun [ 103.872674][ T30] audit: type=1400 audit(1744299087.079:440): avc: denied { getopt } for pid=6468 comm="syz.2.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 103.894213][ T30] audit: type=1400 audit(1744299087.089:441): avc: denied { ioctl } for pid=6468 comm="syz.2.139" path="socket:[9618]" dev="sockfs" ino=9618 ioctlcmd=0x89f9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 103.920644][ T30] audit: type=1400 audit(1744299087.119:442): avc: denied { write } for pid=5179 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 103.997101][ T30] audit: type=1400 audit(1744299087.119:443): avc: denied { remove_name } for pid=5179 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 104.020306][ T30] audit: type=1400 audit(1744299087.119:444): avc: denied { rename } for pid=5179 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 104.042470][ T30] audit: type=1400 audit(1744299087.119:445): avc: denied { add_name } for pid=5179 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 104.064847][ C0] vkms_vblank_simulate: vblank timer overrun [ 104.209471][ T6477] loop6: detected capacity change from 0 to 524287999 [ 104.551268][ T5876] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 104.732535][ T5876] usb 5-1: Using ep0 maxpacket: 16 [ 104.743995][ T5876] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 104.754849][ T5876] usb 5-1: config 0 descriptor has 1 excess byte, ignoring [ 104.764665][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802ac9ec00: rx timeout, send abort [ 104.784673][ T5876] usb 5-1: config 0 has no interface number 0 [ 104.796632][ T5876] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 104.806026][ T5876] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.819687][ T5876] usb 5-1: Product: syz [ 104.823849][ T5876] usb 5-1: Manufacturer: syz [ 104.829745][ T5876] usb 5-1: SerialNumber: syz [ 104.838492][ T5876] usb 5-1: config 0 descriptor?? [ 104.852305][ T5876] usb 5-1: Found UVC 0.00 device syz (046d:08f3) [ 104.870550][ T5876] usb 5-1: No valid video chain found. [ 105.090511][ T6484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.099334][ T6484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.134533][ T5875] usb 5-1: USB disconnect, device number 9 [ 105.273611][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802ac9ec00: abort rx timeout. Force session deactivation [ 106.477067][ T6519] SELinux: ebitmap: map size 1701995264 does not match my size 64 (high bit was 191198305) [ 106.526261][ T6519] SELinux: failed to load policy [ 106.659748][ T5811] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 106.861631][ T6530] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.870650][ T6530] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.884783][ T5811] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 107.107458][ T5811] usb 1-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 107.116721][ T5811] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.124847][ T5811] usb 1-1: Product: syz [ 107.129018][ T5811] usb 1-1: Manufacturer: syz [ 107.133625][ T5811] usb 1-1: SerialNumber: syz [ 107.139469][ T5811] usb 1-1: config 0 descriptor?? [ 107.414459][ T9] usb 1-1: USB disconnect, device number 13 [ 107.529779][ T5811] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 107.612635][ T6540] nbd: couldn't find a device at index 8960 [ 107.710985][ T5811] usb 4-1: Using ep0 maxpacket: 8 [ 107.741604][ T5811] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 107.769632][ T5811] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 107.936560][ T5811] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 108.110319][ T5811] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 108.247377][ T5811] usb 4-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 108.282073][ T5811] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.294451][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 108.294463][ T30] audit: type=1400 audit(1744299091.539:465): avc: denied { write } for pid=6544 comm="syz.1.159" path="socket:[9753]" dev="sockfs" ino=9753 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 108.319653][ T5811] usb 4-1: Product: syz [ 108.359342][ T5811] usb 4-1: Manufacturer: syz [ 108.368160][ T5811] usb 4-1: SerialNumber: syz [ 108.406964][ T30] audit: type=1400 audit(1744299091.539:466): avc: denied { nlmsg_read } for pid=6544 comm="syz.1.159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 108.471724][ T5811] usb 4-1: config 0 descriptor?? [ 108.508078][ T5811] input: iMON Panel, Knob and Mouse(15c2:003b) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input14 [ 108.602355][ T30] audit: type=1400 audit(1744299091.849:467): avc: denied { ioctl } for pid=6552 comm="syz.1.162" path="socket:[10699]" dev="sockfs" ino=10699 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 108.679838][ T81] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 108.757959][ T6556] can: request_module (can-proto-5) failed. [ 108.876386][ T81] usb 5-1: too many configurations: 151, using maximum allowed: 8 [ 108.910396][ T81] usb 5-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 108.936742][ T81] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 108.976577][ T81] usb 5-1: Product: syz [ 108.993623][ T81] usb 5-1: Manufacturer: syz [ 108.998232][ T81] usb 5-1: SerialNumber: syz [ 109.031762][ T81] usb 5-1: config 0 descriptor?? [ 109.121442][ T30] audit: type=1400 audit(1744299092.339:468): avc: denied { open } for pid=6564 comm="syz.2.167" path="/dev/ptyq8" dev="devtmpfs" ino=127 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 109.591472][ T81] usb 5-1: USB disconnect, device number 10 [ 110.468549][ T5811] imon:send_packet: packet tx failed (-71) [ 110.499888][ T5811] imon 4-1:0.0: panel buttons/knobs setup failed [ 110.538632][ T6586] loop7: detected capacity change from 0 to 16384 [ 110.623041][ T5811] rc_core: IR keymap rc-imon-pad not found [ 110.629009][ T5811] Registered IR keymap rc-empty [ 110.642449][ T5811] imon 4-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 110.696399][ T5811] imon 4-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 110.751141][ T5811] imon:send_packet: packet tx failed (-71) [ 110.772551][ T5811] imon 4-1:0.0: remote input dev register failed [ 110.799468][ T5811] imon 4-1:0.0: imon_init_intf0: rc device setup failed [ 110.880382][ T30] audit: type=1326 audit(1744299094.119:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6592 comm="syz.2.172" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb84cf8d169 code=0x0 [ 110.973845][ T6596] @: renamed from vlan0 (while UP) [ 111.122290][ T30] audit: type=1400 audit(1744299094.359:470): avc: denied { read } for pid=6592 comm="syz.2.172" name="sg0" dev="devtmpfs" ino=741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 111.221909][ T5811] imon 4-1:0.0: unable to initialize intf0, err 0 [ 111.228345][ T5811] imon:imon_probe: failed to initialize context! [ 111.235736][ T30] audit: type=1400 audit(1744299094.359:471): avc: denied { open } for pid=6592 comm="syz.2.172" path="/dev/sg0" dev="devtmpfs" ino=741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 111.297566][ T5811] imon 4-1:0.0: unable to register, err -19 [ 111.307687][ T5811] usb 4-1: USB disconnect, device number 13 [ 111.557430][ T6604] netlink: 52 bytes leftover after parsing attributes in process `syz.3.176'. [ 112.066642][ T30] audit: type=1400 audit(1744299095.299:472): avc: denied { mounton } for pid=6607 comm="syz.1.178" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 112.192708][ T6613] syz.1.178: attempt to access beyond end of device [ 112.192708][ T6613] nbd1: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 112.521863][ T6613] SQUASHFS error: Failed to read block 0x0: -5 [ 112.540506][ T6613] unable to read squashfs_super_block [ 112.982513][ T30] audit: type=1400 audit(1744299096.229:473): avc: denied { write } for pid=6623 comm="syz.0.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 113.061333][ T30] audit: type=1400 audit(1744299096.259:474): avc: denied { name_connect } for pid=6623 comm="syz.0.181" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 113.702143][ T30] audit: type=1400 audit(1744299096.949:475): avc: denied { unmount } for pid=5833 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 114.195277][ T30] audit: type=1400 audit(1744299097.439:476): avc: denied { append } for pid=6633 comm="syz.3.185" name="cec0" dev="devtmpfs" ino=948 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 114.367747][ T30] audit: type=1400 audit(1744299097.479:477): avc: denied { unlink } for pid=6633 comm="syz.3.185" name="#1" dev="tmpfs" ino=186 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 114.396823][ T6638] netlink: 4 bytes leftover after parsing attributes in process `syz.0.184'. [ 114.396989][ T30] audit: type=1400 audit(1744299097.479:478): avc: denied { mount } for pid=6633 comm="syz.3.185" name="/" dev="overlay" ino=182 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 114.427400][ C0] vkms_vblank_simulate: vblank timer overrun [ 114.805438][ T6643] netlink: 44 bytes leftover after parsing attributes in process `syz.3.186'. [ 114.858360][ T30] audit: type=1400 audit(1744299098.099:479): avc: denied { ioctl } for pid=6641 comm="syz.3.186" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf25 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 115.014546][ T6643] netlink: 43 bytes leftover after parsing attributes in process `syz.3.186'. [ 115.090568][ T6643] netlink: 'syz.3.186': attribute type 5 has an invalid length. [ 115.131924][ T6643] netlink: 43 bytes leftover after parsing attributes in process `syz.3.186'. [ 115.719794][ T30] audit: type=1400 audit(1744299098.949:480): avc: denied { setopt } for pid=6654 comm="syz.3.190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 116.156036][ T6665] netlink: 'syz.0.193': attribute type 10 has an invalid length. [ 116.168215][ T6665] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.178389][ T6665] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 116.764856][ T30] audit: type=1400 audit(1744299100.009:481): avc: denied { ioctl } for pid=6676 comm="syz.4.197" path="socket:[10001]" dev="sockfs" ino=10001 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 117.203526][ T30] audit: type=1400 audit(1744299100.449:482): avc: denied { write } for pid=6686 comm="syz.1.200" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 117.296684][ T30] audit: type=1400 audit(1744299100.479:483): avc: denied { unmount } for pid=5822 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 117.406694][ T30] audit: type=1400 audit(1744299100.649:484): avc: denied { connect } for pid=6688 comm="syz.0.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 117.443759][ T6689] exFAT-fs (nullb0): invalid boot record signature [ 117.480856][ T6689] exFAT-fs (nullb0): failed to read boot sector [ 117.529210][ T6693] overlay: Unknown parameter 'obj_user' [ 117.535778][ T6689] exFAT-fs (nullb0): failed to recognize exfat type [ 117.929846][ T81] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 118.099652][ T81] usb 2-1: Using ep0 maxpacket: 16 [ 118.111763][ T81] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.126761][ T81] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 118.136951][ T81] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.240899][ T5876] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 118.311692][ T81] usb 2-1: config 0 descriptor?? [ 118.359750][ T5811] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 118.439990][ T5876] usb 5-1: Using ep0 maxpacket: 16 [ 118.509420][ T5876] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.521112][ T5811] usb 1-1: Using ep0 maxpacket: 16 [ 118.985507][ T5876] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 118.996778][ T5876] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 119.021199][ T5811] usb 1-1: config 1 has an invalid interface number: 203 but max is 0 [ 119.029369][ T5811] usb 1-1: config 1 has no interface number 0 [ 119.046739][ T5876] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 119.056749][ T5876] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 119.066861][ T5876] usb 5-1: SerialNumber: syz [ 119.075223][ T5811] usb 1-1: New USB device found, idVendor=0b95, idProduct=2790, bcdDevice=63.9c [ 119.091710][ T5811] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.104919][ T6699] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 119.113155][ T5811] usb 1-1: Product: syz [ 119.118252][ T5876] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 119.126535][ T5811] usb 1-1: Manufacturer: syz [ 119.131338][ T5811] usb 1-1: SerialNumber: syz [ 119.346369][ T81] usbhid 2-1:0.0: can't add hid device: -71 [ 119.367429][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 119.367441][ T30] audit: type=1400 audit(1744299102.609:487): avc: denied { unmount } for pid=5820 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 119.381317][ T81] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 119.537138][ T81] usb 2-1: USB disconnect, device number 8 [ 119.732451][ T5875] usb 1-1: USB disconnect, device number 14 [ 119.737624][ T6699] syzkaller0: entered promiscuous mode [ 119.744646][ T6699] syzkaller0: entered allmulticast mode [ 120.211896][ T30] audit: type=1400 audit(1744299103.449:488): avc: denied { listen } for pid=6736 comm="syz.3.209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 120.691008][ T30] audit: type=1400 audit(1744299103.939:489): avc: denied { audit_read } for pid=6755 comm="syz.1.211" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 120.729491][ T6759] FAULT_INJECTION: forcing a failure. [ 120.729491][ T6759] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 120.748809][ T6759] CPU: 1 UID: 0 PID: 6759 Comm: syz.0.212 Not tainted 6.15.0-rc1-syzkaller-00065-g3b07108ada81 #0 PREEMPT(full) [ 120.748830][ T6759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 120.748839][ T6759] Call Trace: [ 120.748843][ T6759] [ 120.748849][ T6759] dump_stack_lvl+0x16c/0x1f0 [ 120.748873][ T6759] should_fail_ex+0x512/0x640 [ 120.748893][ T6759] strncpy_from_user+0x3b/0x2e0 [ 120.748911][ T6759] setxattr_copy+0x8a/0x210 [ 120.748926][ T6759] path_setxattrat+0x103/0x290 [ 120.748942][ T6759] ? __pfx_path_setxattrat+0x10/0x10 [ 120.748961][ T6759] ? ksys_write+0x190/0x240 [ 120.748990][ T6759] ? fput+0x70/0xf0 [ 120.749005][ T6759] ? ksys_write+0x1b9/0x240 [ 120.749017][ T6759] ? __pfx_ksys_write+0x10/0x10 [ 120.749028][ T6759] ? rcu_is_watching+0x12/0xc0 [ 120.749049][ T6759] __x64_sys_setxattr+0xc6/0x140 [ 120.749063][ T6759] ? do_syscall_64+0x91/0x260 [ 120.749084][ T6759] ? lockdep_hardirqs_on+0x7c/0x110 [ 120.749101][ T6759] do_syscall_64+0xcd/0x260 [ 120.749121][ T6759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.749136][ T6759] RIP: 0033:0x7f030698d169 [ 120.749148][ T6759] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.749161][ T6759] RSP: 002b:00007f0307752038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 120.749175][ T6759] RAX: ffffffffffffffda RBX: 00007f0306ba5fa0 RCX: 00007f030698d169 [ 120.749184][ T6759] RDX: 00002000000000c0 RSI: 0000200000000000 RDI: 0000200000000080 [ 120.749193][ T6759] RBP: 00007f0307752090 R08: 0000000000000000 R09: 0000000000000000 [ 120.749201][ T6759] R10: 000000000000000a R11: 0000000000000246 R12: 0000000000000001 [ 120.749209][ T6759] R13: 0000000000000000 R14: 00007f0306ba5fa0 R15: 00007ffc4a8346e8 [ 120.749230][ T6759] [ 121.741974][ T5811] usb 1-1: new low-speed USB device number 15 using dummy_hcd [ 121.911494][ T5811] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 121.922539][ T5811] usb 1-1: config 0 has no interface number 0 [ 121.928712][ T5811] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 121.941792][ T5811] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 121.952814][ T5811] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 121.965245][ T5811] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 121.978959][ T5811] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 121.992419][ T5811] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 122.005457][ T5811] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 122.014652][ T5811] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.031307][ T5811] usb 1-1: config 0 descriptor?? [ 122.036986][ T6766] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 122.047257][ T6766] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 122.062030][ T5811] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 122.217206][ T5876] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 122.276882][ T5876] usb 5-1: USB disconnect, device number 11 [ 122.693912][ T5874] usb 1-1: USB disconnect, device number 15 [ 122.720242][ T5874] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 122.729784][ T5875] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 123.436463][ T5875] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 123.453333][ T5875] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.517807][ T30] audit: type=1400 audit(1744299106.759:490): avc: denied { accept } for pid=6814 comm="syz.2.219" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 123.520463][ T5875] usb 4-1: config 0 descriptor?? [ 123.543020][ T6802] ALSA: mixer_oss: invalid OSS volume '' [ 123.586569][ T5875] cp210x 4-1:0.0: cp210x converter detected [ 123.601018][ T6819] netlink: 4 bytes leftover after parsing attributes in process `syz.1.220'. [ 123.638410][ T30] audit: type=1400 audit(1744299106.879:491): avc: denied { write } for pid=6814 comm="syz.2.219" laddr=::1 lport=20000 faddr=::1 fport=35416 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 123.665054][ T6819] netlink: 44 bytes leftover after parsing attributes in process `syz.1.220'. [ 123.702578][ T6819] netlink: 43 bytes leftover after parsing attributes in process `syz.1.220'. [ 123.711711][ T6819] netlink: 43 bytes leftover after parsing attributes in process `syz.1.220'. [ 123.751370][ T6824] netlink: 'syz.4.222': attribute type 1 has an invalid length. [ 123.759153][ T6824] netlink: 244 bytes leftover after parsing attributes in process `syz.4.222'. [ 123.846544][ T6824] xt_hashlimit: size too large, truncated to 1048576 [ 123.939543][ T6829] kvm: MWAIT instruction emulated as NOP! [ 124.076859][ T5875] cp210x 4-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 124.096553][ T5875] cp210x 4-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 124.113484][ T5875] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 124.135215][ T5875] usb 4-1: cp210x converter now attached to ttyUSB0 [ 124.159511][ T5875] usb 4-1: USB disconnect, device number 14 [ 124.172484][ T5875] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 124.180770][ T5875] cp210x 4-1:0.0: device disconnected [ 124.276121][ T30] audit: type=1400 audit(1744299107.519:492): avc: denied { create } for pid=6840 comm="syz.1.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 124.505626][ T30] audit: type=1400 audit(1744299107.749:493): avc: denied { setattr } for pid=6850 comm="syz.0.226" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 124.735323][ T30] audit: type=1400 audit(1744299107.979:494): avc: denied { accept } for pid=6858 comm="syz.4.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 125.181233][ T6859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.352929][ T6859] bond0: (slave rose0): Enslaving as an active interface with an up link [ 125.605879][ T30] audit: type=1400 audit(1744299108.849:495): avc: denied { create } for pid=6870 comm="syz.0.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 125.742412][ T30] audit: type=1400 audit(1744299108.939:496): avc: denied { bind } for pid=6870 comm="syz.0.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 126.046787][ T30] audit: type=1400 audit(1744299108.939:497): avc: denied { write } for pid=6870 comm="syz.0.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 126.251886][ T6877] netlink: 'syz.1.229': attribute type 10 has an invalid length. [ 126.259747][ T6877] netlink: 40 bytes leftover after parsing attributes in process `syz.1.229'. [ 126.394003][ T6877] dummy0: entered promiscuous mode [ 126.419962][ T6877] bridge0: port 3(dummy0) entered blocking state [ 126.436603][ T6877] bridge0: port 3(dummy0) entered disabled state [ 126.449427][ T6877] dummy0: entered allmulticast mode [ 126.520360][ T30] audit: type=1400 audit(1744299109.759:498): avc: denied { write } for pid=6885 comm="syz.0.232" path="socket:[12344]" dev="sockfs" ino=12344 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 126.605928][ T30] audit: type=1400 audit(1744299109.809:499): avc: denied { create } for pid=6889 comm="syz.4.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 126.639680][ T6815] dccp_close: ABORT with 36 bytes unread [ 126.760709][ T6898] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 126.767676][ T30] audit: type=1400 audit(1744299109.819:500): avc: denied { setopt } for pid=6887 comm="syz.3.233" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 126.931160][ T30] audit: type=1400 audit(1744299109.819:501): avc: denied { write } for pid=6889 comm="syz.4.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 127.289315][ T30] audit: type=1400 audit(1744299109.819:502): avc: denied { read } for pid=6887 comm="syz.3.233" laddr=::ffff:172.20.20.0 lport=20000 faddr=::ffff:172.20.20.10 fport=46698 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 127.323068][ T6887] dccp_close: ABORT with 992 bytes unread [ 127.410857][ T6906] xt_recent: Unsupported userspace flags (00000042) [ 127.714976][ T6918] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.237' sets config #0 [ 130.443832][ T6943] x_tables: duplicate underflow at hook 2 [ 131.014078][ T5874] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 131.124500][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 131.124576][ T30] audit: type=1400 audit(1744299114.369:505): avc: denied { mount } for pid=6953 comm="syz.2.248" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 131.213675][ T5874] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 131.233557][ T5874] usb 4-1: config 0 has no interface number 0 [ 131.254298][ T5874] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.328399][ T5874] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.393128][ T30] audit: type=1400 audit(1744299114.639:506): avc: denied { connect } for pid=6963 comm="syz.1.251" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 131.832932][ T5874] usb 4-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 131.842660][ T5874] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.851080][ T30] audit: type=1400 audit(1744299114.809:507): avc: denied { ioctl } for pid=6953 comm="syz.2.248" path="socket:[12434]" dev="sockfs" ino=12434 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 131.878896][ T5874] usb 4-1: config 0 descriptor?? [ 132.063360][ T30] audit: type=1400 audit(1744299115.169:508): avc: denied { name_bind } for pid=6972 comm="syz.4.253" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 132.136229][ T6974] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.252' sets config #1 [ 132.645414][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.670257][ T5875] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 132.689269][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.693824][ T30] audit: type=1400 audit(1744299115.929:509): avc: denied { create } for pid=6979 comm="syz.1.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 132.895652][ T30] audit: type=1400 audit(1744299115.929:510): avc: denied { bind } for pid=6979 comm="syz.1.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 132.959861][ T5875] usb 3-1: Using ep0 maxpacket: 8 [ 133.004180][ T5875] usb 3-1: config 162 has an invalid interface number: 84 but max is 2 [ 133.023620][ T30] audit: type=1400 audit(1744299115.929:511): avc: denied { write } for pid=6979 comm="syz.1.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 133.074292][ T6993] dns_resolver: Unsupported content type (152) [ 133.119656][ T5875] usb 3-1: config 162 has an invalid interface number: 3 but max is 2 [ 133.127856][ T5875] usb 3-1: config 162 has no interface number 0 [ 133.139636][ T5875] usb 3-1: config 162 has no interface number 1 [ 133.145944][ T5875] usb 3-1: config 162 interface 84 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 133.189634][ T5875] usb 3-1: config 162 interface 2 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 133.196567][ T30] audit: type=1326 audit(1744299116.439:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6996 comm="syz.1.259" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9433f8d169 code=0x0 [ 133.223125][ T5875] usb 3-1: config 162 interface 2 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 133.223155][ T5875] usb 3-1: config 162 interface 2 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 133.223177][ T5875] usb 3-1: config 162 interface 2 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 133.223198][ T5875] usb 3-1: config 162 interface 2 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 133.223222][ T5875] usb 3-1: config 162 interface 84 has no altsetting 0 [ 133.223237][ T5875] usb 3-1: config 162 interface 2 has no altsetting 0 [ 133.233281][ T5875] usb 3-1: New USB device found, idVendor=0e8d, idProduct=763f, bcdDevice=9b.23 [ 133.300777][ T30] audit: type=1400 audit(1744299116.539:513): avc: denied { read } for pid=6992 comm="syz.0.258" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 133.349263][ T30] audit: type=1400 audit(1744299116.539:514): avc: denied { open } for pid=6992 comm="syz.0.258" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 133.362849][ T5875] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.447728][ T5874] usbhid 4-1:0.1: can't add hid device: -71 [ 133.459349][ T5874] usbhid 4-1:0.1: probe with driver usbhid failed with error -71 [ 133.518402][ T5875] usb 3-1: Product: syz [ 133.529760][ T5811] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 133.539620][ T5875] usb 3-1: Manufacturer: syz [ 133.544222][ T5875] usb 3-1: SerialNumber: syz [ 133.569559][ T5874] usb 4-1: USB disconnect, device number 15 [ 133.690503][ T5811] usb 1-1: Using ep0 maxpacket: 16 [ 133.708593][ T5811] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 133.743185][ T5811] usb 1-1: New USB device found, idVendor=05ac, idProduct=0258, bcdDevice= 0.00 [ 133.764630][ T5811] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.817657][ T5811] usb 1-1: config 0 descriptor?? [ 133.844542][ T5811] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 133.936060][ T5831] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 133.968565][ T5875] usb 3-1: USB disconnect, device number 8 [ 134.049226][ T6993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.068983][ T6993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.119525][ T5811] usb 1-1: USB disconnect, device number 16 [ 134.293160][ T7023] sg_write: data in/out 150995429/25 bytes for SCSI command 0x0-- guessing data in; [ 134.293160][ T7023] program syz.4.261 not setting count and/or reply_len properly [ 135.887307][ T7064] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.266' sets config #1 [ 136.213358][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 136.213373][ T30] audit: type=1400 audit(1744299119.459:526): avc: denied { append } for pid=7066 comm="syz.0.269" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 136.301113][ T7069] xt_TCPMSS: Only works on TCP SYN packets [ 136.309113][ T30] audit: type=1400 audit(1744299119.489:527): avc: denied { accept } for pid=7071 comm="syz.2.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 136.354423][ T30] audit: type=1400 audit(1744299119.519:528): avc: denied { bind } for pid=7066 comm="syz.0.269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 136.437668][ T30] audit: type=1400 audit(1744299119.679:529): avc: denied { read write } for pid=7080 comm="syz.3.271" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 136.598621][ T30] audit: type=1400 audit(1744299119.679:530): avc: denied { open } for pid=7080 comm="syz.3.271" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 136.651209][ T7091] CIFS: VFS: Malformed UNC in devname [ 136.749882][ T30] audit: type=1400 audit(1744299119.789:531): avc: denied { map } for pid=7083 comm="syz.0.272" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 136.848101][ T30] audit: type=1400 audit(1744299119.789:532): avc: denied { execute } for pid=7083 comm="syz.0.272" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 136.964396][ T30] audit: type=1326 audit(1744299120.179:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7097 comm="syz.2.277" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb84cf8d169 code=0x0 [ 137.024874][ T7106] FAULT_INJECTION: forcing a failure. [ 137.024874][ T7106] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 137.052371][ T7106] CPU: 0 UID: 0 PID: 7106 Comm: syz.4.273 Not tainted 6.15.0-rc1-syzkaller-00065-g3b07108ada81 #0 PREEMPT(full) [ 137.052395][ T7106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 137.052405][ T7106] Call Trace: [ 137.052411][ T7106] [ 137.052417][ T7106] dump_stack_lvl+0x16c/0x1f0 [ 137.052445][ T7106] should_fail_ex+0x512/0x640 [ 137.052467][ T7106] _copy_from_user+0x2e/0xd0 [ 137.052488][ T7106] copy_msghdr_from_user+0x98/0x160 [ 137.052509][ T7106] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 137.052540][ T7106] ___sys_sendmsg+0xfe/0x1d0 [ 137.052561][ T7106] ? __pfx____sys_sendmsg+0x10/0x10 [ 137.052610][ T7106] __sys_sendmsg+0x16d/0x220 [ 137.052631][ T7106] ? __pfx___sys_sendmsg+0x10/0x10 [ 137.052658][ T7106] ? rcu_is_watching+0x12/0xc0 [ 137.052686][ T7106] do_syscall_64+0xcd/0x260 [ 137.052710][ T7106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.052726][ T7106] RIP: 0033:0x7f0ff078d169 [ 137.052741][ T7106] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 137.052756][ T7106] RSP: 002b:00007f0ff1641038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 137.052772][ T7106] RAX: ffffffffffffffda RBX: 00007f0ff09a6160 RCX: 00007f0ff078d169 [ 137.052782][ T7106] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 137.052792][ T7106] RBP: 00007f0ff1641090 R08: 0000000000000000 R09: 0000000000000000 [ 137.052801][ T7106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 137.052811][ T7106] R13: 0000000000000000 R14: 00007f0ff09a6160 R15: 00007ffe4004d438 [ 137.052833][ T7106] [ 137.053597][ T7101] netlink: 356 bytes leftover after parsing attributes in process `syz.1.275'. [ 138.199775][ T30] audit: type=1400 audit(1744299121.439:534): avc: denied { setattr } for pid=7129 comm="syz.3.281" path="socket:[12024]" dev="sockfs" ino=12024 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 138.249847][ T5875] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 138.337267][ T30] audit: type=1400 audit(1744299121.449:535): avc: denied { connect } for pid=7129 comm="syz.3.281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 138.459662][ T5875] usb 3-1: Using ep0 maxpacket: 8 [ 138.500417][ T5875] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 138.530181][ T5875] usb 3-1: config 0 has no interface number 0 [ 138.539958][ T5875] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 138.753963][ T7138] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.283' sets config #1 [ 138.982520][ T5875] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 139.276995][ T5875] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 139.459689][ T5875] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 139.512882][ T5875] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 139.529623][ T5875] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.559017][ T5875] usb 3-1: config 0 descriptor?? [ 139.579873][ T5875] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 139.821418][ T7118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.901733][ T7118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.076570][ T7160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.142446][ T7160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.234445][ T7161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.279274][ T7161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.291181][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 141.291195][ T30] audit: type=1400 audit(1744299124.539:541): avc: denied { bind } for pid=7173 comm="syz.4.294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 141.755582][ T7181] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.297' sets config #1 [ 142.329998][ T5811] usb 3-1: USB disconnect, device number 9 [ 142.393107][ T5811] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 142.534674][ T7193] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(20) [ 142.541513][ T7193] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 142.574230][ T7193] vhci_hcd vhci_hcd.0: Device attached [ 142.604629][ T7199] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(23) [ 142.611257][ T7199] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 142.630671][ T7199] vhci_hcd vhci_hcd.0: Device attached [ 142.648286][ T7193] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 142.674494][ T7193] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(27) [ 142.681126][ T7193] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 142.694197][ T7193] vhci_hcd vhci_hcd.0: Device attached [ 142.749899][ T5811] usb 3-1: new low-speed USB device number 10 using dummy_hcd [ 142.759784][ T5876] vhci_hcd: vhci_device speed not set [ 142.900528][ T7199] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 142.920272][ T7193] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(29) [ 142.926901][ T7193] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 142.952003][ T7193] vhci_hcd vhci_hcd.0: Device attached [ 142.999651][ T5876] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 143.004382][ T7211] vhci_hcd: connection closed [ 143.007350][ T7196] vhci_hcd: connection closed [ 143.007875][ T7206] vhci_hcd: connection closed [ 143.012077][ T7200] vhci_hcd: connection closed [ 143.013845][ T7197] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 143.036308][ T2947] vhci_hcd: stop threads [ 143.061869][ T2947] vhci_hcd: release socket [ 143.080978][ T5811] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 143.084598][ T2947] vhci_hcd: disconnect device [ 143.093002][ T5811] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.117704][ T2947] vhci_hcd: stop threads [ 143.126182][ T2947] vhci_hcd: release socket [ 143.146025][ T2947] vhci_hcd: disconnect device [ 143.151747][ T2947] vhci_hcd: stop threads [ 143.155992][ T2947] vhci_hcd: release socket [ 143.162932][ T2947] vhci_hcd: disconnect device [ 143.188839][ T2947] vhci_hcd: stop threads [ 143.193774][ T2947] vhci_hcd: release socket [ 143.202316][ T2947] vhci_hcd: disconnect device [ 143.261558][ T5811] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 143.271670][ T5811] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.282537][ T5811] usb 3-1: config 0 descriptor?? [ 143.735595][ T30] audit: type=1400 audit(1744299126.619:542): avc: denied { sqpoll } for pid=7218 comm="syz.1.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 143.842106][ T30] audit: type=1400 audit(1744299127.089:543): avc: denied { listen } for pid=7228 comm="syz.3.307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 144.154204][ T973] usb 3-1: USB disconnect, device number 10 [ 144.234634][ T970] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 144.429998][ T970] usb 5-1: Using ep0 maxpacket: 8 [ 144.462700][ T970] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 144.485854][ T970] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 144.551992][ T970] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 144.584225][ T970] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 144.718667][ T970] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 144.851884][ T7265] xt_nat: multiple ranges no longer supported [ 144.864630][ T30] audit: type=1400 audit(1744299128.109:544): avc: denied { setopt } for pid=7263 comm="syz.3.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 144.953881][ T970] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 145.049888][ T970] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 145.058917][ T970] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.124174][ T7259] block nbd1: shutting down sockets [ 145.151954][ T30] audit: type=1400 audit(1744299128.379:545): avc: denied { watch_reads } for pid=7270 comm="syz.0.318" path="/58" dev="tmpfs" ino=322 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 145.179836][ T30] audit: type=1400 audit(1744299128.379:546): avc: denied { read } for pid=7270 comm="syz.0.318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 145.792742][ T7236] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 145.804591][ T970] usb 5-1: usb_control_msg returned -32 [ 145.810704][ T970] usbtmc 5-1:16.0: can't read capabilities [ 146.733952][ T970] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 146.780088][ T5811] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 146.931381][ T5811] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 146.981557][ T5811] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 146.981645][ T970] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 147.003646][ T5811] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.004364][ T970] usb 3-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 147.023492][ T970] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.054548][ T5875] usb 5-1: USB disconnect, device number 12 [ 147.207916][ T30] audit: type=1400 audit(1744299130.329:547): avc: denied { bind } for pid=7305 comm="syz.1.328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 147.468166][ T5811] usb 1-1: config 0 descriptor?? [ 147.474057][ T7291] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 147.484852][ T970] usb 3-1: Product: syz [ 147.499883][ T970] usb 3-1: Manufacturer: syz [ 147.505997][ T970] usb 3-1: SerialNumber: syz [ 147.959935][ T7317] syzkaller0: entered promiscuous mode [ 147.965478][ T7317] syzkaller0: entered allmulticast mode [ 147.993203][ T7317] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 148.231537][ T5811] elan 0003:04F3:0755.0003: unknown main item tag 0x3 [ 148.258059][ T5811] elan 0003:04F3:0755.0003: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0 [ 148.274522][ T30] audit: type=1400 audit(1744299131.519:548): avc: denied { setopt } for pid=7290 comm="syz.0.324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 148.289734][ T5876] vhci_hcd: vhci_device speed not set [ 148.293829][ T30] audit: type=1400 audit(1744299131.519:549): avc: denied { read } for pid=7290 comm="syz.0.324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 148.439471][ T5811] usb 1-1: USB disconnect, device number 17 [ 148.542487][ T7320] exFAT-fs (nullb0): invalid boot record signature [ 148.549048][ T7320] exFAT-fs (nullb0): failed to read boot sector [ 148.693444][ T7320] exFAT-fs (nullb0): failed to recognize exfat type [ 148.721178][ T970] usb 3-1: selecting invalid altsetting 1 [ 148.928311][ T970] LME2510(C): Firmware Status: 1a 03 34 00 32 00 [ 148.928411][ T970] dvb_usb_lmedm04 3-1:2.0: probe with driver dvb_usb_lmedm04 failed with error -22 [ 149.008575][ T7329] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.333' sets config #0 [ 149.428482][ T970] usb 3-1: USB disconnect, device number 11 [ 149.899719][ T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 150.123668][ T7346] overlay: ./bus is not a directory [ 150.870678][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 150.906893][ T9] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 150.928886][ T9] usb 2-1: can't read configurations, error -61 [ 151.131429][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 151.751971][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 152.134756][ T9] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 152.149509][ T9] usb 2-1: can't read configurations, error -61 [ 152.193862][ T9] usb usb2-port1: attempt power cycle [ 152.267905][ T30] audit: type=1400 audit(1744299135.509:550): avc: denied { ioctl } for pid=7377 comm="syz.4.345" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x7001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 152.384983][ T30] audit: type=1400 audit(1744299135.629:551): avc: denied { mount } for pid=7384 comm="syz.2.347" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 152.421611][ T7385] netlink: 552 bytes leftover after parsing attributes in process `syz.2.347'. [ 152.474168][ T30] audit: type=1400 audit(1744299135.649:552): avc: denied { mounton } for pid=7384 comm="syz.2.347" path="/61/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 152.501461][ T7385] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 153.431387][ T7397] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.348' sets config #0 [ 154.319794][ T30] audit: type=1400 audit(1744299137.469:553): avc: denied { write } for pid=7402 comm="syz.0.351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 154.595200][ T7403] netlink: 44 bytes leftover after parsing attributes in process `syz.0.351'. [ 154.624618][ T7410] netlink: 'syz.4.354': attribute type 21 has an invalid length. [ 154.646426][ T30] audit: type=1400 audit(1744299137.889:554): avc: denied { unmount } for pid=5821 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 154.666401][ C1] vkms_vblank_simulate: vblank timer overrun [ 154.668420][ T7410] netlink: 128 bytes leftover after parsing attributes in process `syz.4.354'. [ 154.704669][ T7410] netlink: 'syz.4.354': attribute type 5 has an invalid length. [ 154.717526][ T7410] netlink: 'syz.4.354': attribute type 6 has an invalid length. [ 154.737259][ T7410] netlink: 3 bytes leftover after parsing attributes in process `syz.4.354'. [ 154.777597][ T7415] netlink: 20 bytes leftover after parsing attributes in process `syz.0.357'. [ 154.786529][ T7415] [ 154.788849][ T7415] ===================================== [ 154.794378][ T7415] WARNING: bad unlock balance detected! [ 154.799910][ T7415] 6.15.0-rc1-syzkaller-00065-g3b07108ada81 #0 Not tainted [ 154.807444][ T7415] ------------------------------------- [ 154.812967][ T7415] syz.0.357/7415 is trying to release lock (&dev_instance_lock_key) at: [ 154.821272][ T7415] [] do_setlink.constprop.0+0x860/0x44f0 [ 154.828800][ T7415] but there are no more locks to release! [ 154.834488][ T7415] [ 154.834488][ T7415] other info that might help us debug this: [ 154.842517][ T7415] 1 lock held by syz.0.357/7415: [ 154.847427][ T7415] #0: ffffffff9012bda8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x600/0x2000 [ 154.856451][ T7415] [ 154.856451][ T7415] stack backtrace: [ 154.862317][ T7415] CPU: 1 UID: 0 PID: 7415 Comm: syz.0.357 Not tainted 6.15.0-rc1-syzkaller-00065-g3b07108ada81 #0 PREEMPT(full) [ 154.862334][ T7415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 154.862343][ T7415] Call Trace: [ 154.862347][ T7415] [ 154.862352][ T7415] dump_stack_lvl+0x116/0x1f0 [ 154.862371][ T7415] ? do_setlink.constprop.0+0x860/0x44f0 [ 154.862388][ T7415] print_unlock_imbalance_bug+0x11b/0x130 [ 154.862411][ T7415] ? do_setlink.constprop.0+0x860/0x44f0 [ 154.862428][ T7415] lock_release+0x242/0x2f0 [ 154.862441][ T7415] __mutex_unlock_slowpath+0xa2/0x6a0 [ 154.862460][ T7415] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 154.862480][ T7415] ? __pfx_validate_linkmsg+0x10/0x10 [ 154.862500][ T7415] do_setlink.constprop.0+0x860/0x44f0 [ 154.862519][ T7415] ? __lock_acquire+0xaa4/0x1ba0 [ 154.862530][ T7415] ? __pfx_do_setlink.constprop.0+0x10/0x10 [ 154.862546][ T7415] ? find_held_lock+0x2b/0x80 [ 154.862563][ T7415] ? __mutex_trylock_common+0xe9/0x250 [ 154.862575][ T7415] ? __pfx___mutex_trylock_common+0x10/0x10 [ 154.862587][ T7415] ? __pfx___might_resched+0x10/0x10 [ 154.862605][ T7415] ? rcu_is_watching+0x12/0xc0 [ 154.862620][ T7415] ? trace_contention_end+0xdd/0x130 [ 154.862632][ T7415] ? __mutex_lock+0x1ca/0xb90 [ 154.862648][ T7415] ? rtnl_newlink+0x600/0x2000 [ 154.862664][ T7415] ? __pfx___mutex_lock+0x10/0x10 [ 154.862679][ T7415] ? cap_capable+0xb3/0x250 [ 154.862696][ T7415] ? netlink_ns_capable+0xfa/0x130 [ 154.862712][ T7415] rtnl_newlink+0x1446/0x2000 [ 154.862730][ T7415] ? __pfx_rtnl_newlink+0x10/0x10 [ 154.862745][ T7415] ? find_held_lock+0x2b/0x80 [ 154.862760][ T7415] ? avc_has_perm_noaudit+0x117/0x3b0 [ 154.862774][ T7415] ? avc_has_perm_noaudit+0x149/0x3b0 [ 154.862788][ T7415] ? __lock_acquire+0x5ca/0x1ba0 [ 154.862802][ T7415] ? find_held_lock+0x2b/0x80 [ 154.862817][ T7415] ? __pfx_rtnl_newlink+0x10/0x10 [ 154.862832][ T7415] ? __pfx_rtnl_newlink+0x10/0x10 [ 154.862846][ T7415] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 154.862862][ T7415] ? __pfx_rtnl_newlink+0x10/0x10 [ 154.862877][ T7415] rtnetlink_rcv_msg+0x95b/0xe90 [ 154.862893][ T7415] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 154.862913][ T7415] netlink_rcv_skb+0x16a/0x440 [ 154.862929][ T7415] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 154.862945][ T7415] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 154.862966][ T7415] ? netlink_deliver_tap+0x1ae/0xd30 [ 154.862983][ T7415] netlink_unicast+0x53a/0x7f0 [ 154.863000][ T7415] ? __pfx_netlink_unicast+0x10/0x10 [ 154.863018][ T7415] netlink_sendmsg+0x8d1/0xdd0 [ 154.863036][ T7415] ? __pfx_netlink_sendmsg+0x10/0x10 [ 154.863056][ T7415] ____sys_sendmsg+0xa95/0xc70 [ 154.863083][ T7415] ? copy_msghdr_from_user+0x10a/0x160 [ 154.863098][ T7415] ? __pfx_____sys_sendmsg+0x10/0x10 [ 154.863121][ T7415] ? try_to_wake_up+0xa2f/0x1680 [ 154.863139][ T7415] ___sys_sendmsg+0x134/0x1d0 [ 154.863156][ T7415] ? __pfx____sys_sendmsg+0x10/0x10 [ 154.863183][ T7415] __sys_sendmsg+0x16d/0x220 [ 154.863198][ T7415] ? __pfx___sys_sendmsg+0x10/0x10 [ 154.863214][ T7415] ? __x64_sys_futex+0x1e0/0x4c0 [ 154.863233][ T7415] ? rcu_is_watching+0x12/0xc0 [ 154.863250][ T7415] do_syscall_64+0xcd/0x260 [ 154.863268][ T7415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.863281][ T7415] RIP: 0033:0x7f030698d169 [ 154.863292][ T7415] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.863305][ T7415] RSP: 002b:00007f0307752038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 154.863316][ T7415] RAX: ffffffffffffffda RBX: 00007f0306ba5fa0 RCX: 00007f030698d169 [ 154.863326][ T7415] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 000000000000000f [ 154.863333][ T7415] RBP: 00007f0306a0e730 R08: 0000000000000000 R09: 0000000000000000 [ 154.863341][ T7415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 154.863348][ T7415] R13: 0000000000000000 R14: 00007f0306ba5fa0 R15: 00007ffc4a8346e8 [ 154.863359][ T7415] [ 155.245368][ C1] vkms_vblank_simulate: vblank timer overrun