last executing test programs: 2m24.663280148s ago: executing program 3 (id=922): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socket(0x400000000010, 0x3, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) 2m23.725107304s ago: executing program 3 (id=926): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={0x28, r1, 0x1, 0xf0bd27, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xfffffffffffffffa}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}]}]}, 0x28}}, 0x0) 2m23.703594827s ago: executing program 3 (id=927): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x1c, r1, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004004}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2m23.451543737s ago: executing program 3 (id=928): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) umount2(&(0x7f00000003c0)='./file0\x00', 0xa) 2m23.272943547s ago: executing program 3 (id=929): socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000240)={0x0, 0x45888, 0x800, 0x0, 0x36c}, &(0x7f0000000040)=0x0, &(0x7f00000007c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r2, 0x221f, 0x0, 0x23, 0x0, 0x0) 2m23.132929671s ago: executing program 3 (id=930): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$vsock_stream(0x28, 0x5, 0x28) socket$xdp(0x2c, 0x3, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8, @ANYBLOB="05"], 0x0) 2m22.409979398s ago: executing program 32 (id=930): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$vsock_stream(0x28, 0x5, 0x28) socket$xdp(0x2c, 0x3, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8, @ANYBLOB="05"], 0x0) 6.77517476s ago: executing program 0 (id=1736): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) syz_usb_connect$uac1(0x0, 0xa4, 0x0, 0x0) 5.712202913s ago: executing program 0 (id=1741): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r0, &(0x7f0000000000)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, 0x1c) 5.597087396s ago: executing program 0 (id=1742): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18010000110000000000000000000000181200", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x2, 0x200000000000001, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) socket$packet(0x11, 0x3, 0x300) socket$kcm(0x2, 0xa, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) pselect6(0x40, &(0x7f0000000000)={0x400, 0xff, 0x630, 0x243, 0x2, 0x2, 0x9, 0xfb33}, 0x0, 0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={[0x5]}, 0x8}) 5.48321775s ago: executing program 0 (id=1743): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = syz_usb_connect(0x5, 0x24, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x32, 0xf4, 0x49, 0x10, 0x9c0, 0x201, 0xaa4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe5, 0xa5, 0xc8}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000240)={0x20, 0x17, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000400)={0x20, 0x15, 0x1, "ac"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000340)={0x0, 0x1, 0x7f, 0xffffffff, @vifc_lcl_addr=@private=0xa010101, @empty}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e23, 0x10001, @private0, 0x5}}, 0x5, 0x2}, 0x90) 3.449899313s ago: executing program 4 (id=1749): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x8882) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}, 0xd023}) socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd29, 0x25dfdbff, {0x7, 0x0, 0x0, r4, 0x80, 0x7f, 0xa}, [@NDA_LLADDR={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040004) socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a050400000000000000000200000088000480340001800c0001007061796c6f6164002400028008000340000000000800024000000000080001400000001008000440000000022c0001800e000100696d6d6564696174650000001800028008000140000000140c000280050001002d00000024000180090001006d6574610000000014000280080001400000001408000240000000db0900"], 0xdc}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, 0x0, 0x0) listen(r1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040e070008140fc9000844ee10fd71027de6a9071d47d59a0b036e9401330e522d76334b33513c78cf397f054e7b30c4507318ed284abf532880111d1114df0e8d37d380adc00787db0c93db953bf896c156ed5e8367536f13f6d19c0cfce366cef3d0fc5dfd4bd39761473e55f43751d09e8b4ff78294b7305832c4db3fcd7efcfcd7ff71cdc4e8f598ad46c8f739157105ca848716acb88358ea"], 0xa) 3.449289296s ago: executing program 1 (id=1750): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x0, 0x8, 0x10000}, 0x28) r0 = syz_open_dev$admmidi(&(0x7f0000000080), 0x2, 0x40002) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x40045730, &(0x7f0000000200)) 3.389196032s ago: executing program 4 (id=1751): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) syz_usb_connect$uac1(0x0, 0xa4, 0x0, 0x0) 3.388947682s ago: executing program 1 (id=1752): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) read$FUSE(0xffffffffffffffff, &(0x7f0000009780)={0x2020}, 0x2020) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) sched_getattr(0x0, &(0x7f00000000c0)={0x38}, 0x38, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$sock_bt_hci(r3, 0x400448c9, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) sendto$inet(r4, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) unshare(0x40020000) 2.641603185s ago: executing program 4 (id=1755): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f00000000c0)={0x1c, 0x5, 0xd}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000008d02"]) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="2c385aa3d49100dc6626c892", 0xc) sendto$packet(0xffffffffffffffff, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) 2.407243492s ago: executing program 2 (id=1756): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x90ff}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x30000000}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x50, 0x6000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x89}, {0x3, 0x3, 0x6, 0xa, 0xa}, {0x7, 0x1, 0x2, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x3, 0x8, 0x0, 0x0, 0x4000}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.402166405s ago: executing program 1 (id=1757): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/37, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x49, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22000, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r2, 0xc004ae0a, &(0x7f0000000080)) ioctl$KVM_RUN(r1, 0xae80, 0x0) 2.353430441s ago: executing program 4 (id=1758): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz0\x00', {0x0, 0x2}, 0x2b, [0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, 0x800, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xffffe, 0x0, 0x0, 0x0, 0x3, 0x0, 0x401, 0x0, 0x0, 0x4, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x0, 0x0, 0xffffffff], [0x2, 0x2, 0x0, 0x0, 0x10000000, 0x800000, 0x0, 0x44a, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1409, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180d, 0x0, 0x1, 0x0, 0x0, 0xf, 0x0, 0x0, 0x58000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x4, 0x0, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xfffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffe04, 0x0, 0xb0d, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80001, 0x0, 0x3, 0x7f, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0xef86]}, 0x45c) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x1}}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0x18) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000580)={0x50, 0x0, r4, {0x7, 0x29, 0x1, 0x1180, 0x7ff, 0xfbc2, 0x2, 0x0, 0x0, 0x0, 0x100, 0x3}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_fscache}]}}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) 2.177031993s ago: executing program 2 (id=1759): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x8, &(0x7f0000006680)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x55, '\x00', 0x0, @fallback=0x33}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000001c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000580)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYBLOB='/\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00', @ANYRES32=r0], 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1e000035327ae308fac2dd0b920003000000e75f00000002000004", @ANYRES32, @ANYBLOB='B\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000001000000010000000d00"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000080)=@udp}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) accept4(r3, &(0x7f00000002c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, &(0x7f0000000540)=0x80, 0x80800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2.137687322s ago: executing program 1 (id=1761): syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, &(0x7f0000000380), 0x0) pread64(r0, &(0x7f0000000080)=""/110, 0x88, 0x400) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 2.119832882s ago: executing program 4 (id=1762): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x80047456, 0xf0ff1f0000001f) 1.993200174s ago: executing program 5 (id=1763): openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) socket$packet(0x11, 0x2, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x8000) ioctl$CEC_ADAP_G_CAPS(r0, 0xc04c6100, &(0x7f0000000680)) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x4002) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/custom1\x00', 0x2, 0x0) getpgrp(0xffffffffffffffff) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000200)=0x200000000) write$vhost_msg_v2(0xffffffffffffffff, 0x0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r2, &(0x7f00000004c0)={0x293, 0x7d, 0x0, {{0x500, 0xf0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1f, ' nodev{cvfox\x92\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05\xf7\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x232) 1.992929196s ago: executing program 2 (id=1764): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x90) socket$kcm(0x2, 0x200000000000001, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) socket$packet(0x11, 0x3, 0x300) socket$kcm(0x2, 0xa, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) pselect6(0x40, &(0x7f0000000000)={0x400, 0xff, 0x630, 0x243, 0x2, 0x2, 0x9, 0xfb33}, 0x0, 0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={[0x5]}, 0x8}) 1.933624053s ago: executing program 4 (id=1765): connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x2043, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x4, 0x8000) ioperm(0x24b2, 0x44, 0x1ff) r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) accept4$unix(r1, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x2) 1.05073403s ago: executing program 0 (id=1766): socket$key(0xf, 0x3, 0x2) pipe2$watch_queue(&(0x7f0000000000), 0x80) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f000000b1c0)="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", 0x2000, 0x0) ioprio_set$uid(0x3, 0x0, 0x4004) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)={0x30, 0x0, 0x1, 0xffffffff, 0x0, {{}, {}, {0x14, 0x19, {0xfffffffe, 0x9}}}}, 0x30}}, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00', 0x49}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f0000000440)={0x1, 0x20000006}) close_range(r4, 0xffffffffffffffff, 0x400000000000000) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000280)='westwood\x00', 0x9) getsockopt$inet6_tcp_buf(r6, 0x6, 0x1a, 0x0, &(0x7f0000000080)) close_range(r0, 0xffffffffffffffff, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000280)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@private=0xa010102, 0xfffd, 0x0, 0x4e23, 0x1, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}, 0x8, 0x0, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x20000080}, 0x8000) 957.808379ms ago: executing program 2 (id=1767): sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYRES16, @ANYBLOB="050000000000000000", @ANYBLOB="3d000e0080000000ffffffffffff080211000000ffffffffffff0000feffffffffffffff070001000406f0027f0006a7000c006400000008000d000000000073f68ac399765b7ab289a21d254ebf1c30920188d7e0527bff31151da7c57628327841e9134f"], 0x70}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f10", 0x8, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ebffffffffffffff"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 945.799405ms ago: executing program 5 (id=1768): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f00000000c0)={0x1c, 0x5, 0xd}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000008d02"]) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="2c385aa3d49100dc6626c892b6bc", 0xe) sendto$packet(0xffffffffffffffff, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) 657.938759ms ago: executing program 0 (id=1769): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bca, 0x10100, 0x0, 0x313}, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r4, r5, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x50, 0x0, r7, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x40000103, 0x0, {0x4}}) io_uring_enter(r3, 0x46f3, 0x0, 0x0, 0x0, 0x0) write(r6, &(0x7f0000000200)='~', 0x1) r8 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r9 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r9, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r9, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r8, 0xc02064b6, &(0x7f00000002c0)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r8, 0xc06864a2, &(0x7f0000000580)={&(0x7f0000000040)=[r13, r13], 0x2, r11, r12, 0x3, 0x0, 0xffffffff, 0x804, {0xac7c, 0x1, 0x3, 0x67, 0xf4b, 0x1, 0x2, 0x5, 0x4132, 0xe154, 0x1000, 0x7f, 0x3, 0xffffffff, "fe1d00003413000000000020b42717e47f00"}}) 513.876994ms ago: executing program 5 (id=1770): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f00000001c0)=0x5, 0x2) 232.958141ms ago: executing program 5 (id=1771): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x50) r0 = socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x1, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x88}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="340000001400b59500000000000000000a400000", @ANYRES32=r2, @ANYBLOB="1400020000000000000000000000ffff00000000080008000001"], 0x34}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0xc8, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x40}}, 0x0) 232.72951ms ago: executing program 1 (id=1772): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/37, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x49, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22000, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r2, 0xc004ae0a, &(0x7f0000000080)) ioctl$KVM_RUN(r1, 0xae80, 0x0) 203.238869ms ago: executing program 2 (id=1773): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0), 0x4000, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user}], [], 0x6b}}) 159.204765ms ago: executing program 5 (id=1774): r0 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0xff00) r1 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x400007, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0xfffffffffffffffd}, 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000cc0)=@l2tp6={0xa, 0x0, 0x1000, @private0, 0x7, 0x83}, 0x80, 0x0}, 0x800) 664.282µs ago: executing program 2 (id=1775): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x8, &(0x7f0000006680)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x55, '\x00', 0x0, @fallback=0x33}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000001c80)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822a0269a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7ae22e16c6c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bba3d005585bf07d70e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225c380fac12f8205d182f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37bc21cfdc8180c7d09c35d130d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05fea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d96ee1b84bb64b14aebc6b5194c55dd6890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56bd86acb7654a195bc3e98df3a5dffd5b07838a3ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0ed9829dec16ab67a4f59a504e09f55ab82bbd405087a17a229a149c53ee9145500db213cb36489a10957739e481a756e65bde579bbbfb404213f661eeaaffacbcfbfd6e19946b18a45333df51d78f735999aadfcda64488160c4ae6ba9dcef0c144e3de7be7fdc1ead6a425ff6128fab1517630c1d9507e0685488a57f85298b4e4382842c0730"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000580)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYBLOB='/\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00', @ANYRES32=r0], 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1e000035327ae308fac2dd0b920003000000e75f00000002000004", @ANYRES32, @ANYBLOB='B\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000001000000010000000d00"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000080)=@udp}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) accept4(r3, &(0x7f00000002c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, &(0x7f0000000540)=0x80, 0x80800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 211.86µs ago: executing program 1 (id=1776): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000000c0)={0x0, 0xe39}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000001a40)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, @in={0x2, 0x0, @local}], 0x20) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) mkdir(&(0x7f0000000000)='./file0\x00', 0x26) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r5, 0x2, 0x0) rename(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendto$inet(r2, &(0x7f0000000180)="217aae", 0x3, 0x4040845, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x6, 0x9cbfdae031e5f7d8) 0s ago: executing program 5 (id=1777): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x90) socket$kcm(0x2, 0x200000000000001, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) socket$packet(0x11, 0x3, 0x300) socket$kcm(0x2, 0xa, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) pselect6(0x40, &(0x7f0000000000)={0x400, 0xff, 0x630, 0x243, 0x2, 0x2, 0x9, 0xfb33}, 0x0, 0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={[0x5]}, 0x8}) kernel console output (not intermixed with test programs): ace number: 55 but max is 0 [ 121.480216][ T5853] usb 5-1: config 0 has no interface number 0 [ 121.495291][ T5853] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 121.532673][ T5853] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 121.624373][ T5853] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 121.751457][ T5853] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 121.752106][ T6756] syzkaller0: entered promiscuous mode [ 121.768511][ T5853] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 121.780393][ T5853] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.805124][ T5853] usb 5-1: config 0 descriptor?? [ 121.815917][ T6756] syzkaller0: entered allmulticast mode [ 121.825595][ T5853] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 122.057630][ T5853] usb 5-1: USB disconnect, device number 2 [ 122.065313][ T5853] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 122.094368][ T6763] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 122.526963][ T6770] netlink: 'syz.1.216': attribute type 10 has an invalid length. [ 122.555228][ T6770] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 123.119857][ T6787] siw: device registration error -23 [ 123.761929][ T30] audit: type=1400 audit(1754667544.159:271): avc: denied { mount } for pid=6776 comm="syz.3.217" name="/" dev="ramfs" ino=11164 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 126.059328][ T5515] veth0_vlan: left promiscuous mode [ 126.113274][ T5515] veth0_vlan: entered promiscuous mode [ 127.197581][ T30] audit: type=1400 audit(1754667547.639:272): avc: denied { setattr } for pid=6861 comm="syz.1.235" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 127.220721][ C0] vkms_vblank_simulate: vblank timer overrun [ 127.518328][ T6871] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input9 [ 127.727562][ T6878] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 127.789447][ T6878] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 127.846844][ T6878] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 127.875766][ T6878] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 127.913455][ T30] audit: type=1400 audit(1754667548.349:273): avc: denied { mounton } for pid=6887 comm="syz.4.244" path="/39/file0" dev="tmpfs" ino=219 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 127.935841][ C0] vkms_vblank_simulate: vblank timer overrun [ 127.953924][ T6878] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 127.995128][ T6878] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 128.032026][ T30] audit: type=1400 audit(1754667548.429:274): avc: denied { read write } for pid=6887 comm="syz.4.244" dev="9p" ino=14355223812286978 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 128.054380][ C0] vkms_vblank_simulate: vblank timer overrun [ 128.067962][ T30] audit: type=1400 audit(1754667548.429:275): avc: denied { open } for pid=6887 comm="syz.4.244" path="/39/file0" dev="9p" ino=14355223812286978 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 128.129250][ T30] audit: type=1800 audit(1754667548.499:276): pid=6892 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.244" name="/" dev="9p" ino=14355223812286978 res=0 errno=0 [ 128.253256][ T30] audit: type=1400 audit(1754667548.559:277): avc: denied { ioctl } for pid=6885 comm="syz.0.243" path="socket:[11759]" dev="sockfs" ino=11759 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 128.326346][ T30] audit: type=1400 audit(1754667548.609:278): avc: denied { unmount } for pid=5852 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 129.065908][ T6914] netlink: 'syz.0.249': attribute type 29 has an invalid length. [ 129.090477][ T6914] netlink: 8 bytes leftover after parsing attributes in process `syz.0.249'. [ 129.345550][ T30] audit: type=1400 audit(1754667549.789:279): avc: denied { write } for pid=6930 comm="syz.3.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 129.380564][ T6933] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input10 [ 129.723332][ T30] audit: type=1400 audit(1754667550.159:280): avc: denied { ioctl } for pid=6944 comm="syz.1.256" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=11987 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 131.415280][ T7013] netlink: 'syz.3.263': attribute type 27 has an invalid length. [ 131.481135][ T7013] veth0_virt_wifi: left promiscuous mode [ 131.815513][ T7025] netlink: 'syz.4.265': attribute type 29 has an invalid length. [ 131.872685][ T7025] netlink: 8 bytes leftover after parsing attributes in process `syz.4.265'. [ 132.027742][ T92] kernel write not supported for file /186/clear_refs (pid: 92 comm: kworker/1:2) [ 132.039912][ T30] audit: type=1400 audit(1754667552.469:281): avc: denied { write } for pid=7030 comm="syz.2.269" name="softnet_stat" dev="proc" ino=4026533195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 132.042970][ T7034] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 132.080986][ T7031] overlayfs: missing 'lowerdir' [ 132.172852][ T7038] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 132.243596][ T7038] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 132.310887][ T7046] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 132.361259][ T7038] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 132.423060][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.429542][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.211155][ T7073] netlink: 8 bytes leftover after parsing attributes in process `syz.3.278'. [ 133.239742][ T7073] netlink: 8 bytes leftover after parsing attributes in process `syz.3.278'. [ 133.274033][ T7075] syzkaller0: entered promiscuous mode [ 133.292129][ T7075] syzkaller0: entered allmulticast mode [ 133.512105][ T7081] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 133.524616][ T7081] netlink: 'syz.1.282': attribute type 29 has an invalid length. [ 133.532839][ T7081] netlink: 8 bytes leftover after parsing attributes in process `syz.1.282'. [ 134.298174][ T30] audit: type=1400 audit(1754667554.739:282): avc: denied { mounton } for pid=7084 comm="syz.1.283" path="/54/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 134.499406][ T30] audit: type=1800 audit(1754667554.939:283): pid=7085 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.283" name="/" dev="9p" ino=2 res=0 errno=0 [ 134.639917][ T7094] netlink: 'syz.0.286': attribute type 10 has an invalid length. [ 134.648927][ T7094] bond0: (slave wlan1): Opening slave failed [ 134.766432][ T7104] netlink: 20 bytes leftover after parsing attributes in process `syz.1.289'. [ 134.847428][ T30] audit: type=1400 audit(1754667555.289:284): avc: denied { read write } for pid=7109 comm="syz.4.292" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 134.879850][ T30] audit: type=1400 audit(1754667555.319:285): avc: denied { open } for pid=7109 comm="syz.4.292" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 134.944890][ T7114] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 134.960007][ T30] audit: type=1400 audit(1754667555.319:286): avc: denied { ioctl } for pid=7109 comm="syz.4.292" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 134.979193][ T7114] netlink: 'syz.1.293': attribute type 29 has an invalid length. [ 135.007139][ T7114] netlink: 8 bytes leftover after parsing attributes in process `syz.1.293'. [ 135.201988][ T978] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 135.374949][ T978] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 135.391938][ T978] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 135.407893][ T978] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 135.429903][ T978] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 135.460517][ T978] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 135.489767][ T978] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 135.499500][ T978] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 135.523244][ T978] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 135.544471][ T978] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 135.556627][ T978] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 135.569285][ T978] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 135.577204][ T978] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 135.588782][ T978] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 135.601104][ T978] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 135.668638][ T978] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 135.720298][ T978] usb 5-1: string descriptor 0 read error: -22 [ 135.735468][ T978] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 135.806704][ T978] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.902683][ T978] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 136.028358][ T7165] netlink: 8 bytes leftover after parsing attributes in process `syz.3.298'. [ 136.071897][ T30] audit: type=1400 audit(1754667556.499:287): avc: denied { write } for pid=7159 comm="syz.0.297" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 136.172619][ T7168] netlink: 4 bytes leftover after parsing attributes in process `syz.1.299'. [ 136.266930][ T7172] siw: device registration error -23 [ 136.499580][ T5859] Bluetooth: hci0: failed to read key size for handle 201 [ 136.814303][ T7182] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input11 [ 137.067561][ T7195] netlink: 1688 bytes leftover after parsing attributes in process `syz.2.304'. [ 137.196602][ T7199] evm: overlay not supported [ 137.357497][ T30] audit: type=1400 audit(1754667557.789:288): avc: denied { execute } for pid=7190 comm="syz.3.305" path="/57/bus/file1" dev="overlay" ino=322 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 138.737637][ T978] usb 5-1: USB disconnect, device number 3 [ 138.868181][ T30] audit: type=1400 audit(1754667559.299:289): avc: denied { connect } for pid=7219 comm="syz.0.312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 139.198193][ T30] audit: type=1400 audit(1754667559.299:290): avc: denied { write } for pid=7219 comm="syz.0.312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 139.338514][ T30] audit: type=1400 audit(1754667559.779:291): avc: denied { name_bind } for pid=7225 comm="syz.1.314" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 139.416974][ T7228] loop6: detected capacity change from 0 to 524287999 [ 139.425726][ T7228] netlink: 24 bytes leftover after parsing attributes in process `syz.3.315'. [ 139.992181][ T7237] syz.3.317 uses obsolete (PF_INET,SOCK_PACKET) [ 140.031303][ T30] audit: type=1800 audit(1754667560.469:292): pid=7239 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.319" name="/" dev="9p" ino=2 res=0 errno=0 [ 140.370331][ T7258] netlink: 4 bytes leftover after parsing attributes in process `syz.3.325'. [ 140.572050][ T5859] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 140.581806][ T5859] Bluetooth: hci0: Injecting HCI hardware error event [ 140.589727][ T5859] Bluetooth: hci0: hardware error 0x00 [ 140.912020][ T24] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 141.654829][ T30] audit: type=1400 audit(1754667561.679:293): avc: denied { write } for pid=7284 comm="syz.2.333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 141.680758][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 141.713870][ T24] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 141.723260][ T24] usb 4-1: config 0 has no interface number 0 [ 141.734982][ T30] audit: type=1400 audit(1754667561.729:294): avc: denied { read } for pid=7284 comm="syz.2.333" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 141.766572][ T24] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 141.814395][ T30] audit: type=1400 audit(1754667561.729:295): avc: denied { open } for pid=7284 comm="syz.2.333" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 141.880943][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.960577][ T24] usb 4-1: Product: syz [ 142.027549][ T24] usb 4-1: Manufacturer: syz [ 142.080542][ T24] usb 4-1: SerialNumber: syz [ 142.152426][ T7305] netlink: 100 bytes leftover after parsing attributes in process `syz.1.339'. [ 142.175064][ T24] usb 4-1: config 0 descriptor?? [ 142.203354][ T24] smsc95xx v2.0.0 [ 142.207689][ T7307] netlink: 'syz.2.340': attribute type 29 has an invalid length. [ 142.242013][ T7307] netlink: 8 bytes leftover after parsing attributes in process `syz.2.340'. [ 142.284893][ T7310] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 142.329610][ T7310] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 142.475597][ T7319] overlayfs: missing 'lowerdir' [ 142.654621][ T5859] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 142.662306][ T30] audit: type=1400 audit(1754667563.099:296): avc: denied { ioctl } for pid=7312 comm="syz.1.342" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4620 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 142.821330][ T24] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 142.995882][ T24] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 143.228489][ T30] audit: type=1400 audit(1754667563.519:297): avc: denied { read write } for pid=7322 comm="syz.4.346" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 143.253869][ T30] audit: type=1400 audit(1754667563.519:298): avc: denied { open } for pid=7322 comm="syz.4.346" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 143.270660][ T24] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 143.378585][ T24] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -61 [ 144.381567][ T30] audit: type=1400 audit(1754667564.819:299): avc: denied { read write } for pid=7350 comm="syz.2.354" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 144.405761][ C0] vkms_vblank_simulate: vblank timer overrun [ 144.708043][ T5919] usb 4-1: USB disconnect, device number 4 [ 144.880033][ T30] audit: type=1400 audit(1754667564.819:300): avc: denied { open } for pid=7350 comm="syz.2.354" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 144.905505][ C0] vkms_vblank_simulate: vblank timer overrun [ 146.457096][ T7389] netlink: 'syz.0.362': attribute type 15 has an invalid length. [ 146.465134][ T7389] netlink: 24 bytes leftover after parsing attributes in process `syz.0.362'. [ 146.613865][ T7391] ptrace attach of "./syz-executor exec"[5864] was attempted by "./syz-executor exec"[7391] [ 148.231833][ T30] audit: type=1400 audit(1754667568.259:301): avc: denied { read } for pid=7415 comm="syz.2.372" name="sg0" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 148.352349][ T7430] netlink: 'syz.3.373': attribute type 29 has an invalid length. [ 148.360119][ T7430] netlink: 8 bytes leftover after parsing attributes in process `syz.3.373'. [ 148.709197][ T7448] (syz.2.379,7448,0):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 148.925279][ T7450] overlayfs: missing 'lowerdir' [ 148.931001][ T30] audit: type=1400 audit(1754667569.149:302): avc: denied { add_name } for pid=7440 comm="syz.2.379" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 149.595549][ T30] audit: type=1400 audit(1754667569.149:303): avc: denied { create } for pid=7440 comm="syz.2.379" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 149.709850][ T30] audit: type=1400 audit(1754667569.149:304): avc: denied { associate } for pid=7440 comm="syz.2.379" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 149.795362][ T7474] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 149.813575][ T7474] netlink: 'syz.4.390': attribute type 29 has an invalid length. [ 149.821326][ T7474] netlink: 8 bytes leftover after parsing attributes in process `syz.4.390'. [ 149.836526][ T5919] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 149.846201][ T7473] kvm: user requested TSC rate below hardware speed [ 149.873954][ T30] audit: type=1400 audit(1754667570.299:305): avc: denied { create } for pid=7471 comm="syz.4.390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 150.029037][ T5919] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 150.083241][ T5919] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 150.111165][ T5919] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 150.151901][ T5919] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 150.242647][ T5919] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 150.279621][ T5919] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 150.447886][ T5919] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 150.860484][ T5919] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 150.895137][ T5919] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 150.906935][ T5919] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 150.968485][ T978] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 150.997101][ T5919] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 151.005584][ T5919] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 151.018885][ T5919] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 151.061340][ T5919] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 151.091985][ T5919] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 151.123617][ T978] usb 1-1: device descriptor read/64, error -71 [ 151.135832][ T5919] usb 3-1: string descriptor 0 read error: -22 [ 151.142891][ T5919] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 151.163480][ T5919] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.190816][ T5919] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 151.398488][ T5853] usb 3-1: USB disconnect, device number 3 [ 151.444179][ T978] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 151.742404][ T978] usb 1-1: device descriptor read/64, error -71 [ 151.900917][ T7513] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 151.910714][ T978] usb usb1-port1: attempt power cycle [ 151.919033][ T7513] netlink: 'syz.3.404': attribute type 29 has an invalid length. [ 151.930204][ T36] Bluetooth: Error in BCSP hdr checksum [ 151.936369][ T7513] netlink: 8 bytes leftover after parsing attributes in process `syz.3.404'. [ 152.124834][ T7522] syzkaller0: entered promiscuous mode [ 152.135675][ T7522] syzkaller0: entered allmulticast mode [ 152.217233][ T7525] netlink: 4 bytes leftover after parsing attributes in process `syz.3.408'. [ 152.261894][ T978] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 152.317427][ T978] usb 1-1: device descriptor read/8, error -71 [ 152.582114][ T978] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 152.617424][ T978] usb 1-1: device descriptor read/8, error -71 [ 152.753699][ T978] usb usb1-port1: unable to enumerate USB device [ 153.616701][ T5859] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 153.762072][ T5919] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 153.963342][ T5919] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 153.973922][ T5919] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 154.005263][ T5919] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 154.021860][ T5919] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 154.038978][ T5919] usb 2-1: SerialNumber: syz [ 154.137527][ T30] audit: type=1800 audit(1754667574.579:306): pid=7547 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.416" name="/" dev="9p" ino=2 res=0 errno=0 [ 154.264803][ T5919] usb 2-1: 0:2 : does not exist [ 154.292814][ T7551] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 154.319610][ T7551] netlink: 'syz.0.417': attribute type 29 has an invalid length. [ 154.331038][ T5919] usb 2-1: USB disconnect, device number 3 [ 154.349596][ T7551] netlink: 8 bytes leftover after parsing attributes in process `syz.0.417'. [ 154.427217][ T6372] udevd[6372]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 155.227340][ T30] audit: type=1400 audit(1754667575.669:307): avc: denied { bind } for pid=7561 comm="syz.3.421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 155.488986][ T5919] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 155.823910][ T5919] usb 5-1: device descriptor read/64, error -71 [ 156.280348][ T978] libceph: connect (1)[c::]:6789 error -101 [ 156.319492][ T978] libceph: mon0 (1)[c::]:6789 connect error [ 156.420711][ T30] audit: type=1800 audit(1754667576.859:308): pid=7587 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.428" name="/" dev="9p" ino=2 res=0 errno=0 [ 156.442116][ T5919] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 156.583146][ T5919] usb 5-1: device descriptor read/64, error -71 [ 156.653144][ T978] libceph: connect (1)[c::]:6789 error -101 [ 156.659222][ T978] libceph: mon0 (1)[c::]:6789 connect error [ 156.677369][ T7581] ceph: No mds server is up or the cluster is laggy [ 156.695054][ T5919] usb usb5-port1: attempt power cycle [ 157.458868][ T5919] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 157.482440][ T5919] usb 5-1: device descriptor read/8, error -71 [ 157.527688][ T30] audit: type=1400 audit(1754667577.969:309): avc: denied { bind } for pid=7606 comm="syz.1.436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 157.762266][ T5919] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 157.772568][ T30] audit: type=1400 audit(1754667578.199:310): avc: denied { write } for pid=7606 comm="syz.1.436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 158.107376][ T5919] usb 5-1: device descriptor read/8, error -71 [ 158.381118][ T5919] usb usb5-port1: unable to enumerate USB device [ 158.966154][ T7629] mmap: syz.1.439 (7629) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 158.992983][ T7629] pim6reg: entered allmulticast mode [ 159.041813][ T24] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 159.221788][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 159.228322][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 159.239672][ T24] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 159.248974][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.372453][ T24] usb 1-1: config 0 descriptor?? [ 159.595387][ T24] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 160.136056][ T10] usb 1-1: USB disconnect, device number 6 [ 160.146336][ T7652] netlink: 'syz.2.451': attribute type 10 has an invalid length. [ 160.267717][ T7654] netlink: 'syz.2.452': attribute type 10 has an invalid length. [ 160.276448][ T30] audit: type=1400 audit(1754667580.719:311): avc: denied { connect } for pid=7653 comm="syz.2.452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 160.300166][ T30] audit: type=1400 audit(1754667580.719:312): avc: denied { write } for pid=7653 comm="syz.2.452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 160.329388][ T5919] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 160.461721][ T5919] usb 5-1: device descriptor read/64, error -71 [ 160.659290][ T30] audit: type=1400 audit(1754667581.099:313): avc: denied { create } for pid=7664 comm="syz.2.457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 160.737142][ T5919] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 160.745717][ T30] audit: type=1400 audit(1754667581.099:314): avc: denied { getopt } for pid=7664 comm="syz.2.457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 160.952464][ T5919] usb 5-1: device descriptor read/64, error -71 [ 161.128856][ T5919] usb usb5-port1: attempt power cycle [ 161.801754][ T5919] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 161.833624][ T5919] usb 5-1: device descriptor read/8, error -71 [ 162.072009][ T5919] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 162.114490][ T5919] usb 5-1: device descriptor read/8, error -71 [ 162.313708][ T5919] usb usb5-port1: unable to enumerate USB device [ 162.915091][ T7689] overlayfs: missing 'lowerdir' [ 164.475070][ T7714] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input12 [ 165.512395][ T7738] kvm: user requested TSC rate below hardware speed [ 166.569651][ T7744] siw: device registration error -23 [ 166.788465][ T30] audit: type=1400 audit(1754667587.229:315): avc: denied { append } for pid=7748 comm="syz.4.481" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 166.811599][ C0] vkms_vblank_simulate: vblank timer overrun [ 166.905095][ T978] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 167.483998][ T978] usb 2-1: device descriptor read/64, error -71 [ 167.743447][ T978] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 167.825315][ T7772] fuse: Bad value for 'fd' [ 167.826348][ T5919] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 167.840830][ T30] audit: type=1800 audit(1754667588.289:316): pid=7772 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.490" name="/" dev="9p" ino=2 res=0 errno=0 [ 167.860645][ C0] vkms_vblank_simulate: vblank timer overrun [ 167.881847][ T978] usb 2-1: device descriptor read/64, error -71 [ 168.011733][ T5919] usb 1-1: Using ep0 maxpacket: 16 [ 168.872845][ T5919] usb 1-1: config 0 has an invalid interface number: 53 but max is 0 [ 168.875128][ T978] usb usb2-port1: attempt power cycle [ 168.890728][ T5919] usb 1-1: config 0 has no interface number 0 [ 168.921985][ T5919] usb 1-1: New USB device found, idVendor=03fd, idProduct=ebbe, bcdDevice=ed.e2 [ 168.931085][ T5919] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.974300][ T5919] usb 1-1: Product: syz [ 168.978524][ T5919] usb 1-1: Manufacturer: syz [ 168.986094][ T5919] usb 1-1: SerialNumber: syz [ 168.996419][ T5919] usb 1-1: config 0 descriptor?? [ 169.154494][ T7787] overlayfs: missing 'lowerdir' [ 169.324925][ T978] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 169.341497][ T54] usb 1-1: USB disconnect, device number 7 [ 169.532933][ T978] usb 2-1: device descriptor read/8, error -71 [ 170.226857][ T7810] syzkaller0: entered promiscuous mode [ 170.252560][ T7810] syzkaller0: entered allmulticast mode [ 170.681746][ T5924] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 170.831746][ T5924] usb 3-1: Using ep0 maxpacket: 8 [ 170.852328][ T5924] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 170.860881][ T5924] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 170.871354][ T5924] usb 3-1: config 0 has no interface number 0 [ 170.879291][ T5924] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 170.890710][ T5924] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.920310][ T5924] usb 3-1: config 0 descriptor?? [ 170.931318][ T5924] ldusb 3-1:0.55: Interrupt in endpoint not found [ 171.099082][ T7828] netlink: 'syz.0.510': attribute type 10 has an invalid length. [ 171.112850][ T7828] bond0: (slave wlan1): Opening slave failed [ 171.149105][ T978] usb 3-1: USB disconnect, device number 4 [ 171.464446][ T5859] Bluetooth: hci4: failed to read key size for handle 201 [ 171.474092][ T5859] Bluetooth: hci4: unexpected event for opcode 0x1408 [ 172.857372][ T7866] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 172.877019][ T7866] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 173.218106][ T5859] Bluetooth: unknown link type 255 [ 173.223856][ T5859] Bluetooth: hci1: connection err: -111 [ 173.240161][ T30] audit: type=1400 audit(1754667593.679:317): avc: denied { read } for pid=7880 comm="syz.3.527" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 173.263002][ C0] vkms_vblank_simulate: vblank timer overrun [ 173.271893][ T30] audit: type=1400 audit(1754667593.679:318): avc: denied { open } for pid=7880 comm="syz.3.527" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 173.295119][ C0] vkms_vblank_simulate: vblank timer overrun [ 173.308418][ T54] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 173.533318][ T54] usb 3-1: Using ep0 maxpacket: 8 [ 173.756586][ T54] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 173.796794][ T54] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 173.891719][ T54] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.975252][ T54] usb 3-1: config 0 descriptor?? [ 174.151903][ T7881] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 174.163778][ T7881] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 174.205596][ T54] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 174.247968][ T7881] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 174.331554][ T7881] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 174.359363][ T7881] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 174.383220][ T7881] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 174.420376][ T7881] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 174.448074][ T7881] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 174.487386][ T7881] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 175.475900][ T5859] Bluetooth: hci1: command 0x0c1a tx timeout [ 176.050627][ T54] usb 3-1: USB disconnect, device number 5 [ 176.397647][ T5171] Bluetooth: hci2: command 0x0c1a tx timeout [ 176.540692][ T5171] Bluetooth: hci4: command 0x0405 tx timeout [ 177.118389][ T7962] netlink: 8 bytes leftover after parsing attributes in process `syz.1.543'. [ 177.541708][ T5859] Bluetooth: hci1: command 0x0c1a tx timeout [ 178.216238][ T30] audit: type=1400 audit(1754667598.659:319): avc: denied { write } for pid=7983 comm="syz.3.553" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 178.431764][ T5859] Bluetooth: hci2: command 0x0c1a tx timeout [ 178.571850][ T5859] Bluetooth: hci4: command 0x0405 tx timeout [ 178.724887][ T30] audit: type=1400 audit(1754667599.159:320): avc: denied { create } for pid=7992 comm="syz.2.556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 179.611798][ T5859] Bluetooth: hci1: command 0x0c1a tx timeout [ 179.830240][ T8013] netlink: 8 bytes leftover after parsing attributes in process `syz.3.564'. [ 180.493304][ T5171] Bluetooth: hci2: command 0x0c1a tx timeout [ 180.559017][ T8031] netlink: 'syz.2.569': attribute type 10 has an invalid length. [ 180.655477][ T5171] Bluetooth: hci4: command 0x0405 tx timeout [ 180.850290][ T8031] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode [ 180.857713][ T8031] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode [ 182.738855][ T5859] Bluetooth: hci4: command 0x0405 tx timeout [ 183.897768][ T8087] netlink: 44 bytes leftover after parsing attributes in process `syz.0.589'. [ 183.960283][ T8089] loop6: detected capacity change from 0 to 524287999 [ 183.968549][ T8089] netlink: 24 bytes leftover after parsing attributes in process `syz.1.583'. [ 184.596387][ T30] audit: type=1400 audit(1754667605.009:321): avc: denied { listen } for pid=8097 comm="syz.1.592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 184.662436][ T30] audit: type=1400 audit(1754667605.059:322): avc: denied { accept } for pid=8097 comm="syz.1.592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 184.830026][ T30] audit: type=1400 audit(1754667605.189:323): avc: denied { mount } for pid=8097 comm="syz.1.592" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 184.857526][ T5171] Bluetooth: hci4: command 0x0405 tx timeout [ 185.881473][ T8122] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 185.889027][ T8122] IPv6: NLM_F_CREATE should be set when creating new route [ 185.896409][ T8122] IPv6: NLM_F_CREATE should be set when creating new route [ 185.903637][ T8122] IPv6: NLM_F_CREATE should be set when creating new route [ 186.623528][ T30] audit: type=1400 audit(1754667606.699:324): avc: denied { setopt } for pid=8124 comm="syz.2.598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 187.118373][ T5171] Bluetooth: hci4: command 0x0405 tx timeout [ 187.640660][ T8155] netlink: 'syz.4.608': attribute type 10 has an invalid length. [ 187.665105][ T8155] bond0: (slave wlan1): Opening slave failed [ 189.046737][ T8207] tipc: Started in network mode [ 189.064297][ T8207] tipc: Node identity aa127e577c17, cluster identity 4711 [ 189.072673][ T8207] tipc: Enabled bearer , priority 0 [ 189.080227][ T8207] syzkaller0: entered promiscuous mode [ 189.086073][ T8207] syzkaller0: entered allmulticast mode [ 189.097508][ T8207] tipc: Resetting bearer [ 189.106359][ T8206] tipc: Resetting bearer [ 189.142339][ T8206] tipc: Disabling bearer [ 189.527930][ T8230] netlink: 12 bytes leftover after parsing attributes in process `syz.4.639'. [ 189.553018][ T8226] netlink: 'syz.1.638': attribute type 10 has an invalid length. [ 189.631865][ T978] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 189.801724][ T978] usb 1-1: Using ep0 maxpacket: 8 [ 189.808249][ T978] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 189.817964][ T978] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 189.830903][ T978] usb 1-1: config 0 has no interface number 0 [ 189.838183][ T978] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 189.849355][ T978] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 189.858843][ T978] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.883060][ T978] usb 1-1: config 0 descriptor?? [ 189.905624][ T978] ldusb 1-1:0.55: Interrupt in endpoint not found [ 190.108071][ T978] usb 1-1: USB disconnect, device number 8 [ 190.520698][ T8255] tipc: Started in network mode [ 190.527199][ T8255] tipc: Node identity ce7231eb11b, cluster identity 4711 [ 190.535060][ T8255] tipc: Enabled bearer , priority 0 [ 190.552721][ T8255] syzkaller0: entered promiscuous mode [ 190.567650][ T8255] syzkaller0: entered allmulticast mode [ 190.578559][ T8255] tipc: Resetting bearer [ 190.599718][ T8254] tipc: Resetting bearer [ 190.672202][ T8254] tipc: Disabling bearer [ 190.918521][ T8276] netlink: 'syz.2.656': attribute type 10 has an invalid length. [ 191.590609][ T8290] kvm: user requested TSC rate below hardware speed [ 193.060554][ T8324] 9pnet_fd: Insufficient options for proto=fd [ 193.647008][ T30] audit: type=1400 audit(1754667614.019:325): avc: denied { execute_no_trans } for pid=8336 comm="syz.3.677" path="/138/file0" dev="tmpfs" ino=747 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 193.925788][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.932581][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.944307][ T30] audit: type=1400 audit(1754667614.029:326): avc: denied { remount } for pid=8336 comm="syz.3.677" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 194.957069][ T8371] siw: device registration error -23 [ 195.861784][ T5919] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 196.482994][ T5919] usb 4-1: Using ep0 maxpacket: 8 [ 196.494822][ T5919] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 196.527250][ T5919] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 196.542070][ T8398] tipc: Started in network mode [ 196.553756][ T8398] tipc: Node identity 080211000001, cluster identity 4711 [ 196.563825][ T5919] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.575081][ T8398] tipc: Enabled bearer , priority 0 [ 196.588605][ T8398] tipc: Resetting bearer [ 196.596474][ T5919] usb 4-1: config 0 descriptor?? [ 196.808482][ T8413] fuse: Bad value for 'fd' [ 196.818851][ T5919] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 197.157015][ T30] audit: type=1400 audit(1754667617.599:327): avc: denied { create } for pid=8417 comm="syz.1.709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 197.179988][ T8422] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 197.366411][ T5919] usb 4-1: USB disconnect, device number 5 [ 197.665388][ T5924] tipc: Node number set to 134418688 [ 197.946918][ T30] audit: type=1400 audit(1754667618.389:328): avc: denied { create } for pid=8440 comm="syz.3.717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 197.980763][ T8443] netlink: 'syz.2.718': attribute type 10 has an invalid length. [ 198.030814][ T30] audit: type=1400 audit(1754667618.389:329): avc: denied { ioctl } for pid=8440 comm="syz.3.717" path="socket:[19893]" dev="sockfs" ino=19893 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 198.718986][ T8462] tipc: Started in network mode [ 198.830125][ T8462] tipc: Node identity 080211000001, cluster identity 4711 [ 198.900716][ T8462] tipc: Enabled bearer , priority 0 [ 198.913566][ T8466] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 198.920865][ T8466] IPv6: NLM_F_CREATE should be set when creating new route [ 198.928240][ T8466] IPv6: NLM_F_CREATE should be set when creating new route [ 198.935612][ T8466] IPv6: NLM_F_CREATE should be set when creating new route [ 198.958981][ T8467] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 199.120639][ T8467] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 199.130621][ T8462] tipc: Resetting bearer [ 200.010217][ T978] tipc: Node number set to 134418688 [ 200.596825][ T8502] siw: device registration error -23 [ 201.497654][ T8524] tipc: Started in network mode [ 201.509690][ T8524] tipc: Node identity 080211000001, cluster identity 4711 [ 201.565362][ T8524] tipc: Enabled bearer , priority 0 [ 201.685546][ T8524] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 201.696224][ T8524] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 201.716969][ T8524] netlink: 27 bytes leftover after parsing attributes in process `syz.2.740'. [ 201.765273][ T8524] tipc: Resetting bearer [ 202.153690][ T8535] netlink: 'syz.2.745': attribute type 10 has an invalid length. [ 202.176248][ T8535] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode [ 202.198419][ T8535] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode [ 202.968945][ T5924] tipc: Node number set to 134418688 [ 203.405850][ T8554] loop6: detected capacity change from 0 to 524287999 [ 203.420855][ T8554] netlink: 24 bytes leftover after parsing attributes in process `syz.1.751'. [ 204.819615][ T8573] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.827210][ T8573] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.348933][ T8599] fuse: Bad value for 'fd' [ 205.766052][ T8573] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 205.792524][ T8573] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 205.819610][ T8609] kvm: user requested TSC rate below hardware speed [ 206.020154][ T3019] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.029705][ T3019] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.354219][ T3019] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.485057][ T3019] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.241814][ T5919] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 207.353012][ T5171] Bluetooth: unknown link type 255 [ 207.358237][ T5171] Bluetooth: hci1: connection err: -111 [ 207.388488][ T8633] netlink: 'syz.1.778': attribute type 10 has an invalid length. [ 207.411816][ T5919] usb 1-1: Using ep0 maxpacket: 8 [ 207.423169][ T5919] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 207.435071][ T5919] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 207.445266][ T5919] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.484427][ T5919] usb 1-1: config 0 descriptor?? [ 207.730590][ T5919] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 207.803936][ T8644] 9pnet_fd: Insufficient options for proto=fd [ 208.147738][ T5919] usb 1-1: USB disconnect, device number 9 [ 208.352530][ T8654] (syz.1.785,8654,0):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 209.601854][ T30] audit: type=1800 audit(1754667630.029:330): pid=8671 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.790" name="/" dev="9p" ino=14355223812286978 res=0 errno=0 [ 210.301872][ T8686] (syz.2.797,8686,1):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 211.136618][ T8700] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 211.143924][ T8700] IPv6: NLM_F_CREATE should be set when creating new route [ 211.151202][ T8700] IPv6: NLM_F_CREATE should be set when creating new route [ 211.158554][ T8700] IPv6: NLM_F_CREATE should be set when creating new route [ 211.432638][ T30] audit: type=1800 audit(1754667631.879:331): pid=8704 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.802" name="/" dev="9p" ino=14355223812286978 res=0 errno=0 [ 211.726472][ T8714] (syz.0.808,8714,1):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 212.028500][ T8723] netlink: 36 bytes leftover after parsing attributes in process `syz.2.809'. [ 212.040920][ T30] audit: type=1400 audit(1754667632.479:332): avc: denied { name_bind } for pid=8728 comm="syz.1.814" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 212.076915][ T30] audit: type=1400 audit(1754667632.509:333): avc: denied { name_connect } for pid=8728 comm="syz.1.814" dest=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 212.241707][ T10] usb 1-1: new low-speed USB device number 10 using dummy_hcd [ 212.371683][ T10] usb 1-1: device descriptor read/64, error -71 [ 212.579048][ T30] audit: type=1400 audit(1754667633.019:334): avc: denied { recv } for pid=5849 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.0.133 dest=53602 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 212.614059][ T10] usb 1-1: new low-speed USB device number 11 using dummy_hcd [ 212.751947][ T10] usb 1-1: device descriptor read/64, error -71 [ 212.872018][ T10] usb usb1-port1: attempt power cycle [ 212.947219][ T8744] (syz.1.820,8744,1):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 213.232304][ T10] usb 1-1: new low-speed USB device number 12 using dummy_hcd [ 213.273664][ T10] usb 1-1: device descriptor read/8, error -71 [ 213.522931][ T10] usb 1-1: new low-speed USB device number 13 using dummy_hcd [ 213.552119][ T10] usb 1-1: device descriptor read/8, error -71 [ 213.664221][ T10] usb usb1-port1: unable to enumerate USB device [ 214.415688][ T30] audit: type=1400 audit(1754667634.779:335): avc: denied { egress } for pid=13 comm="kworker/u8:1" saddr=fe80::1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 214.808253][ T30] audit: type=1400 audit(1754667634.779:336): avc: denied { sendto } for pid=13 comm="kworker/u8:1" saddr=fe80::1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 214.844118][ T30] audit: type=1800 audit(1754667634.799:337): pid=8765 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.828" name="/" dev="9p" ino=14355223812286978 res=0 errno=0 [ 214.957324][ T8773] (syz.4.831,8773,1):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 215.321782][ T5924] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 215.831918][ T30] audit: type=1400 audit(1754667636.019:338): avc: denied { firmware_load } for pid=8777 comm="syz.4.834" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 215.937605][ T5924] usb 3-1: Using ep0 maxpacket: 8 [ 215.952445][ T5924] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 216.006253][ T5924] usb 3-1: config 0 has no interface number 0 [ 216.028649][ T5924] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 216.055689][ T5924] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 216.106366][ T5924] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 216.154597][ T5924] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 216.187715][ T5924] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 216.200088][ T5924] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.211826][ T30] audit: type=1400 audit(1754667636.619:339): avc: denied { create } for pid=8790 comm="syz.3.839" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 216.222460][ T8782] syz.4.834 (8782) used greatest stack depth: 19336 bytes left [ 216.257271][ T30] audit: type=1400 audit(1754667636.629:340): avc: denied { mounton } for pid=8790 comm="syz.3.839" path="/174/file0" dev="tmpfs" ino=933 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 216.293420][ T5924] usb 3-1: config 0 descriptor?? [ 216.318322][ T5924] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 216.345039][ T8786] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.354431][ T8786] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.453258][ T8786] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 216.478571][ T8786] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 216.633581][ T8786] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 216.644334][ T8786] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 216.662015][ T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.678337][ T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.703625][ T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.716214][ T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.991690][ T5924] usb 5-1: new low-speed USB device number 12 using dummy_hcd [ 217.121815][ T5924] usb 5-1: device descriptor read/64, error -71 [ 217.270254][ T8824] 9pnet_fd: Insufficient options for proto=fd [ 217.776634][ T30] audit: type=1400 audit(1754667638.219:341): avc: denied { unlink } for pid=5849 comm="syz-executor" name="file0" dev="tmpfs" ino=933 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 217.894071][ T5924] usb 5-1: new low-speed USB device number 13 using dummy_hcd [ 218.015109][ T10] usb 3-1: USB disconnect, device number 6 [ 218.089016][ T10] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 218.121654][ T5924] usb 5-1: device descriptor read/64, error -71 [ 218.281512][ T5924] usb usb5-port1: attempt power cycle [ 218.297671][ T8838] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 218.466112][ T30] audit: type=1400 audit(1754667638.829:342): avc: denied { write } for pid=8835 comm="syz.2.854" path="socket:[20862]" dev="sockfs" ino=20862 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 218.837594][ T30] audit: type=1400 audit(1754667638.839:343): avc: denied { write } for pid=8835 comm="syz.2.854" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 218.923106][ T5924] usb 5-1: new low-speed USB device number 14 using dummy_hcd [ 218.977465][ T5924] usb 5-1: device descriptor read/8, error -71 [ 219.314176][ T5924] usb 5-1: new low-speed USB device number 15 using dummy_hcd [ 219.343517][ T5924] usb 5-1: device descriptor read/8, error -71 [ 219.396159][ T8869] netlink: 'syz.2.861': attribute type 15 has an invalid length. [ 219.404041][ T8869] netlink: 24 bytes leftover after parsing attributes in process `syz.2.861'. [ 219.465374][ T5924] usb usb5-port1: unable to enumerate USB device [ 219.682080][ T8874] ptrace attach of "./syz-executor exec"[5855] was attempted by "./syz-executor exec"[8874] [ 221.679356][ T8925] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8925 comm=syz.2.882 [ 222.311183][ T8940] netlink: 8 bytes leftover after parsing attributes in process `syz.0.889'. [ 222.354658][ T8941] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 224.238894][ T8979] netlink: 'syz.4.901': attribute type 10 has an invalid length. [ 224.247066][ T8979] bond0: (slave wlan1): Opening slave failed [ 225.087656][ T9001] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 225.101789][ T9001] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 225.411847][ T5853] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 225.435912][ T9014] fuse: Bad value for 'fd' [ 225.565308][ T5853] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 225.580396][ T5853] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 225.600235][ T5853] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 225.617636][ T5853] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 225.635902][ T5853] usb 5-1: SerialNumber: syz [ 225.856683][ T5853] usb 5-1: 0:2 : does not exist [ 225.889664][ T5853] usb 5-1: unit 5 not found! [ 226.092993][ T5853] usb 5-1: USB disconnect, device number 16 [ 226.552814][ T6372] udevd[6372]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 226.837237][ T9053] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 226.844761][ T9053] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 228.071696][ T30] audit: type=1400 audit(1754667648.459:344): avc: denied { getopt } for pid=9060 comm="syz.1.925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 228.355748][ T30] audit: type=1400 audit(1754667648.799:345): avc: denied { bind } for pid=9075 comm="syz.0.932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 228.437396][ T30] audit: type=1400 audit(1754667648.829:346): avc: denied { listen } for pid=9075 comm="syz.0.932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 228.465214][ T30] audit: type=1400 audit(1754667648.829:347): avc: denied { accept } for pid=9075 comm="syz.0.932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 228.811720][ T5859] Bluetooth: hci4: command 0x0405 tx timeout [ 229.168081][ T9090] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 229.175597][ T9090] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 229.248737][ T5859] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 229.258716][ T5859] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 229.268191][ T5859] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 229.277939][ T5859] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 229.277996][ T9094] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 229.295064][ T5859] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 229.313852][ T30] audit: type=1400 audit(1754667649.749:348): avc: denied { mounton } for pid=9091 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 229.333921][ T9091] lo speed is unknown, defaulting to 1000 [ 229.548922][ T9091] chnl_net:caif_netlink_parms(): no params data found [ 229.672592][ T9091] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.681247][ T9091] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.690871][ T9091] bridge_slave_0: entered allmulticast mode [ 229.707643][ T9091] bridge_slave_0: entered promiscuous mode [ 229.724834][ T9091] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.732952][ T9091] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.741094][ T9091] bridge_slave_1: entered allmulticast mode [ 229.757553][ T9091] bridge_slave_1: entered promiscuous mode [ 229.820978][ T9091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 229.845927][ T9091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 229.929693][ T9091] team0: Port device team_slave_0 added [ 229.965037][ T9091] team0: Port device team_slave_1 added [ 230.017579][ T30] audit: type=1400 audit(1754667650.459:349): avc: denied { append } for pid=9104 comm="syz.4.939" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 230.064472][ T9105] kvm: pic: single mode not supported [ 230.065117][ T9105] kvm: pic: single mode not supported [ 230.070780][ T9105] kvm: pic: level sensitive irq not supported [ 230.114482][ T9105] kvm: pic: single mode not supported [ 230.122222][ T9091] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 230.160783][ T9091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.229554][ T9105] kvm: pic: non byte read [ 230.238428][ T9105] kvm: pic: non byte read [ 230.245298][ T9105] kvm: pic: non byte read [ 230.255514][ T9105] kvm: pic: non byte read [ 230.766249][ T30] audit: type=1400 audit(1754667650.649:350): avc: denied { write } for pid=9109 comm="syz.2.941" path="socket:[22402]" dev="sockfs" ino=22402 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 231.407912][ T9091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 231.411809][ T5171] Bluetooth: hci1: command tx timeout [ 231.450414][ T9091] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 231.459199][ T9091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.516984][ T9091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 231.757746][ T9091] hsr_slave_0: entered promiscuous mode [ 231.773742][ T9091] hsr_slave_1: entered promiscuous mode [ 231.781563][ T9091] debugfs: 'hsr0' already exists in 'hsr' [ 231.788526][ T9091] Cannot create hsr debugfs directory [ 232.022049][ T9132] netlink: 'syz.0.947': attribute type 10 has an invalid length. [ 232.345674][ T9132] bond0: (slave wlan1): Opening slave failed [ 233.075168][ T9149] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 233.082522][ T9149] IPv6: NLM_F_CREATE should be set when creating new route [ 233.089831][ T9149] IPv6: NLM_F_CREATE should be set when creating new route [ 233.097120][ T9149] IPv6: NLM_F_CREATE should be set when creating new route [ 233.453524][ T5171] Bluetooth: hci1: command tx timeout [ 233.818219][ T9091] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 233.835018][ T9091] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 233.872657][ T9091] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 233.905546][ T9091] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 234.041984][ T5853] usb 1-1: new low-speed USB device number 14 using dummy_hcd [ 234.378959][ T5853] usb 1-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 234.397026][ T5853] usb 1-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 234.435066][ T5853] usb 1-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 234.476038][ T5853] usb 1-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 234.519196][ T5853] usb 1-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 234.539998][ T5853] usb 1-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 234.574084][ T5853] usb 1-1: string descriptor 0 read error: -22 [ 234.583930][ T5853] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 234.611760][ T5853] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.648748][ T9091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.652136][ T5853] usb 1-1: rejected 3 configurations due to insufficient available bus power [ 234.703891][ T9091] 8021q: adding VLAN 0 to HW filter on device team0 [ 234.730751][ T5853] usb 1-1: no configuration chosen from 3 choices [ 234.753118][ T30] audit: type=1400 audit(1754667655.189:351): avc: denied { connect } for pid=9175 comm="syz.4.963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 234.783272][ T6978] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.790393][ T6978] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.818347][ T30] audit: type=1400 audit(1754667655.229:352): avc: denied { write } for pid=9175 comm="syz.4.963" path="socket:[22773]" dev="sockfs" ino=22773 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 234.845430][ T6978] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.852599][ T6978] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.290602][ T9091] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 235.535483][ T5171] Bluetooth: hci1: command tx timeout [ 235.983887][ T9091] veth0_vlan: entered promiscuous mode [ 236.098247][ T9091] veth1_vlan: entered promiscuous mode [ 236.173085][ T9091] veth0_macvtap: entered promiscuous mode [ 236.190646][ T9211] siw: device registration error -23 [ 236.216911][ T9091] veth1_macvtap: entered promiscuous mode [ 236.570037][ T978] usb 1-1: USB disconnect, device number 14 [ 236.635783][ T9091] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 236.652832][ T9091] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.683660][ T6978] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.694286][ T6978] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.723532][ T6978] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.743105][ T6978] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.980244][ T3561] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.003511][ T3561] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.059049][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.067336][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.100581][ T30] audit: type=1400 audit(1754667657.539:353): avc: denied { mount } for pid=9091 comm="syz-executor" name="/" dev="gadgetfs" ino=7074 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 237.611998][ T5171] Bluetooth: hci1: command tx timeout [ 237.902172][ T10] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 238.084198][ T9240] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 238.334813][ T10] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 238.343986][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.391968][ T10] usb 1-1: Product: syz [ 238.396162][ T10] usb 1-1: Manufacturer: syz [ 238.426883][ T10] usb 1-1: SerialNumber: syz [ 238.450802][ T10] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 238.599411][ T30] audit: type=1400 audit(1754667659.019:354): avc: denied { create } for pid=9243 comm="syz.1.985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 238.672497][ T5919] usb 5-1: new low-speed USB device number 17 using dummy_hcd [ 238.715169][ T5924] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 238.895823][ T30] audit: type=1400 audit(1754667659.089:355): avc: denied { bind } for pid=9243 comm="syz.1.985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 238.914881][ C0] vkms_vblank_simulate: vblank timer overrun [ 239.020992][ T5919] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 239.244844][ T5919] usb 5-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 239.386956][ T5919] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 239.513609][ T10] usb 1-1: USB disconnect, device number 15 [ 239.543367][ T5919] usb 5-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 239.683082][ T5919] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 239.707323][ T5919] usb 5-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 240.041271][ T5919] usb 5-1: string descriptor 0 read error: -22 [ 240.048362][ T5919] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 240.066260][ T5919] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.078859][ T5919] usb 5-1: rejected 3 configurations due to insufficient available bus power [ 240.099665][ T5924] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 240.106937][ T5919] usb 5-1: no configuration chosen from 3 choices [ 240.115071][ T5924] ath9k_htc: Failed to initialize the device [ 240.125418][ T10] usb 1-1: ath9k_htc: USB layer deinitialized [ 240.182688][ T92] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 240.254692][ T9271] 9pnet_fd: Insufficient options for proto=fd [ 240.341739][ T92] usb 2-1: Using ep0 maxpacket: 8 [ 240.348270][ T92] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 240.359526][ T92] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 240.368768][ T92] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.378919][ T92] usb 2-1: config 0 descriptor?? [ 240.590091][ T92] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 241.047071][ T5924] usb 2-1: USB disconnect, device number 8 [ 241.999652][ T5924] usb 5-1: USB disconnect, device number 17 [ 242.278355][ T9287] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode [ 242.288789][ T9287] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode [ 242.796008][ T9307] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1003'. [ 245.713233][ T9337] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 245.737940][ T9337] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 246.050119][ T30] audit: type=1800 audit(1754667666.489:356): pid=9344 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.1017" name="/" dev="9p" ino=14355223812286978 res=0 errno=0 [ 247.111900][ T9365] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 247.174313][ T5171] Bluetooth: hci1: failed to read key size for handle 201 [ 248.255687][ T9377] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.264460][ T9377] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.271754][ T30] audit: type=1800 audit(1754667668.699:357): pid=9384 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.1033" name="/" dev="9p" ino=14355223812286978 res=0 errno=0 [ 248.348084][ T9377] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 248.374266][ T9377] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 248.419558][ T9377] veth0_vlan: left promiscuous mode [ 248.477822][ T9377] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 248.485275][ T9377] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 248.498317][ T3561] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.518619][ T3561] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.543373][ T3561] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.570138][ T3561] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.084053][ T30] audit: type=1400 audit(1754667669.529:358): avc: denied { read } for pid=9411 comm="syz.2.1040" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 249.159873][ T30] audit: type=1400 audit(1754667669.559:359): avc: denied { open } for pid=9411 comm="syz.2.1040" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 251.212191][ T5171] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 251.222100][ T5171] Bluetooth: hci1: Injecting HCI hardware error event [ 251.230211][ T5859] Bluetooth: hci1: hardware error 0x00 [ 251.620480][ T9510] netlink: 'syz.1.1064': attribute type 10 has an invalid length. [ 253.312482][ T9557] netlink: 'syz.5.1077': attribute type 10 has an invalid length. [ 253.419839][ T9557] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 253.462369][ T5859] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 254.062409][ T9573] comedi comedi0: dmm32at: a I/O base address must be specified [ 255.296084][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.305306][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.419656][ T9608] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.427021][ T9608] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.569035][ T9608] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 255.585251][ T9608] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 255.731271][ T9608] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode [ 255.742670][ T9608] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode [ 255.752805][ T36] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.763119][ T36] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.774417][ T36] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.791993][ T36] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.024986][ T30] audit: type=1400 audit(1754667676.469:360): avc: denied { cmd } for pid=9629 comm="syz.2.1106" path="socket:[24883]" dev="sockfs" ino=24883 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 257.113041][ T54] libceph: connect (1)[c::]:6789 error -101 [ 257.114014][ T54] libceph: mon0 (1)[c::]:6789 connect error [ 257.374090][ T54] libceph: connect (1)[c::]:6789 error -101 [ 257.399731][ T54] libceph: mon0 (1)[c::]:6789 connect error [ 257.427717][ T9655] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1112'. [ 257.606166][ T9646] ceph: No mds server is up or the cluster is laggy [ 257.715054][ T30] audit: type=1400 audit(1754667678.149:361): avc: denied { append } for pid=9661 comm="syz.1.1116" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 257.993854][ T9672] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1118'. [ 258.123602][ T36] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 258.148071][ T36] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 258.187704][ T36] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 258.203147][ T36] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 258.321983][ T54] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 258.511804][ T54] usb 6-1: Using ep0 maxpacket: 8 [ 258.537142][ T54] usb 6-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 258.678868][ T54] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.723725][ T54] usb 6-1: Product: syz [ 258.728180][ T54] usb 6-1: Manufacturer: syz [ 258.741905][ T54] usb 6-1: SerialNumber: syz [ 258.795620][ T54] usb 6-1: config 0 descriptor?? [ 258.890042][ T54] usb 6-1: selecting invalid altsetting 3 [ 258.940382][ T54] comedi comedi5: could not set alternate setting 3 in high speed [ 258.969718][ T54] usbdux 6-1:0.0: driver 'usbdux' failed to auto-configure device. [ 259.015064][ T54] usbdux 6-1:0.0: probe with driver usbdux failed with error -22 [ 259.050541][ T54] usb 6-1: USB disconnect, device number 2 [ 259.218043][ T3561] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 259.227997][ T3561] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 259.510383][ T3561] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 259.519691][ T3561] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 260.795691][ T9717] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 261.168785][ T9744] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.176229][ T9744] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.201962][ T54] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 262.227035][ T9744] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 262.247184][ T9744] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 262.351936][ T54] usb 1-1: Using ep0 maxpacket: 8 [ 262.359909][ T54] usb 1-1: config 0 interface 0 has no altsetting 0 [ 262.367347][ T54] usb 1-1: New USB device found, idVendor=0c70, idProduct=f003, bcdDevice= 0.00 [ 262.379355][ T54] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.417658][ T54] usb 1-1: config 0 descriptor?? [ 262.440032][ T12] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.470109][ T12] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.496393][ T12] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.529982][ T12] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.646246][ T54] usbhid 1-1:0.0: can't add hid device: -71 [ 262.654726][ T54] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 262.676698][ T54] usb 1-1: USB disconnect, device number 16 [ 263.025767][ T9779] siw: device registration error -23 [ 263.316779][ T30] audit: type=1400 audit(1754667683.759:362): avc: denied { append } for pid=9782 comm="syz.0.1149" name="file0" dev="tmpfs" ino=1227 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 263.343097][ T30] audit: type=1400 audit(1754667683.759:363): avc: denied { open } for pid=9782 comm="syz.0.1149" path="/233/file0" dev="tmpfs" ino=1227 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 263.449025][ T5859] Bluetooth: hci4: unexpected event for opcode 0x1408 [ 267.514819][ T5859] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 267.524389][ T5859] Bluetooth: hci4: Injecting HCI hardware error event [ 267.536816][ T5859] Bluetooth: hci4: hardware error 0x00 [ 267.900228][ T9859] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 269.826947][ T30] audit: type=1400 audit(1754667689.409:364): avc: denied { read } for pid=9887 comm="syz.4.1179" name="usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 269.834206][ T5859] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 270.009484][ T30] audit: type=1400 audit(1754667689.409:365): avc: denied { open } for pid=9887 comm="syz.4.1179" path="/dev/usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 270.456232][ T30] audit: type=1400 audit(1754667689.419:366): avc: denied { ioctl } for pid=9887 comm="syz.4.1179" path="/dev/usbmon7" dev="devtmpfs" ino=737 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 270.934379][ T9915] (syz.2.1187,9915,0):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 271.216939][ T10] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 271.389406][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 271.451083][ T10] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 271.465344][ T10] usb 6-1: config 0 has no interface number 0 [ 271.579005][ T10] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 271.631789][ T10] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 271.643796][ T10] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 271.655067][ T10] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 271.668285][ T10] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 271.677619][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.733117][ T9926] netlink: 'syz.0.1191': attribute type 10 has an invalid length. [ 271.736792][ T10] usb 6-1: config 0 descriptor?? [ 271.743971][ T9926] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 271.927121][ T10] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 272.086126][ T54] usb 6-1: USB disconnect, device number 3 [ 272.098803][ T54] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 277.265841][T10001] siw: device registration error -23 [ 277.360119][ T30] audit: type=1400 audit(1754667697.799:367): avc: denied { ioctl } for pid=9998 comm="syz.2.1212" path="socket:[25508]" dev="sockfs" ino=25508 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 277.765732][ T30] audit: type=1400 audit(1754667698.209:368): avc: denied { block_suspend } for pid=10000 comm="syz.5.1214" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 278.120767][ T54] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 278.531653][ T54] usb 2-1: Using ep0 maxpacket: 8 [ 278.617229][ T54] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 279.152142][ T54] usb 2-1: config 0 has no interface number 0 [ 279.210723][ T54] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 279.247260][ T54] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 279.292382][ T54] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 279.836219][ T54] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 280.013542][ T54] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 280.097612][ T54] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.123979][T10046] netlink: 'syz.0.1223': attribute type 1 has an invalid length. [ 280.182476][ T54] usb 2-1: config 0 descriptor?? [ 280.211269][ T54] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 280.442235][ T978] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 280.797446][ T54] usb 2-1: USB disconnect, device number 9 [ 280.817229][ T54] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 280.951653][ T978] usb 6-1: Using ep0 maxpacket: 32 [ 280.960011][ T978] usb 6-1: unable to get BOS descriptor or descriptor too short [ 280.983713][ T978] usb 6-1: config 9 has an invalid interface number: 163 but max is 0 [ 280.995702][ T978] usb 6-1: config 9 has no interface number 0 [ 281.004998][ T978] usb 6-1: config 9 interface 163 has no altsetting 0 [ 281.015718][ T978] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=85.f9 [ 281.035205][ T978] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.054907][ T978] usb 6-1: Product: syz [ 281.120482][ T978] usb 6-1: Manufacturer: syz [ 281.136061][ T978] usb 6-1: SerialNumber: syz [ 281.164249][T10065] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 281.446906][ T978] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 281.448101][ T12] usb 6-1: Failed to submit usb control message: -71 [ 281.460467][ T978] usb 6-1: USB disconnect, device number 4 [ 281.474307][ T12] usb 6-1: unable to send the bmi data to the device: -71 [ 281.486232][ T12] usb 6-1: unable to get target info from device [ 281.501508][ T12] usb 6-1: could not get target info (-71) [ 281.627938][ T12] usb 6-1: could not probe fw (-71) [ 281.641793][ T54] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 281.884308][ T54] usb 1-1: Using ep0 maxpacket: 8 [ 281.937762][ T54] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 281.946556][ T54] usb 1-1: config 0 has no interface number 0 [ 281.957427][ T54] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 281.970010][ T54] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 281.984525][ T54] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 281.991656][ T10] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 281.995597][ T54] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 282.019794][ T54] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 282.029230][ T54] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.044053][ T54] usb 1-1: config 0 descriptor?? [ 282.213059][ T54] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 282.333108][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.369664][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 282.441033][T10096] siw: device registration error -23 [ 282.824344][ T10] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 282.833453][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.844091][ T10] usb 5-1: config 0 descriptor?? [ 282.928641][ T54] usb 1-1: USB disconnect, device number 17 [ 282.940526][ T54] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 283.318040][ T10] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor [ 283.348129][ T10] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0001/input/input13 [ 283.946117][ T10] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 284.005941][ T10] usb 5-1: USB disconnect, device number 18 [ 284.211063][T10110] fido_id[10110]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 284.798195][T10133] loop6: detected capacity change from 0 to 524287999 [ 285.308500][T10133] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1251'. [ 286.131668][ T10] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 286.383118][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 286.395530][ T10] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 286.448773][ T10] usb 5-1: config 0 has no interface number 0 [ 286.460813][ T10] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 286.482788][ T10] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 286.507563][ T10] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 286.537879][ T10] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 286.732586][ T10] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 286.784630][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.712305][ T10] usb 5-1: config 0 descriptor?? [ 287.728891][ T10] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 287.933481][ T10] usb 5-1: USB disconnect, device number 19 [ 288.046497][ T10] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 289.929497][T10213] netlink: 'syz.1.1279': attribute type 72 has an invalid length. [ 291.614819][T10255] fuse: Unknown parameter 'group_i00000000000000000000' [ 291.761057][T10261] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.1293'. [ 293.085482][ T30] audit: type=1400 audit(2000000003.050:369): avc: denied { write } for pid=10279 comm="syz.5.1301" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 293.541907][ T30] audit: type=1400 audit(2000000003.270:370): avc: denied { open } for pid=10279 comm="syz.5.1301" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 293.721859][T10297] fuse: Unknown parameter 'group_id00000000000000000000' [ 293.863761][T10307] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.1307'. [ 294.873230][T10330] fuse: Unknown parameter 'group_id00000000000000000000' [ 295.069592][T10342] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.1323'. [ 295.344119][ T30] audit: type=1400 audit(2000000005.310:371): avc: denied { mounton } for pid=10354 comm="syz.1.1329" path="/273/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 295.388966][T10355] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 295.507668][T10359] netlink: 'syz.2.1328': attribute type 1 has an invalid length. [ 295.515556][T10359] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1328'. [ 295.536629][T10359] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1328'. [ 295.546465][T10359] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=10359 comm=syz.2.1328 [ 295.852814][ T30] audit: type=1400 audit(2000000005.460:372): avc: denied { mount } for pid=10351 comm="syz.2.1328" name="/" dev="configfs" ino=1194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 297.163467][ T30] audit: type=1400 audit(2000000007.120:373): avc: denied { execute } for pid=10389 comm="syz.5.1342" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=27633 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 297.535943][T10403] overlayfs: failed to resolve './file1': -2 [ 299.191481][ T10] libceph: connect (1)[c::]:6789 error -101 [ 299.197521][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 299.339352][ T30] audit: type=1400 audit(2000000009.300:374): avc: denied { bind } for pid=10426 comm="syz.1.1352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 299.445955][ T30] audit: type=1400 audit(2000000009.410:375): avc: denied { ioctl } for pid=10432 comm="syz.2.1354" path="socket:[28740]" dev="sockfs" ino=28740 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 299.631394][ T5919] libceph: connect (1)[c::]:6789 error -101 [ 299.637547][ T5919] libceph: mon0 (1)[c::]:6789 connect error [ 299.684606][T10423] ceph: No mds server is up or the cluster is laggy [ 299.751670][T10446] fuse: Bad value for 'fd' [ 299.773306][ T10] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 299.939408][ T10] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 299.949850][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.957959][ T10] usb 6-1: Product: syz [ 299.962844][ T10] usb 6-1: Manufacturer: syz [ 299.967704][ T10] usb 6-1: SerialNumber: syz [ 300.939587][ T10] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 301.007345][T10457] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1363'. [ 301.086086][T10461] fuse: Bad value for 'user_id' [ 301.106843][T10461] fuse: Bad value for 'user_id' [ 301.195718][ T5919] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 301.626577][ T5924] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 301.856495][T10479] loop6: detected capacity change from 0 to 524287999 [ 301.866075][T10479] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1364'. [ 301.921153][ T5924] usb 5-1: Using ep0 maxpacket: 8 [ 301.939019][ T5924] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 301.960980][ T5924] usb 5-1: config 0 has no interface number 0 [ 302.148633][ T978] usb 6-1: USB disconnect, device number 5 [ 302.468219][ T5919] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 302.475285][ T5924] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 302.486314][ T5919] ath9k_htc: Failed to initialize the device [ 302.493060][ T5924] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 302.495116][ T978] usb 6-1: ath9k_htc: USB layer deinitialized [ 302.505148][ T5924] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 302.505188][ T5924] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 302.505226][ T5924] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 302.573166][ T5924] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.614337][ T5924] usb 5-1: config 0 descriptor?? [ 302.665083][ T5924] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 302.858575][ T5924] usb 5-1: USB disconnect, device number 20 [ 302.892886][ T5924] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 303.219559][T10510] ptrace attach of "./syz-executor exec"[5846] was attempted by "ߖ鷴)Qo \x0dvҢ9T{-92\x0ap_3j nޭOa)bkߟ.\x0aK~򜛱تKOkF^3B3){\x5crHBd,X\x09\x0b3c\x22&W\x22\x1bTL'\x09!_Nhٹ=n>a (G6茷A+&ϋЈUߍa{@{\x0b[ɸYacAzÂGl:d<]u~v!9,?Ŵ>\x22ar\x1blKڬY*VS8ȁ6]kK.=`#\x07x!gMDR*OLK\x0c}oKbA>{@aMdnQj̖5)];r,L\x0c=\x0dWAE n`>Ɵs-3`yfeH^/$L1&NP\x0d1D<\x07cPd(EdtaE!ҭ \x09@ݞHG~H%3{- ^Qǚ4e3\x0b>sF̗H]+\x [ 303.285864][ T30] audit: type=1400 audit(2000000013.190:376): avc: denied { append } for pid=10500 comm="syz.1.1379" name="ubi_ctrl" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 304.078279][T10525] netlink: 'syz.4.1386': attribute type 10 has an invalid length. [ 304.088939][T10525] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 304.676772][T10544] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10544 comm=syz.4.1391 [ 305.246566][T10551] (syz.0.1395,10551,0):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 305.274868][ T30] audit: type=1400 audit(2000000015.210:377): avc: denied { associate } for pid=10549 comm="syz.0.1395" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 305.733929][T10560] netlink: 'syz.5.1399': attribute type 10 has an invalid length. [ 306.598488][ T5924] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 306.800812][ T5924] usb 6-1: Using ep0 maxpacket: 32 [ 306.823677][ T5924] usb 6-1: config 0 has an invalid interface number: 89 but max is 0 [ 306.869447][ T5924] usb 6-1: config 0 has no interface number 0 [ 306.944112][ T5924] usb 6-1: config 0 interface 89 has no altsetting 0 [ 306.962777][ T5924] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 306.982267][ T5924] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.990523][ T5924] usb 6-1: Product: syz [ 307.059417][ T5924] usb 6-1: Manufacturer: syz [ 307.094358][ T5924] usb 6-1: SerialNumber: syz [ 307.294935][ T5924] usb 6-1: config 0 descriptor?? [ 307.404969][ T5924] em28xx 6-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 307.428792][ T5924] em28xx 6-1:0.89: Video interface 89 found: bulk [ 308.698856][ T5924] em28xx 6-1:0.89: unknown em28xx chip ID (0) [ 309.070737][ T30] audit: type=1400 audit(2000000019.031:378): avc: denied { create } for pid=10600 comm="syz.2.1408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 309.396217][T10621] netlink: 'syz.4.1412': attribute type 10 has an invalid length. [ 310.185353][ T5924] em28xx 6-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 310.217604][ T5924] em28xx 6-1:0.89: board has no eeprom [ 310.293743][ T5924] em28xx 6-1:0.89: Identified as Terratec Grabby (card=67) [ 310.309350][ T5924] em28xx 6-1:0.89: analog set to bulk mode. [ 310.321879][ T5919] em28xx 6-1:0.89: Registering V4L2 extension [ 310.745448][ T5924] usb 6-1: USB disconnect, device number 6 [ 310.766235][ T5924] em28xx 6-1:0.89: Disconnecting em28xx [ 310.843767][ T30] audit: type=1400 audit(2000000020.771:379): avc: denied { mount } for pid=10648 comm="syz.2.1421" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 310.956393][ T5919] em28xx 6-1:0.89: Config register raw data: 0xffffffed [ 310.964009][ T5919] em28xx 6-1:0.89: AC97 chip type couldn't be determined [ 310.971138][ T5919] em28xx 6-1:0.89: No AC97 audio processor [ 310.983695][ T5919] usb 6-1: Decoder not found [ 310.989544][ T5919] em28xx 6-1:0.89: failed to create media graph [ 311.003734][ T5919] em28xx 6-1:0.89: V4L2 device video103 deregistered [ 311.015542][ T5919] em28xx 6-1:0.89: Registering snapshot button... [ 311.026552][ T5919] input: em28xx snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.89/input/input14 [ 311.168863][T10656] netlink: 'syz.5.1424': attribute type 10 has an invalid length. [ 311.402738][ T10] libceph: connect (1)[c::]:6789 error -101 [ 311.408895][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 311.436087][ T5919] em28xx 6-1:0.89: Remote control support is not available for this card. [ 311.462844][ T5924] em28xx 6-1:0.89: Closing input extension [ 311.484050][ T5924] em28xx 6-1:0.89: Deregistering snapshot button [ 311.558952][ T5924] em28xx 6-1:0.89: Freeing device [ 311.680807][ T5919] libceph: connect (1)[c::]:6789 error -101 [ 311.705900][ T5919] libceph: mon0 (1)[c::]:6789 connect error [ 311.915735][T10666] ceph: No mds server is up or the cluster is laggy [ 312.266406][ T5924] libceph: connect (1)[c::]:6789 error -101 [ 312.272410][ T30] audit: type=1400 audit(2000000022.181:380): avc: denied { execute } for pid=10681 comm="syz.2.1430" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 312.295672][ C0] vkms_vblank_simulate: vblank timer overrun [ 312.951829][ T5924] libceph: mon0 (1)[c::]:6789 connect error [ 314.186807][T10700] netlink: 'syz.1.1437': attribute type 10 has an invalid length. [ 315.532898][ T30] audit: type=1400 audit(2000000025.491:381): avc: denied { ioctl } for pid=10732 comm="syz.4.1448" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 315.593748][ T5924] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 315.747842][T10739] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 316.157885][ T5924] usb 2-1: config 0 has an invalid interface number: 128 but max is 0 [ 316.184281][ T5924] usb 2-1: config 0 has no interface number 0 [ 316.215505][ T5924] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 316.235554][ T5924] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.252131][ T5924] usb 2-1: Product: syz [ 316.259524][ T5924] usb 2-1: Manufacturer: syz [ 316.268074][T10750] fuse: Invalid rootmode [ 316.271848][ T5924] usb 2-1: SerialNumber: syz [ 316.584160][T10756] tipc: Resetting bearer [ 316.712125][ T5924] usb 2-1: config 0 descriptor?? [ 316.749267][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.757725][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.936340][ T5924] usb 2-1: Firmware: major: 225, minor: 107, hardware type: RZUSB (3) [ 318.175005][ T5924] usb 2-1: Read permanent extended address fc:01:09:9f:fd:13:ae:00 from device [ 318.443876][ T5924] usb 2-1: USB disconnect, device number 10 [ 320.110198][ T5919] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 320.592348][ T5919] usb 1-1: Using ep0 maxpacket: 16 [ 320.658751][ T5919] usb 1-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 320.769178][ T5919] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.807720][ T5919] usb 1-1: Product: syz [ 320.816016][ T5919] usb 1-1: Manufacturer: syz [ 320.825983][ T5919] usb 1-1: SerialNumber: syz [ 320.848995][ T5919] usb 1-1: config 0 descriptor?? [ 320.905764][ T5919] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 321.085777][ T978] usb 5-1: new low-speed USB device number 21 using dummy_hcd [ 321.733344][ T5919] gp8psk: usb in 128 operation failed. [ 321.766777][ T5919] gp8psk: usb in 137 operation failed. [ 321.800060][ T5919] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 321.814779][ T5919] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 321.837447][ T5919] usb 1-1: media controller created [ 321.921034][ T978] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 322.123297][ T978] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 322.137414][ T5919] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 322.178724][ T978] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 322.207124][ T5919] gp8psk_fe: Frontend revision 1 attached [ 322.223412][ T978] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 322.227211][ T5919] usb 1-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 322.248866][ T978] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 322.286363][ T5919] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 322.310753][ T978] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 322.326180][ T978] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 322.359060][ T978] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 322.404814][ T978] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 322.417714][ T978] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 322.443158][ T978] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 322.460338][ T978] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 322.464370][T10836] dvmrp0: entered allmulticast mode [ 322.482461][ T978] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 322.519577][ T978] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 322.559811][ T978] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 322.606992][T10853] ptrace attach of "./syz-executor exec"[5846] was attempted by "./syz-executor exec"[10853] [ 322.660817][ T5919] gp8psk: usb in 137 operation failed. [ 322.676475][ T5919] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 322.692843][ T5919] gp8psk: found Genpix USB device pID = 201 (hex) [ 322.860046][ T5919] usb 1-1: USB disconnect, device number 18 [ 322.967943][T10859] input: syz1 as /devices/virtual/input/input15 [ 323.314962][ T5919] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 323.933534][T10864] loop6: detected capacity change from 0 to 524287999 [ 323.941934][T10864] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1488'. [ 324.291150][T10866] siw: device registration error -23 [ 324.599948][ T978] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 324.673189][ T978] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.766295][ T978] usb 5-1: can't set config #168, error -71 [ 324.820929][ T978] usb 5-1: USB disconnect, device number 21 [ 325.593594][T10896] ptrace attach of "./syz-executor exec"[5846] was attempted by "ߖ鷴)Qo \x0dvҢ9T{-92\x0ap_3j nޭOa)bkߟ.\x0aK~򜛱تKOkF^3B3){\x5crHBd,X\x09\x0b3c\x22&W\x22\x1bTL'\x09!_Nhٹ=n>a (G6茷A+&ϋЈUߍa{@{\x0b[ɸYacAzÂGl:d<]u~v!9,?Ŵ>\x22ar\x1blKڬY*VS8ȁ6]kK.=`#\x07x!gMDR*OLK\x0c}oKbA>{@aMdnQj̖5)];r,L\x0c=\x0dWAE n`>Ɵs-3`yfeH^/$L1&NP\x0d1D<\x07cPd(EdtaE!ҭ \x09@ݞHG~H%3{- ^Qǚ4e3\x0b>sF̗H]+\x [ 325.999868][ T5919] usb 5-1: new low-speed USB device number 22 using dummy_hcd [ 326.881914][ T5919] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 326.889825][ T5919] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 326.906830][ T5919] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 326.918935][ T5919] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 326.930979][ T5919] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 326.945533][ T5919] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 326.959272][ T5919] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 326.986929][ T5919] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 327.002089][ T10] usb 1-1: new low-speed USB device number 19 using dummy_hcd [ 327.119333][ T5919] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 327.131263][ T5919] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 327.360198][T10920] mac80211_hwsim hwsim6 syzkaller0: Caught tx_queue_len zero misconfig [ 327.559246][ T10] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 327.870977][ T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 327.882635][ T10] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 327.895056][ T5919] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 327.902596][ T5919] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 327.913344][ T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 327.933254][ T5919] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 327.945109][ T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 327.956364][ T5919] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 327.969202][ T5919] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 327.989855][ T10] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 327.998702][ T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 328.014796][ T10] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 328.026965][ T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 328.061953][ T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 328.082030][T10931] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1513'. [ 328.094668][ T10] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 328.119575][ T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 328.148383][ T10] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 328.189546][ T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 328.224757][ T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 329.019010][ T5919] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 329.055070][ T5919] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.090310][ T5919] usb 5-1: can't set config #168, error -71 [ 329.126326][ T5919] usb 5-1: USB disconnect, device number 22 [ 329.158594][ T10] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 329.193687][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.231450][ T10] usb 1-1: can't set config #168, error -71 [ 329.257469][ T10] usb 1-1: USB disconnect, device number 19 [ 331.835032][ T5924] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 332.449387][ T5924] usb 1-1: device descriptor read/64, error -71 [ 332.598568][T11025] loop6: detected capacity change from 0 to 524287999 [ 332.611205][T11025] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1538'. [ 333.242443][ T5924] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 333.251450][T11028] netlink: 'syz.2.1539': attribute type 10 has an invalid length. [ 333.419263][ T5924] usb 1-1: device descriptor read/64, error -71 [ 333.455266][T11044] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1545'. [ 333.479576][T11044] netlink: 'syz.2.1545': attribute type 10 has an invalid length. [ 333.863473][ T5924] usb usb1-port1: attempt power cycle [ 333.967302][T11051] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1547'. [ 335.380447][T11069] ptrace attach of "./syz-executor exec"[9091] was attempted by "ߖ鷴)Qo \x0dvҢ9T{-92\x0ap_3j nޭOa)bkߟ.\x0aK~򜛱تKOkF^3B3){\x5crHBd,X\x09\x0b3c\x22&W\x22\x1bTL'\x09!_Nhٹ=n>a (G6茷A+&ϋЈUߍa{@{\x0b[ɸYacAzÂGl:d<]u~v!9,?Ŵ>\x22ar\x1blKڬY*VS8ȁ6]kK.=`#\x07x!gMDR*OLK\x0c}oKbA>{@aMdnQj̖5)];r,L\x0c=\x0dWAE n`>Ɵs-3`yfeH^/$L1&NP\x0d1D<\x07cPd(EdtaE!ҭ \x09@ݞHG~H%3{- ^Qǚ4e3\x0b>sF̗H]+\x [ 335.948686][ T30] audit: type=1400 audit(2000000045.472:382): avc: denied { bind } for pid=11064 comm="syz.2.1551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 336.390946][T11079] fuse: Unknown parameter 'user_i00000000000000000000' [ 337.842770][ T30] audit: type=1400 audit(2000000047.562:383): avc: denied { remount } for pid=11086 comm="syz.0.1557" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 338.226749][ T30] audit: type=1800 audit(2000000048.182:384): pid=11101 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.1561" name="/" dev="9p" ino=2 res=0 errno=0 [ 338.298979][ T30] audit: type=1400 audit(2000000048.252:385): avc: denied { listen } for pid=11102 comm="syz.0.1562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 339.459226][T11119] fuse: Unknown parameter 'user_i00000000000000000000' [ 340.082658][T11138] ptrace attach of "./syz-executor exec"[5846] was attempted by ""[11138] [ 341.228448][T11147] siw: device registration error -23 [ 341.920281][T11152] fuse: Unknown parameter 'user_i00000000000000000000' [ 342.215234][T11170] fuse: Unknown parameter 'use00000000000000000000' [ 342.228066][T11160] syzkaller1: entered promiscuous mode [ 342.236448][T11160] syzkaller1: entered allmulticast mode [ 343.788990][ T978] libceph: connect (1)[c::]:6789 error -101 [ 343.798859][ T978] libceph: mon0 (1)[c::]:6789 connect error [ 343.808844][T11199] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1596'. [ 343.992583][T11205] fuse: Unknown parameter 'user_i00000000000000000000' [ 344.072888][T11192] ceph: No mds server is up or the cluster is laggy [ 344.079994][ T978] libceph: connect (1)[c::]:6789 error -101 [ 344.087142][ T978] libceph: mon0 (1)[c::]:6789 connect error [ 344.096965][ T30] audit: type=1400 audit(2000000054.053:386): avc: denied { getopt } for pid=11208 comm="syz.0.1600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 345.640661][T11246] fuse: Unknown parameter 'user_i00000000000000000000' [ 346.250043][ T30] audit: type=1400 audit(2000000055.833:387): avc: denied { mount } for pid=11247 comm="syz.5.1613" name="/" dev="autofs" ino=32436 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 346.591253][ T30] audit: type=1400 audit(2000000056.553:388): avc: denied { unmount } for pid=9091 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 347.851337][T11274] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1623'. [ 348.127832][T11292] fuse: Unknown parameter 'user_i00000000000000000000' [ 348.190428][T11298] fuse: Unknown parameter 'user_id00000000000000000000' [ 348.223141][T11300] Sensor A: ================= START STATUS ================= [ 348.243184][T11300] Sensor A: Test Pattern: 75% Colorbar [ 348.261491][T11300] Sensor A: Show Information: All [ 348.269138][T11300] Sensor A: Vertical Flip: false [ 348.274194][T11300] Sensor A: Horizontal Flip: false [ 348.389227][T11300] Sensor A: Brightness: 128 [ 348.437971][T11300] Sensor A: Contrast: 128 [ 348.450700][T11300] Sensor A: Hue: 0 [ 348.464723][T11300] Sensor A: Saturation: 128 [ 348.485723][T11300] Sensor A: ================== END STATUS ================== [ 348.835392][ T30] audit: type=1400 audit(2000000058.793:389): avc: denied { module_request } for pid=11322 comm="syz.2.1637" kmod="crypto-digest_null" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 349.684008][T11340] fuse: Bad value for 'fd' [ 349.707118][ T30] audit: type=1400 audit(2000000059.653:390): avc: denied { write } for pid=11337 comm="syz.4.1639" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 350.845726][T11387] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1652'. [ 351.078381][T11391] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 351.909352][T11412] siw: device registration error -23 [ 353.491479][T11435] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 354.202169][T11455] loop6: detected capacity change from 0 to 7 [ 354.218647][T11455] Dev loop6: unable to read RDB block 7 [ 354.227132][T11455] loop6: AHDI p3 p4 [ 354.234884][T11455] loop6: partition table partially beyond EOD, truncated [ 354.242942][T11455] loop6: p3 start 5656832 is beyond EOD, truncated [ 354.315075][T11459] siw: device registration error -23 [ 354.714563][ T30] audit: type=1400 audit(2000000064.673:391): avc: denied { ioctl } for pid=11457 comm="syz.5.1679" path="socket:[33219]" dev="sockfs" ino=33219 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 355.321570][T11478] binder: 11476:11478 ioctl c00c6211 0 returned -14 [ 356.279099][T11488] netlink: 'syz.0.1687': attribute type 4 has an invalid length. [ 356.500951][T11495] loop6: detected capacity change from 0 to 524287999 [ 356.509200][T11495] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1694'. [ 358.689120][ T30] audit: type=1400 audit(2000000068.273:392): avc: denied { setopt } for pid=11520 comm="syz.4.1703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 359.865433][ T30] audit: type=1400 audit(2000000069.313:393): avc: denied { listen } for pid=11534 comm="syz.5.1707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 359.964946][ T978] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 360.425564][ T30] audit: type=1400 audit(2000000069.713:394): avc: denied { accept } for pid=11534 comm="syz.5.1707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 360.597690][ T978] usb 1-1: Using ep0 maxpacket: 32 [ 360.681056][ T978] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 360.694439][ T978] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.856436][ T30] audit: type=1400 audit(2000000070.753:395): avc: denied { mount } for pid=11547 comm="syz.2.1711" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 361.091355][ T978] usb 1-1: config 0 descriptor?? [ 361.176760][ T978] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 361.757640][ T30] audit: type=1400 audit(2000000071.624:396): avc: denied { unmount } for pid=5855 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 361.891290][ T978] gspca_nw80x: reg_r err -110 [ 361.907742][ T978] nw80x 1-1:0.0: probe with driver nw80x failed with error -110 [ 362.026081][T11563] overlayfs: failed to decode file handle (len=6, type=251, flags=0, err=-22) [ 363.100985][T11574] fuse: Unknown parameter 'group_i00000000000000000000' [ 363.415680][ T978] usb 1-1: USB disconnect, device number 23 [ 363.502751][T11586] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 363.793458][T11590] Sensor A: ================= START STATUS ================= [ 363.801178][T11590] Sensor A: Test Pattern: 75% Colorbar [ 363.806667][T11590] Sensor A: Show Information: All [ 363.811781][T11590] Sensor A: Vertical Flip: false [ 363.820291][T11590] Sensor A: Horizontal Flip: false [ 363.893946][T11590] Sensor A: Brightness: 128 [ 363.913641][T11590] Sensor A: Contrast: 128 [ 363.919912][T11590] Sensor A: Hue: 0 [ 363.923758][T11590] Sensor A: Saturation: 128 [ 363.934466][T11590] Sensor A: ================== END STATUS ================== [ 364.479979][T11607] netlink: 544 bytes leftover after parsing attributes in process `syz.4.1731'. [ 364.555852][ T30] audit: type=1400 audit(2000000074.514:397): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=37354 daddr=10.128.0.133 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 364.837823][ T10] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 365.380684][ T5924] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 365.497421][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 365.504245][ T10] usb 6-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 365.517173][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.545027][ T10] usb 6-1: config 0 descriptor?? [ 365.672019][ T10] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 365.691557][ T30] audit: type=1400 audit(2000000075.654:398): avc: denied { bind } for pid=11627 comm="syz.0.1741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 365.711037][ T5924] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 365.711065][ T5924] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.711096][ T5924] usb 3-1: Product: syz [ 365.711110][ T5924] usb 3-1: Manufacturer: syz [ 365.742443][ T5924] usb 3-1: SerialNumber: syz [ 365.899318][ T5924] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 366.103878][T11637] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 366.103878][T11637] The task syz.4.1740 (11637) triggered the difference, watch for misbehavior. [ 366.614931][ T10] gspca_nw80x: reg_r err -110 [ 366.627671][ T10] nw80x 6-1:0.0: probe with driver nw80x failed with error -110 [ 366.647634][ T5919] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 367.047429][ T10] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 367.348868][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 367.462385][ T10] usb 1-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 367.474580][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.487034][ T10] usb 1-1: Product: syz [ 367.538270][ T978] usb 3-1: USB disconnect, device number 7 [ 367.550546][ T10] usb 1-1: Manufacturer: syz [ 367.566486][ T10] usb 1-1: SerialNumber: syz [ 367.791407][ T10] usb 1-1: config 0 descriptor?? [ 367.814663][ T10] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 367.927637][T11660] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1749'. [ 367.944223][ T5859] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 368.027290][ T10] gp8psk: usb in 128 operation failed. [ 368.033742][ T10] gp8psk: usb in 137 operation failed. [ 368.042929][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 368.053655][ T10] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 368.067392][ T10] usb 1-1: media controller created [ 368.088328][ T5919] usb 3-1: Service connection timeout for: 257 [ 368.101106][ T5919] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 368.120983][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 368.136996][ T5919] ath9k_htc: Failed to initialize the device [ 368.156613][ T10] gp8psk_fe: Frontend revision 1 attached [ 368.162879][ T10] usb 1-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 368.171677][ T978] usb 3-1: ath9k_htc: USB layer deinitialized [ 368.172982][ T10] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 368.375865][ T30] audit: type=1400 audit(2000000078.324:399): avc: denied { mounton } for pid=11665 comm="syz.1.1752" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 368.678284][T11677] lo speed is unknown, defaulting to 1000 [ 368.699838][ T30] audit: type=1400 audit(2000000078.474:400): avc: denied { connect } for pid=11665 comm="syz.1.1752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 368.751532][ T10] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 368.771253][ T10] gp8psk: found Genpix USB device pID = 201 (hex) [ 368.801911][ T5919] usb 6-1: USB disconnect, device number 7 [ 368.865003][T11671] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 368.994613][ T10] usb 1-1: USB disconnect, device number 24 [ 369.214754][ T10] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 369.232544][ T30] audit: type=1800 audit(2000000079.184:401): pid=11696 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.1758" name="/" dev="9p" ino=2 res=0 errno=0 [ 369.312502][T11700] fuse: Unknown parameter '0x0000000000000003' [ 369.628101][ T5919] usb 2-1: new low-speed USB device number 11 using dummy_hcd [ 374.540006][ T5859] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 374.560605][ T5859] Bluetooth: hci2: Injecting HCI hardware error event [ 374.568941][ T5859] Bluetooth: hci2: hardware error 0x00 [ 379.526721][ T5859] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 379.533990][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.545056][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.733843][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.741295][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 510.777970][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 510.784354][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 569.916275][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 569.922593][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 589.014905][ T31] INFO: task syz.1.1776:11740 blocked for more than 161 seconds. [ 589.022648][ T31] Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 [ 590.044742][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 590.053437][ T31] task:syz.1.1776 state:D stack:26264 pid:11740 tgid:11740 ppid:5846 task_flags:0x400040 flags:0x00004006 [ 591.064695][ T31] Call Trace: [ 591.068005][ T31] [ 591.070932][ T31] __schedule+0x1190/0x5de0 [ 592.044614][ T31] ? trace_sched_exit_tp+0xd1/0x120 [ 592.049880][ T31] ? __pfx___schedule+0x10/0x10 [ 592.064621][ T31] ? find_held_lock+0x2b/0x80 [ 592.069308][ T31] ? schedule+0x2d7/0x3a0 [ 592.073643][ T31] schedule+0xe7/0x3a0 [ 593.060785][ T31] schedule_timeout+0x257/0x290 [ 593.065734][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 593.071117][ T31] ? rcu_is_watching+0x12/0xc0 [ 593.075904][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 593.081103][ T31] __wait_for_common+0x2fc/0x4e0 [ 593.086073][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 593.091445][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 594.054684][ T31] ? lockdep_init_map_type+0x5c/0x280 [ 594.060100][ T31] ? __pfx_vhost_net_release+0x10/0x10 [ 594.065622][ T31] __vhost_worker_flush+0x1a8/0x1d0 [ 594.070825][ T31] ? __pfx___vhost_worker_flush+0x10/0x10 [ 594.076856][ T31] ? __pfx_vhost_flush_work+0x10/0x10 [ 594.082236][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 596.064548][ T31] vhost_dev_flush+0xac/0x110 [ 596.069281][ T31] ? __pfx_vhost_dev_flush+0x10/0x10 [ 596.104397][ T31] vhost_net_flush+0x1d/0x1b0 [ 596.109128][ T31] vhost_net_release+0xa2/0x260 [ 596.113995][ T31] ? __pfx_vhost_net_release+0x10/0x10