last executing test programs: 2m44.549789669s ago: executing program 4 (id=163): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@host}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="3c0000000001010400000000000000000200000004001880240001801400018008000100e000000108000200e0050001000000000042bed51aa3595310b8ce80e23b68e695313b9e8c667e2eafd78a82b9d02cbce413e305b419ef2e8b5a1980f9771237c3d336c4594cbd0ef6c8b4f4ea65be811b7a8be2630f565ffa181fc83ac136364eb1f2ec641c7a"], 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x4002004) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000001040)={0x0, 0x0, 0x0}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000101401003bbd7000fadbdf25080003000100000008004a0001000000080001000000000008004b0013000000"], 0x30}, 0x1, 0x0, 0x0, 0x24044836}, 0xc094) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_QUERY(0x9, &(0x7f0000000180)={@ifindex, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f00000001c0)={@ipv4={'\x00', '\xff\xff', @remote}, 0x40000, 0x0, 0x1, 0x1, 0x3f}, 0x20) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYBLOB='@', @ANYBLOB="150500000000ffdbdf250300000008000100", @ANYRES32=r8], 0x140}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000002c0)={'macvlan0\x00'}) 2m43.295873019s ago: executing program 4 (id=166): syz_io_uring_setup(0xa0, &(0x7f0000000700)={0x0, 0x89b8, 0x100, 0x0, 0x207}, 0x0, &(0x7f0000000480)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) memfd_create(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) close(0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYRES16, @ANYRES16, @ANYRES8], 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) syz_open_dev$MSR(0x0, 0x0, 0x0) fsopen(&(0x7f0000000200)='iso9660\x00', 0x0) syz_emit_ethernet(0xfffffffffffffefe, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0xd}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r2) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, r3, 0x6a98047402e98331, 0x70bd21, 0xffa1}, 0x14}, 0x1, 0x0, 0x0, 0x24000044}, 0x4008800) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000080)='devpts\x00', 0x0, 0x0) syz_usb_connect$hid(0x1, 0x36, 0x0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000000000)) 2m40.407728091s ago: executing program 4 (id=172): syz_io_uring_setup(0x49c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x1, 0x71, 0x10, 0x97}}, &(0x7f0000000480)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r1, 0x0) timer_create(0x0, 0x0, &(0x7f0000000000)) r2 = socket(0xa, 0x3, 0x3a) r3 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r3, &(0x7f0000000140)={0xa, 0xe64, 0xb, @empty, 0x1}, 0x1c) r4 = socket(0xa, 0x1, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bind$inet6(r4, &(0x7f0000000140)={0xa, 0xe64, 0xb, @empty, 0x1}, 0x1c) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x4, @empty, 0x101}, 0x1c) setsockopt$MRT6_INIT(r2, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x0, @empty, 0x40}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4]}}, 0x5c) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000000)=0x10fc4c16dadd9937, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x9, 0x15031, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x40008) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYRES64=r1], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r5}, 0x10) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) 2m38.017513461s ago: executing program 4 (id=178): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000180)={0xa, @pix={0x0, 0x0, 0x20493859, 0x0, 0x3, 0x3, 0x9, 0xfeedcafe, 0x3, 0x8}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) socket(0x2a, 0x2, 0x0) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xea60}) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000400)=ANY=[@ANYRES64=r0], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000040)={0x11, @time={0xcf20, 0x8}, 0x6, {0x10, 0x7f}, 0x0, 0x0, 0x44}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0xf3a, 0x0) tee(r2, r5, 0xf3a, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getpid() kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000ac0)='/proc/tty/drivers\x00', 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) connect$inet(r6, &(0x7f0000000480)={0x2, 0x1000, @multicast2}, 0x10) 2m36.012052625s ago: executing program 4 (id=182): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) userfaultfd(0x801) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xd) writev(r1, &(0x7f00000002c0)=[{&(0x7f00000001c0)="4888", 0x2}], 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x22, 0x2, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000180)=0x1) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) listen(0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) writev(0xffffffffffffffff, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) r4 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) sync() ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000940)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x5, 0x0, 0x0, r5}) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f000010"], 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) close(r6) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x0) 2m32.435151401s ago: executing program 4 (id=192): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x3ff, 0x764, 0x4000d, 0x1, 0x6, 0x7}, 0x1c) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_dev$media(0x0, 0x80000000, 0x40) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000280)={0x80000000, 0x0, &(0x7f00000000c0)}) ioctl$MEDIA_IOC_ENUM_ENTITIES(r1, 0xc1007c01, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000480)}], 0x1, 0x0, 0x0, 0x7400}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) socketpair(0x23, 0x2, 0x0, &(0x7f0000000040)) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000005c0)=ANY=[], 0x20) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') write$vhost_msg(r5, &(0x7f0000000840)={0x796e6564, {0x0, 0x0, 0x0}}, 0x7) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20004000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0xe241, 0x100000000, 0xf, 0x80000006}, 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r6, &(0x7f0000000000), 0x12) 2m19.097068813s ago: executing program 1 (id=224): quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000180)='gfs2\x00', 0x2208004, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60242, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000f40)={'pimreg\x00', 0x3c32}) ioctl$TUNSETQUEUE(r2, 0x400454d9, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x44, 0x0, 0x0, 0xb47, 0x8000000000000009, 0x8, 0x5, 0x3}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x1801}) openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x2d0bc1, 0x0) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x40001) ptrace(0x10, 0x1) 2m17.882590521s ago: executing program 1 (id=216): openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000000180), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0) fsopen(&(0x7f0000000280)='proc\x00', 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000380), 0x80000, 0x0) ioctl$RTC_UIE_ON(r4, 0x7003) ioctl$RTC_SET_TIME(r4, 0x4024700a, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB='\x00'/15], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000001300)=ANY=[@ANYBLOB="180000000000000000000000000000001811000039c3cc81ed", @ANYBLOB="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", @ANYRESHEX=r4], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x20, 0xc, &(0x7f00000000c0)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x900, 0x12) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x4, 0x0, 0x8, 0x8, r2, 0xca0, '\x00', 0x0, r1, 0x1, 0xfffffffd, 0x0, 0xf}, 0x50) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB, @ANYRES32=r8], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000007c0)={r9, &(0x7f0000000680), 0x0}, 0x20) 2m16.439500607s ago: executing program 32 (id=192): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x3ff, 0x764, 0x4000d, 0x1, 0x6, 0x7}, 0x1c) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_dev$media(0x0, 0x80000000, 0x40) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000280)={0x80000000, 0x0, &(0x7f00000000c0)}) ioctl$MEDIA_IOC_ENUM_ENTITIES(r1, 0xc1007c01, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000480)}], 0x1, 0x0, 0x0, 0x7400}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) socketpair(0x23, 0x2, 0x0, &(0x7f0000000040)) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000005c0)=ANY=[], 0x20) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') write$vhost_msg(r5, &(0x7f0000000840)={0x796e6564, {0x0, 0x0, 0x0}}, 0x7) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20004000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0xe241, 0x100000000, 0xf, 0x80000006}, 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r6, &(0x7f0000000000), 0x12) 2m16.399975203s ago: executing program 1 (id=218): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) socket(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x8}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000100)=ANY=[@ANYRES8=r3, @ANYRESHEX=r0], 0x0, 0x3}, 0x94) r4 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) write$P9_RREMOVE(r4, &(0x7f00000002c0)={0x7, 0x7b, 0x2}, 0x7) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x7}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0) dup(0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_coalesce={0x46, 0x80, 0x10000, 0x6, 0xc6, 0x8001, 0xb28e, 0x46, 0x6, 0x81, 0x6, 0x3, 0x8, 0x8008, 0x8000, 0xae, 0x101, 0x2, 0xfff, 0x4d, 0x1000000, 0x1000001, 0x15b}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a}}, 0x1c}}, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c0000000b0601020000000000000000030000000900020073797a300000000005000100070000002400"], 0x4c}}, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r8}, 0x10) 2m15.415539982s ago: executing program 1 (id=220): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0xcc285600, 0x0, 0x1, 0x0, 0x0, 0x0) setpgid(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) setpgid(0x0, r0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x100) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./bus\x00', &(0x7f0000000080), 0x800, &(0x7f00000005c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000001540)=0x0) io_submit(r2, 0x0, 0x0) creat(0x0, 0x8) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x40) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1221840, &(0x7f0000000600)=ANY=[]) read$FUSE(r3, &(0x7f0000004180)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x1d0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x38011, r4, 0x2c8ad000) 2m11.129078939s ago: executing program 1 (id=229): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x52, 0x4007, @fd=r6, 0x6, 0x0, 0x0, 0x2, 0x1}) ioctl$TCSETSF(r6, 0x5404, &(0x7f0000000040)={0x5, 0x432, 0xa00, 0x8, 0xd, "a4c42ba02a0b3b4335931f2d038553da933b3a"}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x18) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4000, 0x0, 0x0) r10 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x54, 0x12, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, {0x0, 0x4e22, [0xfffffffc, 0x0, 0xcd7e], [], 0x0, [0x1]}, 0x0, 0x2000}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "06010000"}]}, 0x54}}, 0x20000080) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r11, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="2400000076001f03000000000000000008000000ffffffff0c000d8008000300", @ANYRES32], 0x24}], 0x1}, 0x0) r12 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r12, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x380, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x1f8, 0x218, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x0, 0x0, 0x0, 0x687c, 0x1}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e0) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000340)={r0, r0, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000000)={@none}) 2m9.367966164s ago: executing program 1 (id=232): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x6) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f00000001c0)=@bpq0, 0x10) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f00000000c0)=@rose={'rose', 0x0}, 0x10) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@flat=@weak_handle={0x77682a85, 0x1, 0x1}, @flat=@handle={0x73682a85, 0xb}, @fda={0x66646185, 0x1, 0x1, 0x2c}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) open(&(0x7f0000000280)='.\x00', 0x80, 0x28) r6 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) fcntl$setsig(r6, 0xa, 0x21) fcntl$setlease(r6, 0x400, 0x1) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) close_range(r6, 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) 2m8.640908573s ago: executing program 33 (id=232): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x6) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f00000001c0)=@bpq0, 0x10) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f00000000c0)=@rose={'rose', 0x0}, 0x10) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@flat=@weak_handle={0x77682a85, 0x1, 0x1}, @flat=@handle={0x73682a85, 0xb}, @fda={0x66646185, 0x1, 0x1, 0x2c}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) open(&(0x7f0000000280)='.\x00', 0x80, 0x28) r6 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) fcntl$setsig(r6, 0xa, 0x21) fcntl$setlease(r6, 0x400, 0x1) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) close_range(r6, 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) 10.098395133s ago: executing program 3 (id=786): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000003c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000024002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r2, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 9.15758964s ago: executing program 3 (id=789): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x4, 0x4, 0x4, 0x12}, 0x48) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000004c0)={{0x5000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd}, {}, {}, {}, {}, {}, {}, {0x8000000}, 0x0, 0x0, 0x0, 0x4, 0x9}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000280)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x6, 0x0, [{0x6}, {}, {0x0, 0x0, 0x6a}, {0x0, 0x35}, {}, {}, {}, {0x2, 0x4}, {}, {}, {}, {0xfd, 0x0, 0xf6}, {}, {}, {}, {}, {}, {}, {0xfd}, {0x0, 0x0, 0x1}, {}, {0x0, 0x4}, {0x0, 0x3c}]}}) 8.157300413s ago: executing program 3 (id=794): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r4 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{&(0x7f0000000380)=""/227, 0xe3}], 0x1}) io_uring_enter(r4, 0x47ba, 0x0, 0x0, 0x0, 0x0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, 0x0, 0x10) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x3000000}, 0x0) 7.965029042s ago: executing program 0 (id=796): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read$FUSE(r2, &(0x7f0000000980)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) 7.947452555s ago: executing program 3 (id=798): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x1, 0x3, '\x00\x00M'}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="20010e"], 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000440)={&(0x7f00000001c0)=[{0x8, 0x1001, 0x0, 0x0}], 0x1}) 7.650288806s ago: executing program 6 (id=800): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f00000008c0)="3bcbdb", 0x3}], 0x1}}], 0x1, 0xc814) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x6}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) sendto$inet6(r1, &(0x7f0000000400)="25eed0aee8c79f49b53c108367401019c41e56367aa3f23916ddf42df6a5ca47adc0f14939ee362a401f6425b5933ed45ac2e4089f33e87ea4fa53cb6f37fa25746f5805cefb6f78a3d525962f72cff39e3fd9074e3260c84fdfced1c00ba3c8cfcd6220a22b568b9ea6d0e366394ae3490b19d046c22e484b0aa11954836b45d4047ab5007b7b758a16f51f05661f02e1cc365db0bf3b54c3c468a8b5462008bc5ffb9db10bed599639774620b78184ada2301d9d494c2c7622d859213c2d7cc96412661b8f8afb818669f98776b43d6f8c598c00e43ade1e0808a35608882523edf4820dc6b1de1a71cb3dcec7265acaaeab264a1082660423eaf763e3d5e6756b9d2e4115906f4284e5e11388dae00c59c49d5bdc02592fbd96f69a586c8e6f36af50d6de76993809225f4a7dfbd1e7feee4438420c40ee1587ef9279cba9847f32d185f2405d680fd8776df5edc7c149279dc808c693dab77ec90071fff6b0b63f5eaadf5e2118dbeebbeb235b90b8b1b871af2ebc579d404578310950526b7be662a9d89be66d6a02522e7352357c02c3a56f8ff816331bd070041ba511613602956381e6d78b645d02dbc77a188168b6312a0998fe17cfd2940c8e5d39e5a95c50f8b0cee4a9c145b23997f830c08fe2e8af162363f4e14d78fd1275af0192483de50d521d85ed5dd21e51e9fba69d7c208ae998c914f5a2393f0594abb1228eb6df78d022707d2e705854e20338e898482ced2d8b853d8cd972bf7d2df97c7fbc2fffb60e9ec9335bf4e98c6d53244dabe2d1d038c75476b620b9263bda96ec2c61f3306dfcfb9f023c3c9678e0ef245b8c3de356f4c4dfe2d791e213b592f8106467517bd0eb3be609108ac41507edb9029c1975fe0c08e461b66b0850a9faf160e658fd770266fa0c70deab155084869592563fe0c136728a2999c6a5d40891a0de089cec58b1ffe2d40e44513b3d51c8c34935b75a351d0d7f9049e6e488585c819437a4e7b338cd5772a744fe79a21327f919ef4bdb9936a5dccd353a45e2642b8cad7aea0152de1d15577c37eff9fc206115e1ed9612183f5aa55ba23b2e2b77432f038b3cc3f0c189414de1402b002ba4464448d74fac86d1ab674a4eb3d8b6e8af11ee37145026fdedb952097fa069ddd516a76c8a647c0faf5a47a75a7294b0eba99291457e4614f0e985bd363de3593590e6f303e511220ce37e1e66711dac26dadaa5f26ab172ef6c7a2f53ed66c0813867e1d53e769efafac557c3977836517f216c53625d8752073fed32346d274613fef1f874d71a632a48220978d6efbf4fb938a46777f05b10cc71d1996772e2536a22b171e2cabffb9099e73026e56210a6162140681048fa9e55388619d83278ea60e5421eaade222b61237aae0d6684f19e090d88da58d0f8e0b4725c41bfc94a5a066d842f768d7ecc527ae2f8ed793ef072da9258db0d11d36637c4765afed52049524efb6feaaa3239dcce104e0889fb10e6a4b7923b4932fecafb1add915f673426c5d6fe7f0290ee8df38763c3737a8bdb4e78b64dd66831440a5dc4e14ccbd14a13f1c513773b9daf0e06cab2bf564b57c8145af47cc64a539fa8326467b318b2e8df6b6cec365f53a3745f4a6cc3d5bfcbe3f11f48713a9568b0fda6f5d88c0d889862e9f36c4f2664da2341b2002d340a4ffb524fa4ae475c2de3842e9c10354a8aa5ee08dcd538ebe243cd8f502cc2fca6dfc7e84a9c844a9be36e198b78d7ab7161f2f590b61fdf175035dee46c5620c9c02ea6b2f7b5d1edee27ba642832a64f7f2dd88a80937bf92d187a4a3dda7cc981b1cbd09416c418af48af5cfef16adb3ebf966a2fe7cbfb1a42b20eeea1c5f5406e644c4561d6e7009ae32331b5c372eccd802c962a56a994c793b145523b1c52356ffc8d0eef096851598692ca35f3d458890493a9883a61501d0fbc92d4543fa753a33bc954544a128a0e02d229737ca4432f9e013b4eba209b7b043eafd698bd756bd6c931798b07b7f62852ce7b3e38c6a3e3ce45535a8f383b57d3217881e7a62aa933809a6b0934b5e63f5617337971b515ccf38208be292107c1a83af71f1d5cc93cf96c1baaae648fa360f7a1a51eace114ba9b1a05db6dedd55ffe78a0e028c42346252a4e27d659447083f30850b02acda5903ca7605fcc9f22015f4c9ea924e7055d4d983a2cbb20a53cc4124bb300bbfb2628565fd09c6702b2d6dd15cff149c0fe7404a297500c4ca3186ccf88c7f46e3d6bf138ec31ba901c42e5ad349ff36c1572df219a1fca81b2aad102c2767006dd82a741cb6024231101e52bef3c581fe339377167620a8e443fead98c800ad9a25dd40e9af5a789bbafc6d742fa9a1b18e01a87cfa2c914ae559b4e63f9ca50943cfe8143d276ca84c814a0f8e8ee2c0a34a65b09856ac5e78bf92344d9b8394a4c2a60800dae54b10caf40bb09b47526e6707141d4f0a013a6e3567daf6db158b7886d84245b865216e916584149c5b84110dd677a756dc1e76c0d2f4e29fe6a67dd4f550b64936cd642adfff786fb89146b447195162ac8ef682874e20fca482bdce967eeb8c68503ad5ce7374b57df9541e1d7a848d863a5cc6dcbeed060103352e90eed71d60cd2be1ec63d98e25d652656601fd70910491b6f2ec81bec992eed2a5e749c93026375a197d93b88b626320340bdca0061d097505bd608543a25eb455f082700ceb2a4361eed56f1d93c40f84050b91a768830f36e6c5044b0df74cccd22dee667e4c597db72e9d3b9e59684130e07699edc511934a270288d5b52b6179c5abf048ede9d5e0d2d0d845dd63962523622d0564fdfdebd4503304681ec758083c639d11b4e2d47e0e63c5f6e7e96d6f2d6c58bdd8df926879c2047794b343b9ceeefa88e96b762cfc469739c933594627bc7e547f8c3cbeb0903473e8d4b323d5021e80dc4f2b0db7ce6f3da41790a4faf682a21593dfcf2e672e471aeceac0746510485f432ef35f68b5e5b2942525ef5c915236f4893e2281f05c586220041d9685ce8c59315cd783932691ae67e1ad85814af28a253d562b00c8503a0a7bf7dd73ee66641a59606c83fc783966c54cb183a812cfd135c945dcb752c29fae0d55c5b35659361d866b790010eeb98a4909038e6870e4b79c756612761e53831186b840840558dc25361c5ccb919222a9effef676b1e68e7d06a596b712e0adcf2d1972d92d979d95ee44ace518e3f95311cd51f7e48f79775233ae1b2500ca1779ed92cd575e85391d1c7a283d19e008379e9ccd2706f9c191094d31ca0e4e8148776250302774111ef74b980613bd350f6043e8b745f6134336e615e65d491a2c552407a9b87c2aa2883c2d829441ac92ebd11b4425ced9f5d68aeb034a7e6cacb0cc22267cf8f6b3d8a49371b392b0ac9d1845ca7a3e016a3161cd0099e459fdb05719660edaab4f7f2ee5cabe8802222a3acb2551106a63a1b29d5700742619dd758476a95f5b9f98422d54b0104f01f78ca632dae4e7294a4ba6083882ca7f406d97e6049d32fed8864671fb03992e902d463175de1fc784d0b2bc14023f850a3258658755ac00daa52abc1e824527a028b9bff2abd893e58169c736c26fc16e16dfaf132ca505bb9bff4c058763f54f0f36177e510e0ec237dba1f2c5d051158872ae09e7c2177e7cd366fd706b96ad75604c0477b715871602f00e5020d2112536bd255469d94a2ecf73557aa562da2df3aa12224e2f2a1cef614c5320a72bc54c81712205613f9fbe4449722aeaf130585ee52d993b37b18946958894cf2d795770d831fc6097e5795db584dadcafd5faf9352d31d9968a1bc09b32fd126a897dfa18b07910595446c28cffc0b76c046a1db4dbe14bebf0a44d68ddb6d4c073d5e79fb2788a5fdbfa0df9d6084bca32f7bd135ac843c728c040fdf2e10d1cf691508ae64aa3c40d0a198160c3b32d1d02399b509b88c82d77ca6a2bd81adaf671efdd790741a3f67023417fdb734fc697b456af920b1831ba52df170e1c45c3149ee393972a6b9dc97dd4aca5df478c4a593c76ee67ae259fc414bcad85098692f7e9aa660bb27c3ee6e96171ee240919c636aca69d875543d04d6cf48305a785422f4b4f5a99525a0951448acf33e8fc438b32b31eae7169cc82daba924d51708fd2f64c9076cfc7ad03da98051316209d66eb752346adcbc696dfb13000a77fa3655fdfca05b41ca01247c5d8e385cda3c8e2b65f9b34679130f99c81838e3ae716ab9fc9f07f6267d0197a43ed163e5025a11cb9fc1cec83e253d3c8a2d3a8f697ceaa3772bcf37ed8f0151b47e82bf270e549fc5651541a9da77aa128b193bb98f6e023cae58237daa93ddfa781394cd4c4a2519d4a0ea8a60bef2bd0e7bcac51999e6a916ea3a5566845ae498c048a7d036b1bfb1e59ed700421b0019ff1c1aee887b90cc8e1be4669e44dadb3468593b24e4b8d2c3365b95932d00503a82ce2dba2622986a14967a16233924bbf03a33d5a018274f44ccf31959057a696f63b4d5a319b81d8674cfe615807bdad84f79a1bc3a679bfd5fd24bca93a49c355e1d0c4cf42162111413c328b6df45191d5a38ef9e6e525590332eee19e20174ec5ce53e5ff5988a1135bd49dc1ebed1004afd6c77b79c607f074e8a7bd348706921201b49f656a9218cd3073ae9dccee23d99840c18e7d9eb1c6028f94c5e234a2fa05a350ad23e10a6e6ed6a592cf48877a32dc147f32eb05817e0e438d78c8ff4d5ef22d8747f88ebe57b96ed8a4d00729dd659361bf9198477562a4daec9f60c7a73f18f537db5e43c75edd13c98d224a614fe684835bda1e84cf441fa3240eab03e241fd4f84e594cc82a6acc80ecc74e6ca93e3d9706075cda806a6da92a73a57b5af5be2d8e97500dd2c920fc36d19b4f8673b45fd13ea736aeeaaa5872f6d95ce3fd560a9377f12e0b2440ff9f2986e5c1495f66e7e45cf4822e33670dd150e184c30ee769d9df212ca8a73928188ed025759260b7bcdfe21ff326bb01641305d874316c9d28889fbbdedd1fdf2174558625b3bf161c9fd312b2e41223e03939e04ee3e9fd6779ef6155279ab275949a0e7b84e54daa6eff264e079d5e41744234b86e712f48fd56b1481ed9e7a1c074b0f1a1b3a4c5286fa8d07df3c9eb161401286d09881bd52cd5ac0dd6d84bab3fd907d0fc572c8e4e00060cf6274026e3c3568bc6df507ee2c407d6c77e8a0fca12c40a5e590d4b0ad6a534929986adf883937893fe8a61407341b314796124652d3f94962ed1b25126d1e63aebbe4d2b1c148e98c570838212e253049496da922ea734b19f27a4f17e46a70e2d5a4fa97d2b5df5e0fe0795183e1e6d9be3726909d408dbda8332e59c95180aedfdbca78843fb062f9ed25f5df9cb7635a2214e6c7471913fe8f31b4458133c3cec6d6976e837c8d3da4556b257cb016d5cd0d7a832a4741c2b5693d162ca14f697b4f490a606951b0af34a1de42008e85caeecfad118ed787dd27829fab887fb07bc096a079ac23f78cd6258849e5f30626f222de9015925e944ce7933cf580578a6e14aab46e1a23e1af9a82dfb946ecb6de82bb7843b1ff731631a9c9466bc547a32a38744934a3e88e1f761f23504375d062e9f8d921776e18b8e210aaa20f4d416f481bc497a6a47a022636ab85f91d34b94654a4b39aebc77c40c1493ee44d5ffb2039f830bebefcf5b4ac693d67cc7f9e7bbc363fc3cd888ff85e749e0415ecc5fc70297722b9005aebc", 0x1000, 0x4000, 0x0, 0x0) sendmmsg$inet6(r1, 0x0, 0x0, 0x10000895) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x8, 0x11, r0, 0xf6690000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f00000001c0)=0x40) 7.566862376s ago: executing program 6 (id=801): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)={0x14, 0x0, 0x30b, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x20000004) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000040), 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000500)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000480)=[{{&(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000004300)="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", 0x8e2}, {0x0}], 0x2}}], 0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 7.450908224s ago: executing program 6 (id=803): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000240)={0x1, 0x80, 0x3, 0xf, 0x6, 0xff, 0x28, 0xd5, 0xb, 0xd, 0xf8, 0x5, 0x5, 0x9}, 0xe) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x0, 0x20}, 0xc) sendmmsg$inet6(r1, &(0x7f0000003f00)=[{{0x0, 0xf, &(0x7f0000000300)=[{&(0x7f0000000140)="a2", 0x1a058}], 0x1}}], 0x1, 0x0) shutdown(r1, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 7.315492092s ago: executing program 6 (id=805): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x1c57, &(0x7f0000000300)={0x0, 0x40ac, 0x10000, 0x6, 0x3f, 0x0, r3}, &(0x7f0000000280)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2}) io_uring_enter(r4, 0x2def, 0x4000, 0x0, 0x0, 0x0) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) preadv2(r7, &(0x7f0000000180)=[{&(0x7f0000000000)=""/167, 0xa7}], 0x1, 0x0, 0x4, 0x1) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 6.985585535s ago: executing program 0 (id=807): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)=0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0xf39, 0x0) splice(r2, 0x0, r5, 0x0, 0x4, 0x4) timer_settime(r1, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) close(r3) fcntl$setown(r3, 0x8, r0) ioctl$BLKZEROOUT(r5, 0x127f, &(0x7f0000000040)={0x1, 0x100000000}) 6.4976939s ago: executing program 2 (id=808): socket$inet6_udplite(0xa, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, 0x0, 0x480c0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) gettid() fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) utimensat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r5, 0x560a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 5.616241374s ago: executing program 6 (id=810): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x80}, 0x0) recvfrom(r2, &(0x7f0000000280)=""/90, 0xfffffffffffffe4a, 0x500, 0x0, 0x0) connect$unix(r3, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) 5.594459371s ago: executing program 5 (id=811): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) bind$netlink(r5, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r6, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}}, 0x0) 5.590053427s ago: executing program 0 (id=812): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000280)='g', 0x1, 0x4008891, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000000c0)={0xb, 0x4, 0xfe, 0x2, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5}, 0xe) setsockopt$sock_int(r1, 0x1, 0x28, &(0x7f0000000000)=0xf66, 0x4) shutdown(r1, 0x1) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) 5.454492375s ago: executing program 2 (id=813): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_open_procfs(0x0, 0x0) r1 = syz_clone(0x20022180, 0x0, 0xfe02, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000000040)='stat\x00') pread64(r2, &(0x7f0000000140)=""/15, 0xf, 0x4) 4.427216014s ago: executing program 0 (id=814): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) syz_open_dev$sndctrl(&(0x7f0000000280), 0x10, 0xa1480) r2 = openat$ppp(0xffffffffffffff9c, 0x0, 0x109942, 0x0) ioctl$PPPIOCSPASS(r2, 0x40107447, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) syz_open_dev$usbmon(&(0x7f0000000540), 0x3179d5ea, 0x163d01) ftruncate(0xffffffffffffffff, 0x8979) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x4, 0x2, 0xf7, 0x0, 0xffffffffffffffff, 0xd71b, '\x00', r3, 0xffffffffffffffff, 0x0, 0x5, 0x5, 0x4}, 0x50) close_range(r0, 0xffffffffffffffff, 0x0) 4.290154638s ago: executing program 2 (id=815): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @multicast2=0xe0000001}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x9000000) 4.286465766s ago: executing program 3 (id=816): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x98a4, 0x100, 0x4, 0x165}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r1, 0x0, 0x0, 0x0, 0x60, 0x1, {0x1}}) io_uring_enter(r2, 0x3517, 0x173d, 0x42, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) 4.255438704s ago: executing program 6 (id=817): syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaabbaaaaaaaaabaa0800e0"], 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000000)="89e7ee2c21fe62a3b47380c988ca", 0x4a}, {&(0x7f0000000040)="8fac99b31b6cf86d622f", 0x6}, {&(0x7f0000000080)="49dafdf0920cc0a52de279ab7ac1", 0xe}], 0x3) 3.479611309s ago: executing program 5 (id=818): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01090000000000000f478e"]) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000380)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x0, 0x4002004c4, 0x1000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9, 0x0, 0x7], 0xeeee8000, 0x2113c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.114129191s ago: executing program 0 (id=819): ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0xc008aeba, &(0x7f0000000000)={0xc, 0xc, 0x4, 0xfffffffffffffffe, 0x200007}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000240)={[{0xffff0001, 0x5, 0x8, 0x9, 0x6, 0x7, 0x30, 0x9, 0xf9, 0x2, 0xbc, 0x80, 0x5}, {0x5, 0x400, 0x4, 0xc, 0x5, 0x7, 0x7, 0x80, 0x8b, 0x81, 0x4, 0x5, 0x8}, {0xbb1, 0xfff1, 0x92, 0x9, 0x8, 0x0, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x101}], 0x7}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0x1000000000, 0x0, 0x40, 0x2000001, 0x0, 0x2004cb, 0x0, 0x0, 0x68ff, 0x5, 0x0, 0x3], 0x1, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.113307835s ago: executing program 3 (id=820): socket$inet6_mptcp(0xa, 0x1, 0x106) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) ioctl$HIDIOCGRAWPHYS(r1, 0x4004480d, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0xa002, 0x0) pselect6(0x40, &(0x7f0000000600)={0x11, 0xff7ffffffffffffc, 0x2, 0xffffffffffffffff, 0xfffffffffffffffe, 0x9, 0x2, 0x8}, 0x0, &(0x7f0000000400)={0x7fc, 0x2, 0x800000, 0x0, 0x0, 0xc3ad}, 0x0, 0x0) 2.950499852s ago: executing program 5 (id=821): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x68e, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x80, 0x1d4, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0xef92, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) recvmsg(r5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x122) 2.854974998s ago: executing program 2 (id=822): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_io_uring_setup(0x460, &(0x7f0000000480)={0x0, 0x40000020, 0x10, 0x2, 0x34f}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x2f, 0x1, 0x0, 0x4}]}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0xffffffffffffff8a) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000440), 0x2) 2.77483771s ago: executing program 0 (id=823): pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="150000"], 0x15) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000200)={0x50}, 0x50) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r1, &(0x7f00000005c0)="9a", 0x1, 0x24000045, &(0x7f0000000080)={0xa, 0x2, 0x9, @loopback, 0xe}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f000000cf40)='htcp\x00', 0x5) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8080) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[], 0x0) shutdown(r1, 0x1) 1.896332646s ago: executing program 5 (id=824): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r0 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = fsopen(&(0x7f00000001c0)='ocfs2_dlmfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) 1.381771918s ago: executing program 2 (id=825): sched_setscheduler(0x0, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10a) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008020000d9"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 1.142320787s ago: executing program 5 (id=826): socket$kcm(0x10, 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r2 = syz_open_dev$media(&(0x7f0000000080), 0x10001, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$usbfs(&(0x7f0000000140), 0x76, 0x101301) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xff, 0xfffffffffffff0af, 0xffffffffffffffff, 0x0, 0x10000, 0x103, 0x3}, 0x0, &(0x7f00000002c0)={0x3fe, 0x8000000005, 0x3, 0x7, 0x9, 0x45ff, 0xd68d, 0x40000000000}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 118.350637ms ago: executing program 2 (id=827): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5f7, @name="ac2ad54970138065d4b1a10a14b7e65642722c3da99ba40f000026e78ffc1e0a"}) r3 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000480)="ead4241cc4d637", 0x7, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, 0x0, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 0s ago: executing program 5 (id=828): r0 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xff, 0x80, 0xc, [{{0x9, 0x4, 0x0, 0xfd, 0x1, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x4, 0x20, 0xb}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r1, &(0x7f0000006800)="10", 0x1) syz_usb_disconnect(r0) write$char_usb(r1, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) kernel console output (not intermixed with test programs): lass=dir permissive=1 [ 191.858599][ T7113] lo speed is unknown, defaulting to 1000 [ 192.057649][ T30] audit: type=1400 audit(1753727867.489:349): avc: denied { unmount } for pid=5825 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 192.780042][ T7133] netlink: 'syz.3.228': attribute type 2 has an invalid length. [ 193.384652][ T30] audit: type=1400 audit(1753727868.689:350): avc: denied { name_bind } for pid=7128 comm="syz.3.228" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 193.760255][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.789361][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.809265][ T5845] Bluetooth: hci5: command tx timeout [ 193.895440][ T7142] netlink: 12 bytes leftover after parsing attributes in process `syz.0.230'. [ 194.328503][ T7113] chnl_net:caif_netlink_parms(): no params data found [ 194.338450][ T7144] netlink: 'syz.3.231': attribute type 1 has an invalid length. [ 194.530561][ T30] audit: type=1400 audit(1753727869.929:351): avc: denied { unmount } for pid=5827 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 194.624244][ T7144] 8021q: adding VLAN 0 to HW filter on device bond1 [ 194.820046][ T30] audit: type=1400 audit(1753727870.249:352): avc: denied { ioctl } for pid=7149 comm="syz.0.234" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 194.964550][ T5978] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.102239][ T7120] ALSA: mixer_oss: invalid OSS volume '' [ 195.178847][ T7145] bond1: (slave wlan0): Enslaving as an active interface with a down link [ 195.265681][ T7148] vlan2: entered allmulticast mode [ 195.271336][ T7148] veth1: entered allmulticast mode [ 195.278379][ T7148] veth1: entered promiscuous mode [ 195.285893][ T7148] veth1: left promiscuous mode [ 195.308757][ T7148] bond1: (slave vlan2): making interface the new active one [ 195.322072][ T7148] bond1: (slave wlan0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 195.345094][ T7148] veth1: entered promiscuous mode [ 195.355520][ T7148] vlan2: entered promiscuous mode [ 195.370596][ T7148] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 195.480647][ T7163] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 195.706670][ T5978] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.787581][ T5153] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 195.803780][ T5153] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 195.813001][ T5153] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 195.823562][ T5153] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 195.832047][ T5153] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 195.890045][ T5845] Bluetooth: hci5: command tx timeout [ 195.983006][ T5978] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.015141][ T7113] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.023252][ T7113] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.032157][ T7113] bridge_slave_0: entered allmulticast mode [ 196.040206][ T7113] bridge_slave_0: entered promiscuous mode [ 196.057687][ T7113] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.070872][ T7113] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.078191][ T7113] bridge_slave_1: entered allmulticast mode [ 196.085521][ T7113] bridge_slave_1: entered promiscuous mode [ 196.139104][ T7164] lo speed is unknown, defaulting to 1000 [ 196.163731][ T5978] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.734349][ T30] audit: type=1400 audit(1753727871.739:353): avc: denied { setopt } for pid=7169 comm="syz.2.237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 196.907660][ T7113] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.034489][ T30] audit: type=1400 audit(1753727872.469:354): avc: denied { read write } for pid=7178 comm="syz.2.239" name="mouse0" dev="devtmpfs" ino=999 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 197.054720][ T7113] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 197.123991][ T30] audit: type=1400 audit(1753727872.499:355): avc: denied { open } for pid=7178 comm="syz.2.239" path="/dev/input/mouse0" dev="devtmpfs" ino=999 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 198.267283][ T30] audit: type=1400 audit(1753727872.809:356): avc: denied { mounton } for pid=7178 comm="syz.2.239" path="/47/file0" dev="tmpfs" ino=280 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 198.289496][ T5845] Bluetooth: hci0: command tx timeout [ 198.297083][ T5845] Bluetooth: hci5: command tx timeout [ 198.305043][ T30] audit: type=1400 audit(1753727872.809:357): avc: denied { ioctl } for pid=7178 comm="syz.2.239" path="/dev/input/mouse0" dev="devtmpfs" ino=999 ioctlcmd=0x4509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 198.331800][ T30] audit: type=1400 audit(1753727872.819:358): avc: denied { ioctl } for pid=7178 comm="syz.2.239" path="socket:[11686]" dev="sockfs" ino=11686 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 198.384827][ T7113] team0: Port device team_slave_0 added [ 198.473992][ T7113] team0: Port device team_slave_1 added [ 198.563023][ T7113] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 198.570483][ T7113] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.570528][ T7113] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 198.572888][ T7113] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 198.572901][ T7113] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.572931][ T7113] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 199.070075][ T7186] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7186 comm=syz.0.241 [ 199.121877][ T5978] bridge_slave_1: left allmulticast mode [ 199.127657][ T5978] bridge_slave_1: left promiscuous mode [ 199.150095][ T5978] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.268380][ T5978] bridge_slave_0: left allmulticast mode [ 199.284158][ T5978] bridge_slave_0: left promiscuous mode [ 199.300325][ T5978] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.391385][ T7193] xt_CT: You must specify a L4 protocol and not use inversions on it [ 199.529862][ T7193] block device autoloading is deprecated and will be removed. [ 200.443032][ T5153] Bluetooth: hci5: command tx timeout [ 200.449430][ T5153] Bluetooth: hci0: command tx timeout [ 200.695538][ T5978] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 200.706474][ T5978] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 200.717194][ T5978] bond0 (unregistering): Released all slaves [ 200.732493][ T7113] hsr_slave_0: entered promiscuous mode [ 200.739424][ T7113] hsr_slave_1: entered promiscuous mode [ 200.745276][ T7113] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 200.753372][ T7113] Cannot create hsr debugfs directory [ 201.518162][ T30] audit: type=1400 audit(1753727876.949:359): avc: denied { listen } for pid=7206 comm="syz.3.245" lport=44736 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 201.631222][ T30] audit: type=1400 audit(1753727877.019:360): avc: denied { accept } for pid=7206 comm="syz.3.245" lport=44736 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 202.519479][ T5845] Bluetooth: hci0: command tx timeout [ 204.019578][ T7227] Process accounting resumed [ 204.132292][ T30] audit: type=1400 audit(1753727879.569:361): avc: denied { accept } for pid=7233 comm="syz.3.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 204.166871][ T7236] random: crng reseeded on system resumption [ 204.464173][ T30] audit: type=1400 audit(1753727879.889:362): avc: denied { create } for pid=7240 comm="syz.0.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 204.737927][ T5845] Bluetooth: hci0: command tx timeout [ 205.696327][ T7243] ceph: No mds server is up or the cluster is laggy [ 205.704354][ T9] libceph: connect (1)[c::]:6789 error -101 [ 205.760780][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 207.833751][ T5978] hsr_slave_0: left promiscuous mode [ 207.849798][ T5978] hsr_slave_1: left promiscuous mode [ 207.861921][ T30] audit: type=1400 audit(1753727883.299:363): avc: denied { watch } for pid=7271 comm="syz.0.256" path="/62/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=346 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 207.865213][ T5978] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 207.915164][ T7272] netlink: 12 bytes leftover after parsing attributes in process `syz.0.256'. [ 207.953333][ T30] audit: type=1400 audit(1753727883.299:364): avc: denied { watch_sb watch_reads } for pid=7271 comm="syz.0.256" path="/62/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=346 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 207.976069][ T5978] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 208.069231][ T5978] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 208.087424][ T5978] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 208.248449][ T5978] veth1_macvtap: left promiscuous mode [ 208.254541][ T5978] veth0_macvtap: left promiscuous mode [ 208.270657][ T5978] veth1_vlan: left promiscuous mode [ 208.280813][ T5978] veth0_vlan: left promiscuous mode [ 208.764595][ T7275] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 208.884078][ T7279] Falling back ldisc for ttynull. [ 209.054898][ T7284] fuse: Bad value for 'fd' [ 209.072552][ T7284] netlink: 27 bytes leftover after parsing attributes in process `syz.2.258'. [ 209.125264][ T5978] team0 (unregistering): Port device team_slave_1 removed [ 209.163382][ T5978] team0 (unregistering): Port device team_slave_0 removed [ 209.854458][ T7270] vlan3: entered promiscuous mode [ 209.859866][ T7270] syz_tun: entered promiscuous mode [ 209.885670][ T7164] chnl_net:caif_netlink_parms(): no params data found [ 211.238293][ T6025] libceph: connect (1)[c::]:6789 error -101 [ 211.244654][ T6025] libceph: mon0 (1)[c::]:6789 connect error [ 211.363841][ T7300] ceph: No mds server is up or the cluster is laggy [ 211.391322][ T7164] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.417182][ T7164] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.438210][ T7164] bridge_slave_0: entered allmulticast mode [ 211.454078][ T7164] bridge_slave_0: entered promiscuous mode [ 211.524394][ T7164] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.547362][ T7164] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.565656][ T7164] bridge_slave_1: entered allmulticast mode [ 211.578402][ T7164] bridge_slave_1: entered promiscuous mode [ 212.323658][ T7164] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 212.342934][ T7164] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.352699][ T30] audit: type=1400 audit(1753727887.779:365): avc: denied { write } for pid=7309 comm="syz.2.264" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 212.376778][ T30] audit: type=1400 audit(1753727887.789:366): avc: denied { connect } for pid=7309 comm="syz.2.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 212.418116][ T30] audit: type=1400 audit(1753727887.849:367): avc: denied { write } for pid=7309 comm="syz.2.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 212.564011][ T7113] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 212.604964][ T7113] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 212.627017][ T7113] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 212.655062][ T7164] team0: Port device team_slave_0 added [ 212.661964][ T7113] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 212.690732][ T7164] team0: Port device team_slave_1 added [ 212.962780][ T7164] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 212.969876][ T7164] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.997535][ T7164] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.113451][ T7164] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.156472][ T7164] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.182723][ T6025] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 213.278849][ T7164] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.400030][ T7164] hsr_slave_0: entered promiscuous mode [ 213.406169][ T7164] hsr_slave_1: entered promiscuous mode [ 213.426115][ T7164] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 213.943153][ T6025] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 213.954277][ T6025] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 213.971541][ T6025] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.988808][ T7164] Cannot create hsr debugfs directory [ 214.009944][ T6025] usb 4-1: config 0 descriptor?? [ 214.058881][ T7342] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 214.304458][ T7113] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.430920][ T7113] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.506606][ T3568] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.513791][ T3568] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.520977][ T6025] elan 0003:04F3:0755.0001: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 214.631330][ T6025] libceph: connect (1)[c::]:6789 error -101 [ 214.637779][ T6025] libceph: mon0 (1)[c::]:6789 connect error [ 214.639037][ T3568] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.650828][ T3568] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.830126][ T7357] ceph: No mds server is up or the cluster is laggy [ 214.899688][ T5914] libceph: connect (1)[c::]:6789 error -101 [ 214.905797][ T5914] libceph: mon0 (1)[c::]:6789 connect error [ 215.108469][ T7164] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 215.136054][ T7164] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 215.156755][ T7164] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 215.183939][ T7164] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 215.341665][ T7164] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.385577][ T7164] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.423571][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.430705][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.485904][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.493043][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.652113][ T7113] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.683515][ T36] vlan2: left promiscuous mode [ 215.729706][ T43] usb 4-1: reset full-speed USB device number 9 using dummy_hcd [ 216.051913][ T7164] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.316304][ T7113] veth0_vlan: entered promiscuous mode [ 216.365829][ T7113] veth1_vlan: entered promiscuous mode [ 216.448530][ T7113] veth0_macvtap: entered promiscuous mode [ 216.478151][ T5845] Bluetooth: hci4: unexpected event for opcode 0x2040 [ 216.498056][ T7113] veth1_macvtap: entered promiscuous mode [ 216.592492][ T7113] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 216.600331][ T24] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 216.629094][ T7113] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 216.656580][ T7113] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.674006][ T7113] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.712358][ T7113] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.727220][ T7113] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.809701][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 216.820065][ T24] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.875908][ T5914] usb 4-1: USB disconnect, device number 9 [ 216.922029][ T7164] veth0_vlan: entered promiscuous mode [ 216.940694][ T24] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 216.955100][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.047986][ T24] usb 3-1: Product: syz [ 217.052782][ T24] usb 3-1: Manufacturer: syz [ 217.412426][ T24] usb 3-1: SerialNumber: syz [ 217.423238][ T24] cdc_acm 3-1:1.0: probe with driver cdc_acm failed with error -22 [ 217.458790][ T7164] veth1_vlan: entered promiscuous mode [ 217.459839][ T5970] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.484773][ T5970] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.584801][ T5988] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.594078][ T7164] veth0_macvtap: entered promiscuous mode [ 217.600216][ T5988] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.618781][ T7164] veth1_macvtap: entered promiscuous mode [ 217.634655][ T30] audit: type=1400 audit(1753727893.069:368): avc: denied { mounton } for pid=7113 comm="syz-executor" path="/root/syzkaller.K9eKnX/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 217.687975][ T7164] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 217.705979][ T5891] usb 3-1: USB disconnect, device number 2 [ 217.719088][ T7164] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 217.739269][ T7164] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.747510][ T30] audit: type=1400 audit(1753727893.139:369): avc: denied { mount } for pid=7113 comm="syz-executor" name="/" dev="gadgetfs" ino=6749 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 217.749479][ T7164] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.791595][ T7164] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.801352][ T7164] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.019258][ T7442] netlink: 20 bytes leftover after parsing attributes in process `syz.5.217'. [ 218.833427][ T7446] SELinux: selinux_ima_measure_state_locked: failed to read policy -12. [ 218.914979][ T30] audit: type=1400 audit(1753727894.339:370): avc: denied { read write } for pid=5839 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 218.982599][ T30] audit: type=1400 audit(1753727894.349:371): avc: denied { open } for pid=5839 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 219.017209][ T7442] vlan2: entered promiscuous mode [ 219.028634][ T30] audit: type=1400 audit(1753727894.349:372): avc: denied { ioctl } for pid=5839 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 219.054367][ T7442] bridge0: entered promiscuous mode [ 219.068390][ T7442] vlan2: entered allmulticast mode [ 219.074334][ T7442] bridge0: entered allmulticast mode [ 219.117231][ T3568] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.147121][ T30] audit: type=1400 audit(1753727894.389:373): avc: denied { read } for pid=7164 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 219.181973][ T3568] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.415493][ T30] audit: type=1400 audit(1753727894.389:374): avc: denied { write } for pid=7164 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 219.436639][ T30] audit: type=1400 audit(1753727894.399:375): avc: denied { search } for pid=7449 comm="sed" name="resolv.conf" dev="tmpfs" ino=1844 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 219.459408][ T30] audit: type=1400 audit(1753727894.399:376): avc: denied { read } for pid=7449 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=1883 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 219.563774][ T30] audit: type=1400 audit(1753727894.399:377): avc: denied { open } for pid=7449 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1883 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 219.741638][ T5978] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.765670][ T5978] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.756810][ T7469] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 221.228324][ T5845] Bluetooth: hci4: unexpected event for opcode 0x0403 [ 221.394043][ T24] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 222.191856][ T24] usb 6-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice=da.8e [ 222.221370][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.233233][ T24] usb 6-1: Product: syz [ 222.237421][ T24] usb 6-1: Manufacturer: syz [ 222.347989][ T24] usb 6-1: SerialNumber: syz [ 222.377153][ T24] usb 6-1: config 0 descriptor?? [ 222.531949][ T24] usbsevseg 6-1:0.0: USB 7 Segment device now attached [ 222.676501][ T7499] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 222.698551][ T30] kauditd_printk_skb: 56 callbacks suppressed [ 222.698584][ T30] audit: type=1400 audit(1753727898.079:434): avc: denied { create } for pid=7494 comm="syz.0.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 222.954004][ T30] audit: type=1400 audit(1753727898.099:435): avc: denied { write } for pid=7494 comm="syz.0.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 222.976633][ T6065] usb 6-1: USB disconnect, device number 2 [ 222.982862][ T6065] usbsevseg 6-1:0.0: USB 7 Segment now disconnected [ 223.076557][ T30] audit: type=1400 audit(1753727898.109:436): avc: denied { setopt } for pid=7494 comm="syz.0.285" lport=8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 223.107748][ T30] audit: type=1400 audit(1753727898.449:437): avc: denied { create } for pid=7492 comm="syz.3.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 223.229999][ T30] audit: type=1400 audit(1753727898.669:438): avc: denied { create } for pid=7503 comm="syz.6.286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 223.427596][ T30] audit: type=1400 audit(1753727898.689:439): avc: denied { setopt } for pid=7503 comm="syz.6.286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 223.762941][ T30] audit: type=1400 audit(1753727899.199:440): avc: denied { read write } for pid=7511 comm="syz.0.288" name="video1" dev="devtmpfs" ino=931 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 223.820920][ T30] audit: type=1400 audit(1753727899.199:441): avc: denied { open } for pid=7511 comm="syz.0.288" path="/dev/video1" dev="devtmpfs" ino=931 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 223.977231][ T7517] Bluetooth: MGMT ver 1.23 [ 224.005187][ T7517] netlink: 16 bytes leftover after parsing attributes in process `syz.0.288'. [ 224.049202][ T30] audit: type=1400 audit(1753727899.409:442): avc: denied { map_create } for pid=7511 comm="syz.0.288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 224.135772][ T30] audit: type=1400 audit(1753727899.409:443): avc: denied { bind } for pid=7511 comm="syz.0.288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 224.195121][ T24] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 224.212095][ T5845] Bluetooth: hci3: unexpected event for opcode 0x0419 [ 224.432314][ T7530] comedi comedi0: pcl730: I/O port conflict (0x2f00,4) [ 224.485368][ T55] dvb-usb: did not find the firmware file 'dvb-usb-s630.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 224.518077][ T24] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 224.533064][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 224.557332][ T55] dvb-usb: found a 'TeVii S630 USB' in cold state, will try to load a firmware [ 225.037255][ T55] usb 1-1: Direct firmware load for dvb-usb-s630.fw failed with error -2 [ 225.047442][ T24] usb 6-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 225.061397][ T5945] libceph: connect (1)[c::]:6789 error -101 [ 225.067476][ T5945] libceph: mon0 (1)[c::]:6789 connect error [ 225.078481][ T55] usb 1-1: Falling back to sysfs fallback for: dvb-usb-s630.fw [ 225.092121][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.113572][ T24] usb 6-1: Product: syz [ 225.117770][ T24] usb 6-1: Manufacturer: syz [ 225.170320][ T24] usb 6-1: SerialNumber: syz [ 225.197792][ T24] usb 6-1: config 0 descriptor?? [ 225.214249][ T7534] ceph: No mds server is up or the cluster is laggy [ 225.230798][ T5845] Bluetooth: hci3: unexpected event for opcode 0x0c5a [ 225.538318][ T24] powermate: unknown product id 0240 [ 225.553149][ T24] input: Griffin SoundKnob as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input8 [ 225.592882][ C1] powermate: config urb returned -71 [ 225.598462][ C1] powermate: config urb returned -71 [ 225.609352][ C1] powermate: config urb returned -71 [ 225.619265][ C1] powermate: config urb returned -71 [ 226.039846][ T24] usb 6-1: USB disconnect, device number 3 [ 226.039897][ C1] powermate 6-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 226.057496][ T5945] hid-generic 0002:0004:0009.0002: unknown main item tag 0x0 [ 226.065302][ T5945] hid-generic 0002:0004:0009.0002: unknown main item tag 0x0 [ 226.084293][ T5945] hid-generic 0002:0004:0009.0002: unknown main item tag 0x0 [ 226.107023][ T5945] hid-generic 0002:0004:0009.0002: unknown main item tag 0x0 [ 226.114772][ T5945] hid-generic 0002:0004:0009.0002: unknown main item tag 0x0 [ 226.123407][ T5945] hid-generic 0002:0004:0009.0002: unknown main item tag 0x0 [ 226.131631][ T5945] hid-generic 0002:0004:0009.0002: unknown main item tag 0x0 [ 226.140352][ T5945] hid-generic 0002:0004:0009.0002: unknown main item tag 0x0 [ 226.178403][ T5945] hid-generic 0002:0004:0009.0002: unknown main item tag 0x0 [ 226.225767][ T5945] hid-generic 0002:0004:0009.0002: unknown main item tag 0x0 [ 226.276098][ T7558] netlink: 12 bytes leftover after parsing attributes in process `syz.2.297'. [ 226.914956][ T5945] hid-generic 0002:0004:0009.0002: unknown main item tag 0x0 [ 227.314178][ T5945] hid-generic 0002:0004:0009.0002: unknown main item tag 0x0 [ 227.736926][ T5945] hid-generic 0002:0004:0009.0002: unknown main item tag 0x0 [ 227.752825][ T5945] hid-generic 0002:0004:0009.0002: unknown main item tag 0x0 [ 228.000926][ T5945] hid-generic 0002:0004:0009.0002: unknown main item tag 0x0 [ 228.021309][ T5945] hid-generic 0002:0004:0009.0002: unknown main item tag 0x0 [ 228.028804][ T5945] hid-generic 0002:0004:0009.0002: unknown main item tag 0x0 [ 228.622477][ T9] libceph: connect (1)[c::]:6789 error -101 [ 228.639992][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 228.713972][ T7570] ceph: No mds server is up or the cluster is laggy [ 228.819106][ T5845] Bluetooth: hci3: unexpected event for opcode 0x202f [ 228.839284][ T5945] hid-generic 0002:0004:0009.0002: hidraw0: HID v0.04 Device [syz0] on syz0 [ 229.043002][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 229.043019][ T30] audit: type=1400 audit(1753727904.479:463): avc: denied { setopt } for pid=7582 comm="syz.0.301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 229.178301][ T7579] fido_id[7579]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 229.306340][ T30] audit: type=1400 audit(1753727904.529:464): avc: denied { bind } for pid=7582 comm="syz.0.301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 229.878296][ T30] audit: type=1400 audit(1753727904.529:465): avc: denied { name_bind } for pid=7582 comm="syz.0.301" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 229.878481][ T30] audit: type=1400 audit(1753727904.529:466): avc: denied { node_bind } for pid=7582 comm="syz.0.301" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 229.878633][ T30] audit: type=1400 audit(1753727904.649:467): avc: denied { allowed } for pid=7586 comm="syz.5.302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 229.878765][ T30] audit: type=1400 audit(1753727904.659:468): avc: denied { write } for pid=7588 comm="syz.2.304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 229.878937][ T30] audit: type=1400 audit(1753727904.839:469): avc: denied { create } for pid=7582 comm="syz.0.301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 229.879090][ T30] audit: type=1400 audit(1753727904.849:470): avc: denied { setopt } for pid=7582 comm="syz.0.301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 229.880214][ T30] audit: type=1400 audit(1753727904.859:471): avc: denied { create } for pid=7582 comm="syz.0.301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 229.880368][ T30] audit: type=1400 audit(1753727904.869:472): avc: denied { write } for pid=7582 comm="syz.0.301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 231.114282][ T7602] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=7602 comm=syz.5.302 [ 232.048444][ T9] libceph: connect (1)[c::]:6789 error -101 [ 232.054548][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 232.358244][ T9] libceph: connect (1)[c::]:6789 error -101 [ 232.366956][ T7630] ceph: No mds server is up or the cluster is laggy [ 232.373873][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 233.551889][ T7673] siw: device registration error -23 [ 233.619281][ T7645] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 233.845948][ T7416] IPVS: starting estimator thread 0... [ 233.857765][ T7668] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 233.981423][ T7675] IPVS: using max 42 ests per chain, 100800 per kthread [ 234.136140][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 234.136179][ T30] audit: type=1400 audit(1753727909.569:500): avc: denied { ioctl } for pid=7677 comm="syz.0.324" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=14974 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 234.383155][ T43] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 234.579214][ T30] audit: type=1400 audit(1753727909.679:501): avc: denied { create } for pid=7666 comm="syz.2.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 234.637001][ T43] usb 4-1: Using ep0 maxpacket: 8 [ 234.648662][ T43] usb 4-1: config 2 has an invalid interface number: 31 but max is 0 [ 234.699183][ T43] usb 4-1: config 2 has no interface number 0 [ 234.705320][ T43] usb 4-1: config 2 interface 31 has no altsetting 0 [ 234.716144][ T7690] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 234.756872][ T30] audit: type=1400 audit(1753727910.189:502): avc: denied { execute } for pid=7666 comm="syz.2.323" path="/71/cpu.stat" dev="tmpfs" ino=405 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 234.760828][ T43] usb 4-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 234.782788][ T5845] Bluetooth: hci2: command 0x0c1a tx timeout [ 234.798402][ T7695] Cannot find set identified by id 0 to match [ 234.817590][ T30] audit: type=1400 audit(1753727910.219:503): avc: denied { write } for pid=7694 comm="syz.0.329" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 234.822949][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.840800][ C0] vkms_vblank_simulate: vblank timer overrun [ 235.090528][ T43] usb 4-1: Product: syz [ 236.064554][ T43] usb 4-1: Manufacturer: syz [ 236.209967][ T43] usb 4-1: SerialNumber: syz [ 236.311559][ T118] libceph: connect (1)[c::]:6789 error -101 [ 236.317959][ T118] libceph: mon0 (1)[c::]:6789 connect error [ 236.509474][ T30] audit: type=1400 audit(1753727911.939:504): avc: denied { create } for pid=7724 comm="syz.2.335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 236.592272][ T118] libceph: connect (1)[c::]:6789 error -101 [ 236.819452][ T118] libceph: mon0 (1)[c::]:6789 connect error [ 236.826064][ T43] ch9200 4-1:2.31: probe with driver ch9200 failed with error -22 [ 236.834529][ T7713] ceph: No mds server is up or the cluster is laggy [ 236.849450][ T30] audit: type=1400 audit(1753727911.939:505): avc: denied { bind } for pid=7724 comm="syz.2.335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 236.905321][ T43] usb 4-1: USB disconnect, device number 10 [ 236.943783][ T30] audit: type=1400 audit(1753727911.969:506): avc: denied { create } for pid=7724 comm="syz.2.335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 237.177001][ T30] audit: type=1400 audit(1753727911.969:507): avc: denied { connect } for pid=7724 comm="syz.2.335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 237.329993][ T5891] libceph: connect (1)[c::]:6789 error -101 [ 237.336000][ T5891] libceph: mon0 (1)[c::]:6789 connect error [ 237.349296][ T30] audit: type=1400 audit(1753727911.969:508): avc: denied { ioctl } for pid=7724 comm="syz.2.335" path="socket:[15040]" dev="sockfs" ino=15040 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 237.373881][ C0] vkms_vblank_simulate: vblank timer overrun [ 237.380943][ T30] audit: type=1400 audit(1753727911.979:509): avc: denied { write } for pid=7724 comm="syz.2.335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 237.642684][ T7720] netlink: 72 bytes leftover after parsing attributes in process `syz.6.334'. [ 237.967998][ T7753] comedi comedi4: bad chanlist[1]=0x00000008 chan=8 range length=2 [ 238.025908][ T7758] comedi comedi0: s526: I/O port conflict (0x1,64) [ 239.398605][ T5845] Bluetooth: hci4: unexpected event for opcode 0x1003 [ 239.789996][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 239.790012][ T30] audit: type=1400 audit(1753727915.229:520): avc: denied { create } for pid=7795 comm="syz.5.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 239.871853][ T30] audit: type=1400 audit(1753727915.269:521): avc: denied { getopt } for pid=7795 comm="syz.5.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 240.226256][ T7803] lo speed is unknown, defaulting to 1000 [ 240.263956][ T30] audit: type=1400 audit(1753727915.689:522): avc: denied { append } for pid=7805 comm="syz.3.359" name="event2" dev="devtmpfs" ino=923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 240.362150][ T30] audit: type=1400 audit(1753727915.769:523): avc: denied { create } for pid=7808 comm="syz.5.360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 240.403267][ T30] audit: type=1400 audit(1753727915.819:524): avc: denied { setopt } for pid=7808 comm="syz.5.360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 240.456969][ T30] audit: type=1400 audit(1753727915.889:525): avc: denied { connect } for pid=7812 comm="syz.3.361" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 240.499198][ T118] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 240.549481][ T30] audit: type=1400 audit(1753727915.929:526): avc: denied { bind } for pid=7812 comm="syz.3.361" laddr=::1 lport=255 faddr=::1 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 240.572347][ C0] vkms_vblank_simulate: vblank timer overrun [ 240.633581][ T30] audit: type=1400 audit(1753727915.929:527): avc: denied { name_bind } for pid=7812 comm="syz.3.361" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 240.699867][ T118] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 240.713179][ T118] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 240.717368][ T30] audit: type=1400 audit(1753727915.929:528): avc: denied { node_bind } for pid=7812 comm="syz.3.361" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 240.749200][ T118] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 240.775662][ T118] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 240.815824][ T30] audit: type=1400 audit(1753727916.139:529): avc: denied { bind } for pid=7822 comm="syz.5.365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 240.822364][ T118] usb 3-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 240.886551][ T118] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.899459][ T118] usb 3-1: Product: syz [ 240.903671][ T118] usb 3-1: Manufacturer: syz [ 240.912430][ T118] usb 3-1: SerialNumber: syz [ 240.952766][ T118] usb 3-1: config 0 descriptor?? [ 240.971346][ T118] ums-isd200 3-1:0.0: USB Mass Storage device detected [ 241.928136][ T7844] netlink: 24 bytes leftover after parsing attributes in process `syz.3.370'. [ 243.400553][ T5845] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 243.563390][ T5845] Bluetooth: hci4: Injecting HCI hardware error event [ 243.577634][ T5153] Bluetooth: hci4: hardware error 0x00 [ 243.665299][ T118] scsi host1: usb-storage 3-1:0.0 [ 243.694057][ T118] usb 3-1: USB disconnect, device number 3 [ 244.075733][ T24] libceph: connect (1)[c::]:6789 error -101 [ 244.162594][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 244.525188][ T7864] ceph: No mds server is up or the cluster is laggy [ 244.609602][ T43] libceph: connect (1)[c::]:6789 error -101 [ 244.620392][ T43] libceph: mon0 (1)[c::]:6789 connect error [ 244.753586][ T24] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 244.801692][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 244.801722][ T30] audit: type=1400 audit(1753727920.239:540): avc: denied { getopt } for pid=7889 comm="syz.2.384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 245.011538][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 245.059963][ T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 245.088977][ T24] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 245.116802][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 245.238867][ T24] usb 4-1: SerialNumber: syz [ 245.273972][ T24] usb 4-1: 0:2 : does not exist [ 245.418198][ T7902] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.388'. [ 245.597976][ T7905] siw: device registration error -23 [ 245.639622][ T5153] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 245.972837][ T24] usb 4-1: USB disconnect, device number 11 [ 246.031080][ T7250] udevd[7250]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 246.369363][ T118] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 246.529350][ T118] usb 7-1: Using ep0 maxpacket: 32 [ 246.547412][ T118] usb 7-1: config 0 has an invalid interface number: 66 but max is 0 [ 246.575929][ T118] usb 7-1: config 0 has no interface number 0 [ 246.611356][ T118] usb 7-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 246.644143][ T118] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.653610][ T118] usb 7-1: Product: syz [ 246.657785][ T118] usb 7-1: Manufacturer: syz [ 246.666011][ T118] usb 7-1: SerialNumber: syz [ 246.689815][ T118] usb 7-1: config 0 descriptor?? [ 247.507401][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 247.517884][ T118] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 247.619681][ T118] dvb-usb: bulk message failed: -22 (2/0) [ 247.644263][ T118] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 247.662484][ T118] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 247.670970][ T118] usb 7-1: media controller created [ 247.695576][ T118] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 247.744049][ T118] cxusb: set interface failed [ 247.759793][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 247.765014][ T118] dvb-usb: bulk message failed: -22 (1/0) [ 247.774562][ T9] usb 3-1: config 0 has an invalid interface number: 156 but max is 0 [ 247.789345][ T9] usb 3-1: config 0 has no interface number 0 [ 247.801314][ T7911] cxusb: i2c rd: len=133 is too big! [ 247.801314][ T7911] [ 247.809910][ T9] usb 3-1: config 0 interface 156 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 247.849211][ T9] usb 3-1: config 0 interface 156 has no altsetting 0 [ 247.868463][ T118] DVB: Unable to find symbol lgdt330x_attach() [ 247.881294][ T118] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 247.892206][ T9] usb 3-1: New USB device found, idVendor=2040, idProduct=6500, bcdDevice=1c.9d [ 247.903784][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.925935][ T9] usb 3-1: Product: syz [ 247.933178][ T9] usb 3-1: Manufacturer: syz [ 247.937793][ T9] usb 3-1: SerialNumber: syz [ 247.984669][ T9] usb 3-1: config 0 descriptor?? [ 248.019731][ T118] rc_core: IR keymap rc-dvico-portable not found [ 248.026120][ T118] Registered IR keymap rc-empty [ 248.056378][ T118] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0 [ 248.084270][ T118] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0/input10 [ 248.097303][ T118] dvb-usb: schedule remote query interval to 100 msecs. [ 248.108319][ T118] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 248.141571][ T118] usb 7-1: USB disconnect, device number 2 [ 248.209200][ T5945] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 248.210696][ T9] em28xx 3-1:0.156: New device syz syz @ 480 Mbps (2040:6500, interface 156, class 156) [ 248.249935][ T9] em28xx 3-1:0.156: Video interface 156 found: isoc [ 248.257036][ T118] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 248.341106][ T9] em28xx 3-1:0.156: unknown em28xx chip ID (0) [ 248.462541][ T9] em28xx 3-1:0.156: reading from i2c device at 0xa0 failed (error=-5) [ 248.543485][ T9] em28xx 3-1:0.156: board has no eeprom [ 248.779248][ T5945] usb 6-1: Using ep0 maxpacket: 16 [ 248.794671][ T5945] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 248.806407][ T5945] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 249.075058][ T24] libceph: connect (1)[c::]:6789 error -101 [ 249.153755][ T5945] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 249.205585][ T7974] ceph: No mds server is up or the cluster is laggy [ 249.217696][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 249.263064][ T5945] usb 6-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 249.286338][ T30] audit: type=1400 audit(1753727924.719:541): avc: denied { create } for pid=7978 comm="syz.6.406" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 249.321473][ T9] em28xx 3-1:0.156: Identified as Hauppauge WinTV HVR 900 (card=10) [ 249.329757][ T5945] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.426497][ T9] em28xx 3-1:0.156: analog set to isoc mode. [ 249.439457][ T6065] em28xx 3-1:0.156: Registering V4L2 extension [ 249.473983][ T9] usb 3-1: USB disconnect, device number 4 [ 249.488134][ T5945] usb 6-1: config 0 descriptor?? [ 249.501065][ T30] audit: type=1400 audit(1753727924.749:542): avc: denied { write } for pid=7978 comm="syz.6.406" name="file0" dev="tmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 249.527423][ T7952] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 249.535711][ T30] audit: type=1400 audit(1753727924.749:543): avc: denied { open } for pid=7978 comm="syz.6.406" path="/24/file0" dev="tmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 249.566049][ T9] em28xx 3-1:0.156: Disconnecting em28xx [ 249.568358][ T5945] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input11 [ 249.774184][ T30] audit: type=1400 audit(1753727924.749:544): avc: denied { ioctl } for pid=7978 comm="syz.6.406" path="/24/file0" dev="tmpfs" ino=140 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 249.910280][ T7997] siw: device registration error -23 [ 250.479260][ T5891] usb 6-1: USB disconnect, device number 4 [ 250.624046][ T5187] pxrc 6-1:0.0: pxrc_open - usb_submit_urb failed, error: -19 [ 250.653512][ T30] audit: type=1400 audit(1753727926.069:545): avc: denied { sys_module } for pid=7989 comm="syz.2.409" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 250.700340][ T6460] pxrc 6-1:0.0: pxrc_open - usb_submit_urb failed, error: -19 [ 250.915476][ T6065] em28xx 3-1:0.156: Config register raw data: 0xffffffed [ 250.920867][ T5187] pxrc 6-1:0.0: pxrc_open - usb_submit_urb failed, error: -19 [ 250.935998][ T6065] em28xx 3-1:0.156: AC97 chip type couldn't be determined [ 251.338073][ T6065] em28xx 3-1:0.156: No AC97 audio processor [ 251.344059][ T6065] em28xx 3-1:0.156: em28xx_v4l2_init: Error while setting audio - error [-19]! [ 251.353327][ T6065] em28xx 3-1:0.156: Binding DVB extension [ 251.360237][ T6065] em28xx 3-1:0.156: no endpoint for DVB mode and transfer type 0 [ 251.387807][ T6065] em28xx 3-1:0.156: failed to pre-allocate USB transfer buffers for DVB. [ 251.409407][ T30] audit: type=1400 audit(1753727926.129:546): avc: denied { unlink } for pid=7164 comm="syz-executor" name="file0" dev="tmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 251.447713][ T8009] netlink: 40 bytes leftover after parsing attributes in process `syz.6.411'. [ 251.582736][ T6065] em28xx 3-1:0.156: Registering input extension [ 251.649617][ T9] em28xx 3-1:0.156: Closing input extension [ 251.670663][ T30] audit: type=1400 audit(1753727927.089:547): avc: denied { read } for pid=8011 comm="syz.5.413" name="vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 251.690050][ T9] em28xx 3-1:0.156: Freeing device [ 251.775111][ T30] audit: type=1400 audit(1753727927.089:548): avc: denied { open } for pid=8011 comm="syz.5.413" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 251.805384][ T30] audit: type=1400 audit(1753727927.099:549): avc: denied { ioctl } for pid=8011 comm="syz.5.413" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 251.896280][ T30] audit: type=1400 audit(1753727927.179:550): avc: denied { create } for pid=8015 comm="syz.3.414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 251.948381][ T30] audit: type=1400 audit(1753727927.289:551): avc: denied { write } for pid=8015 comm="syz.3.414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 252.305856][ T24] libceph: connect (1)[c::]:6789 error -101 [ 252.328358][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 252.409207][ T5945] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 252.504155][ T30] audit: type=1400 audit(1753727927.939:552): avc: denied { open } for pid=8049 comm="syz.0.424" path="/dev/ptyq4" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 252.557865][ T30] audit: type=1400 audit(1753727927.969:553): avc: denied { ioctl } for pid=8049 comm="syz.0.424" path="/dev/ptyq4" dev="devtmpfs" ino=123 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 252.605199][ T24] libceph: connect (1)[c::]:6789 error -101 [ 252.626514][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 252.672838][ T5891] libceph: connect (1)[c::]:6789 error -101 [ 252.681445][ T5945] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.693393][ T30] audit: type=1400 audit(1753727928.119:554): avc: denied { create } for pid=8049 comm="syz.0.424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 252.725312][ T5945] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 252.755755][ T5891] libceph: mon0 (1)[c::]:6789 connect error [ 252.765069][ T5945] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 252.781621][ T5945] usb 6-1: New USB device found, idVendor=11ff, idProduct=3331, bcdDevice= 0.00 [ 252.790813][ T5945] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.816866][ T5945] usb 6-1: config 0 descriptor?? [ 252.950392][ T8030] ceph: No mds server is up or the cluster is laggy [ 252.973210][ T8047] ceph: No mds server is up or the cluster is laggy [ 253.040339][ T9] libceph: connect (1)[c::]:6789 error -101 [ 253.046473][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 253.329077][ T5945] gembird 0003:11FF:3331.0003: unknown main item tag 0x0 [ 253.342976][ T5945] gembird 0003:11FF:3331.0003: unknown main item tag 0x0 [ 253.350234][ T5945] gembird 0003:11FF:3331.0003: unknown main item tag 0x0 [ 253.358113][ T5945] gembird 0003:11FF:3331.0003: unknown main item tag 0x0 [ 253.369197][ T5945] gembird 0003:11FF:3331.0003: unknown main item tag 0x0 [ 253.376261][ T5945] gembird 0003:11FF:3331.0003: unknown main item tag 0x0 [ 253.386456][ T5945] gembird 0003:11FF:3331.0003: unknown main item tag 0x0 [ 253.888665][ T5945] gembird 0003:11FF:3331.0003: unknown main item tag 0x0 [ 253.919395][ T5945] gembird 0003:11FF:3331.0003: unknown main item tag 0x0 [ 253.949062][ T5945] gembird 0003:11FF:3331.0003: unknown main item tag 0x0 [ 254.069499][ T5945] gembird 0003:11FF:3331.0003: unknown main item tag 0x0 [ 254.076598][ T5945] gembird 0003:11FF:3331.0003: unknown main item tag 0x0 [ 254.116820][ T5945] gembird 0003:11FF:3331.0003: unknown main item tag 0x0 [ 254.150444][ T5945] gembird 0003:11FF:3331.0003: unknown main item tag 0x0 [ 254.188803][ T5945] gembird 0003:11FF:3331.0003: unknown main item tag 0x0 [ 254.196280][ T5945] gembird 0003:11FF:3331.0003: unknown main item tag 0x0 [ 254.203458][ T5945] gembird 0003:11FF:3331.0003: unknown main item tag 0x0 [ 254.265346][ T5945] gembird 0003:11FF:3331.0003: unknown main item tag 0x0 [ 254.469332][ T5945] gembird 0003:11FF:3331.0003: unknown main item tag 0x0 [ 254.553352][ T5945] gembird 0003:11FF:3331.0003: unknown main item tag 0x0 [ 254.668208][ T5945] gembird 0003:11FF:3331.0003: unknown main item tag 0x0 [ 254.782210][ T5945] gembird 0003:11FF:3331.0003: unknown main item tag 0x0 [ 254.789433][ T5945] gembird 0003:11FF:3331.0003: unknown main item tag 0x0 [ 254.799346][ T5945] gembird 0003:11FF:3331.0003: unknown main item tag 0x0 [ 254.816451][ T5945] gembird 0003:11FF:3331.0003: unknown main item tag 0x0 [ 254.839295][ T5945] gembird 0003:11FF:3331.0003: unknown main item tag 0x0 [ 254.982229][ T8084] vlan3: entered promiscuous mode [ 254.987328][ T8084] syz_tun: entered promiscuous mode [ 255.326542][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.334270][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.351203][ T5945] gembird 0003:11FF:3331.0003: unknown main item tag 0x0 [ 255.351360][ T5961] sl0: compressed packet ignored [ 255.358350][ T5945] gembird 0003:11FF:3331.0003: unknown main item tag 0x0 [ 255.363574][ T5956] sl1: compressed packet ignored [ 255.370637][ T5945] gembird 0003:11FF:3331.0003: unknown main item tag 0x0 [ 255.382637][ T5945] gembird 0003:11FF:3331.0003: unknown main item tag 0x0 [ 255.390792][ T5945] gembird 0003:11FF:3331.0003: unknown main item tag 0x0 [ 255.414291][ T5945] gembird 0003:11FF:3331.0003: unknown main item tag 0x0 [ 255.443436][ T5945] gembird 0003:11FF:3331.0003: unknown main item tag 0x0 [ 255.474150][ T5945] gembird 0003:11FF:3331.0003: unknown main item tag 0x0 [ 255.590654][ T5945] gembird 0003:11FF:3331.0003: unknown main item tag 0x0 [ 255.597750][ T5945] gembird 0003:11FF:3331.0003: unknown main item tag 0x0 [ 255.659008][ T5945] gembird 0003:11FF:3331.0003: unknown main item tag 0x0 [ 255.689901][ T5945] gembird 0003:11FF:3331.0003: unknown main item tag 0x0 [ 255.746470][ T5945] gembird 0003:11FF:3331.0003: hidraw0: USB HID v0.05 Device [HID 11ff:3331] on usb-dummy_hcd.5-1/input0 [ 255.826759][ T5945] usb 6-1: USB disconnect, device number 5 [ 256.004282][ T8107] openvswitch: netlink: Tunnel attr 10875 out of range max 16 [ 256.055975][ T8097] fido_id[8097]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 256.245444][ T8112] netlink: 'syz.3.435': attribute type 2 has an invalid length. [ 256.724659][ T5945] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 256.787208][ T8052] delete_channel: no stack [ 257.353956][ T9] libceph: connect (1)[c::]:6789 error -101 [ 257.361979][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 257.369986][ T5945] usb 6-1: Using ep0 maxpacket: 8 [ 257.388086][ T5945] usb 6-1: unable to get BOS descriptor or descriptor too short [ 257.416788][ T5945] usb 6-1: too many endpoints for config 4 interface 0 altsetting 102: 65, using maximum allowed: 30 [ 257.439490][ T5945] usb 6-1: config 4 interface 0 altsetting 102 has 0 endpoint descriptors, different from the interface descriptor's value: 65 [ 257.456126][ T5945] usb 6-1: config 4 interface 0 has no altsetting 0 [ 257.472927][ T5945] usb 6-1: string descriptor 0 read error: -22 [ 257.479365][ T5945] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 257.589485][ T5945] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.623347][ T8127] ceph: No mds server is up or the cluster is laggy [ 257.765613][ T5945] usb 6-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 257.819415][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 257.819431][ T30] audit: type=1400 audit(1753727933.259:558): avc: denied { read } for pid=8137 comm="syz.0.438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 258.459395][ T8148] vlan2: entered promiscuous mode [ 258.464522][ T8148] syz_tun: entered promiscuous mode [ 259.074653][ T8151] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 259.238103][ T5945] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 259.371543][ T5945] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 259.387463][ T5945] usb 6-1: media controller created [ 259.437689][ T5945] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 259.693240][ T5945] zl10353_read_register: readreg error (reg=127, ret==0) [ 259.828125][ T5945] usb 6-1: USB disconnect, device number 6 [ 259.859174][ T6065] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 259.949299][ T43] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 260.054627][ T6065] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 260.065130][ T6065] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.074740][ T6065] usb 3-1: Product: syz [ 260.078997][ T6065] usb 3-1: Manufacturer: syz [ 260.084070][ T6065] usb 3-1: SerialNumber: syz [ 260.097555][ T6065] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 260.114165][ T30] audit: type=1400 audit(1753727935.549:559): avc: denied { firmware_load } for pid=5891 comm="kworker/0:5" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 260.140170][ C0] vkms_vblank_simulate: vblank timer overrun [ 260.150392][ T43] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 260.157915][ T5891] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 260.179444][ T43] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 260.188663][ T43] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 260.205520][ T43] usb 7-1: config 0 interface 0 has no altsetting 0 [ 260.214321][ T43] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 260.225312][ T43] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 260.236498][ T5945] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 260.244350][ T43] usb 7-1: config 0 interface 0 has no altsetting 0 [ 260.254835][ T43] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 260.264115][ T43] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 260.275311][ T43] usb 7-1: config 0 interface 0 has no altsetting 0 [ 260.311015][ T43] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 260.333506][ T43] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 260.361383][ T43] usb 7-1: config 0 interface 0 has no altsetting 0 [ 260.379789][ T43] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 260.389480][ T43] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 260.400666][ T5945] usb 6-1: Using ep0 maxpacket: 8 [ 260.445280][ T5945] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 260.461607][ T43] usb 7-1: config 0 interface 0 has no altsetting 0 [ 260.468324][ T5945] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.489839][ T43] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 260.511668][ T43] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 260.528575][ T5945] pvrusb2: Hardware description: Terratec Grabster AV400 [ 260.546016][ T5945] pvrusb2: ********** [ 260.550387][ T43] usb 7-1: config 0 interface 0 has no altsetting 0 [ 260.559721][ T5945] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 260.589635][ T43] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 260.608827][ T5945] pvrusb2: Important functionality might not be entirely working. [ 260.618978][ T43] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 260.620136][ T6065] usb 3-1: USB disconnect, device number 5 [ 260.635972][ T5945] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 260.674823][ T43] usb 7-1: config 0 interface 0 has no altsetting 0 [ 260.708293][ T43] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 260.719372][ T5945] pvrusb2: ********** [ 260.850254][ T43] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 260.863320][ T2325] pvrusb2: Invalid write control endpoint [ 260.879243][ T43] usb 7-1: config 0 interface 0 has no altsetting 0 [ 260.891185][ T43] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 260.989528][ T43] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 261.221713][ T43] usb 7-1: Product: syz [ 261.329957][ T43] usb 7-1: Manufacturer: syz [ 261.348990][ T5891] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 261.362521][ T5891] ath9k_htc: Failed to initialize the device [ 261.371018][ T5945] libceph: connect (1)[c::]:6789 error -101 [ 261.388524][ T43] usb 7-1: SerialNumber: syz [ 261.394553][ T6065] usb 3-1: ath9k_htc: USB layer deinitialized [ 261.400876][ T5945] libceph: mon0 (1)[c::]:6789 connect error [ 261.416836][ T43] usb 7-1: config 0 descriptor?? [ 261.477945][ T24] usb 6-1: USB disconnect, device number 7 [ 261.480499][ T2325] pvrusb2: Invalid write control endpoint [ 261.488419][ T43] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 261.512906][ T2325] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 261.561419][ T2325] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 261.578601][ T8175] ceph: No mds server is up or the cluster is laggy [ 261.689180][ T2325] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 261.729316][ T2325] pvrusb2: Device being rendered inoperable [ 261.761977][ T2325] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 261.779285][ T2325] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 261.809370][ T2325] pvrusb2: Attached sub-driver cx25840 [ 261.836655][ T43] usb 7-1: USB disconnect, device number 3 [ 261.847241][ T2325] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 261.860251][ T43] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 261.892543][ T2325] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 262.737823][ T43] libceph: connect (1)[c::]:6789 error -101 [ 262.753250][ T43] libceph: mon0 (1)[c::]:6789 connect error [ 263.110333][ T6065] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 263.132256][ T30] audit: type=1400 audit(1753727938.559:560): avc: denied { read } for pid=8238 comm="syz.0.471" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 263.158656][ T8239] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 263.165650][ T8239] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 263.177672][ T43] libceph: connect (1)[c::]:6789 error -101 [ 263.189981][ T8231] ceph: No mds server is up or the cluster is laggy [ 263.198807][ T30] audit: type=1400 audit(1753727938.559:561): avc: denied { open } for pid=8238 comm="syz.0.471" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 263.217714][ T43] libceph: mon0 (1)[c::]:6789 connect error [ 263.239904][ T8239] vhci_hcd vhci_hcd.0: Device attached [ 263.246636][ T30] audit: type=1400 audit(1753727938.599:562): avc: denied { write } for pid=8236 comm="syz.5.470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 263.284569][ T30] audit: type=1400 audit(1753727938.599:563): avc: denied { nlmsg_write } for pid=8236 comm="syz.5.470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 263.329361][ T6065] usb 7-1: Using ep0 maxpacket: 8 [ 263.929335][ T9] vhci_hcd: vhci_device speed not set [ 263.938505][ T6065] usb 7-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 263.951480][ T6065] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.959925][ T6065] usb 7-1: Product: syz [ 263.964107][ T6065] usb 7-1: Manufacturer: syz [ 263.968719][ T6065] usb 7-1: SerialNumber: syz [ 263.977461][ T6065] usb 7-1: config 0 descriptor?? [ 263.989287][ T9] usb 33-1: new full-speed USB device number 2 using vhci_hcd [ 264.053541][ T8254] netlink: 24 bytes leftover after parsing attributes in process `syz.2.473'. [ 264.207862][ T6065] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 264.226118][ T30] audit: type=1400 audit(1753727939.659:564): avc: denied { read } for pid=8259 comm="syz.3.476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 264.236889][ T6065] gspca_sunplus: reg_w_riv err -71 [ 264.290354][ T6065] sunplus 7-1:0.0: probe with driver sunplus failed with error -71 [ 264.318891][ T6065] usb 7-1: USB disconnect, device number 4 [ 266.802220][ T8241] vhci_hcd: connection reset by peer [ 267.023849][ T30] audit: type=1400 audit(1753727942.459:565): avc: denied { read } for pid=8304 comm="syz.3.488" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 267.089175][ T5970] vhci_hcd: stop threads [ 267.111918][ T5970] vhci_hcd: release socket [ 267.159491][ T5970] vhci_hcd: disconnect device [ 267.161130][ T30] audit: type=1400 audit(1753727942.499:566): avc: denied { open } for pid=8304 comm="syz.3.488" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 267.248780][ T5153] Bluetooth: hci3: unexpected event for opcode 0x2003 [ 267.259505][ T30] audit: type=1400 audit(1753727942.529:567): avc: denied { rename } for pid=8304 comm="syz.3.488" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 268.701317][ T5891] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 268.851900][ T30] audit: type=1400 audit(1753727944.289:568): avc: denied { ioctl } for pid=8358 comm="syz.0.504" path="socket:[16745]" dev="sockfs" ino=16745 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 268.889272][ T5891] usb 6-1: Using ep0 maxpacket: 8 [ 268.927297][ T5891] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 268.938109][ T5891] usb 6-1: config 179 has no interface number 0 [ 268.949470][ T5891] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 269.062600][ T5891] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 269.084508][ T43] IPVS: starting estimator thread 0... [ 269.084507][ T5891] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 269.309536][ T9] vhci_hcd: vhci_device speed not set [ 269.351275][ T5891] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 269.379490][ T8368] IPVS: using max 43 ests per chain, 103200 per kthread [ 269.386697][ T5891] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 269.408234][ T5891] usb 6-1: config 179 interface 65 has no altsetting 0 [ 269.506871][ T5891] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 269.569537][ T5891] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.574348][ T8381] netlink: 8 bytes leftover after parsing attributes in process `syz.0.508'. [ 269.616747][ T5891] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input13 [ 269.714580][ T5187] input input13: unable to receive magic message: -110 [ 269.771851][ T5187] input input13: unable to receive magic message: -32 [ 270.013622][ T5187] input input13: unable to receive magic message: -32 [ 270.090214][ T8396] netlink: 24 bytes leftover after parsing attributes in process `syz.2.511'. [ 270.134302][ T5187] input input13: unable to receive magic message: -32 [ 270.166810][ T24] usb 6-1: USB disconnect, device number 8 [ 270.168267][ C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 270.343808][ T5891] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 270.539083][ T5891] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 270.555075][ T5891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.604384][ T5891] usb 4-1: Product: syz [ 270.614505][ T5891] usb 4-1: Manufacturer: syz [ 270.618346][ T30] audit: type=1400 audit(1753727946.049:569): avc: denied { ioctl } for pid=8413 comm="syz.6.518" path="socket:[16813]" dev="sockfs" ino=16813 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 270.648633][ T5891] usb 4-1: SerialNumber: syz [ 270.658458][ T5891] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 270.708671][ T5878] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 270.828289][ T30] audit: type=1400 audit(1753727946.259:570): avc: denied { read write } for pid=8418 comm="syz.6.519" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 270.881413][ T30] audit: type=1400 audit(1753727946.289:571): avc: denied { open } for pid=8418 comm="syz.6.519" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 270.992165][ T30] audit: type=1400 audit(1753727946.359:572): avc: denied { ioctl } for pid=8420 comm="syz.5.520" path="socket:[16821]" dev="sockfs" ino=16821 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 271.002611][ T5945] usb 4-1: USB disconnect, device number 12 [ 271.274525][ T24] libceph: connect (1)[c::]:6789 error -101 [ 271.280700][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 271.295197][ T8436] netlink: 8 bytes leftover after parsing attributes in process `syz.5.524'. [ 271.541374][ T24] libceph: connect (1)[c::]:6789 error -101 [ 271.558875][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 271.799885][ T5878] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 271.824841][ T5878] ath9k_htc: Failed to initialize the device [ 271.848494][ T5945] usb 4-1: ath9k_htc: USB layer deinitialized [ 271.862626][ T8431] ceph: No mds server is up or the cluster is laggy [ 271.951068][ T43] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 272.183063][ T30] audit: type=1400 audit(1753727947.619:573): avc: denied { ioctl } for pid=8475 comm="syz.3.535" path="/dev/usbmon7" dev="devtmpfs" ino=737 ioctlcmd=0x9204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 272.260851][ T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 272.272145][ T30] audit: type=1400 audit(1753727947.699:574): avc: denied { bind } for pid=8480 comm="syz.2.537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 272.292283][ T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 272.303519][ T43] usb 6-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 272.315238][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.417066][ T43] usb 6-1: config 0 descriptor?? [ 272.474815][ T8456] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 272.924554][ T8492] netlink: 24 bytes leftover after parsing attributes in process `syz.3.538'. [ 272.994014][ T43] hid (null): report_id 3508279361 is invalid [ 273.014587][ T43] nzxt-kraken2 0003:1E71:170E.0004: report_id 3508279361 is invalid [ 273.022879][ T43] nzxt-kraken2 0003:1E71:170E.0004: item 0 4 1 8 parsing failed [ 273.035015][ T43] nzxt-kraken2 0003:1E71:170E.0004: hid parse failed with -22 [ 273.042719][ T43] nzxt-kraken2 0003:1E71:170E.0004: probe with driver nzxt-kraken2 failed with error -22 [ 273.244662][ T6065] usb 6-1: USB disconnect, device number 9 [ 273.356111][ T43] libceph: connect (1)[c::]:6789 error -101 [ 273.369365][ T43] libceph: mon0 (1)[c::]:6789 connect error [ 273.539333][ T5878] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 273.670159][ T43] libceph: connect (1)[c::]:6789 error -101 [ 273.676757][ T43] libceph: mon0 (1)[c::]:6789 connect error [ 273.712023][ T5878] usb 3-1: Using ep0 maxpacket: 8 [ 273.723373][ T5878] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 274.026768][ T8498] ceph: No mds server is up or the cluster is laggy [ 274.151100][ T5878] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 274.174872][ T5878] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 274.201567][ T5878] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 274.248232][ T5878] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 274.305993][ T5878] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 274.331235][ T5878] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.589212][ T43] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 274.610069][ T5878] usb 3-1: usb_control_msg returned -32 [ 274.651848][ T5878] usbtmc 3-1:16.0: can't read capabilities [ 275.256162][ T8527] usbtmc 3-1:16.0: INITIATE_ABORT_BULK_IN returned 0 [ 275.437962][ T8531] netlink: 28 bytes leftover after parsing attributes in process `syz.5.554'. [ 275.463590][ T5878] usb 3-1: USB disconnect, device number 6 [ 275.599231][ T43] usb 7-1: Using ep0 maxpacket: 32 [ 275.608544][ T43] usb 7-1: config 0 has an invalid interface number: 16 but max is 0 [ 275.619633][ T43] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 275.629848][ T43] usb 7-1: config 0 has no interface number 0 [ 275.635966][ T43] usb 7-1: config 0 interface 16 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 275.649013][ C1] sl1: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 20290 ms [ 275.649158][ C1] sl1: transmit timed out, driver error? [ 275.649211][ C1] sl0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 20300 ms [ 275.649229][ C1] sl0: transmit timed out, driver error? [ 275.655752][ T8538] syz.0.558 uses obsolete (PF_INET,SOCK_PACKET) [ 275.728981][ T43] usb 7-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01 [ 275.759352][ T43] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.802619][ T43] usb 7-1: Product: syz [ 275.972835][ T43] usb 7-1: Manufacturer: syz [ 276.055251][ T43] usb 7-1: SerialNumber: syz [ 276.361144][ T43] usb 7-1: config 0 descriptor?? [ 276.398998][ T43] ums-jumpshot 7-1:0.16: USB Mass Storage device detected [ 276.463778][ T43] ums-jumpshot 7-1:0.16: Quirks match for vid 05dc pid 0001: 2 [ 276.600090][ T8549] netlink: 16 bytes leftover after parsing attributes in process `syz.3.561'. [ 276.672084][ T43] usb 7-1: USB disconnect, device number 5 [ 276.823607][ T8555] kvm: MWAIT instruction emulated as NOP! [ 276.869344][ T8562] netlink: 8 bytes leftover after parsing attributes in process `syz.3.567'. [ 277.093496][ T8575] syzkaller0: entered allmulticast mode [ 277.120147][ T8573] syzkaller0 (unregistering): left allmulticast mode [ 277.469430][ T43] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 277.508347][ T30] audit: type=1400 audit(1753727952.939:575): avc: denied { listen } for pid=8592 comm="syz.6.578" lport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 277.621292][ T43] usb 6-1: Using ep0 maxpacket: 8 [ 277.627711][ T43] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 277.643696][ T43] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 277.653705][ T43] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 277.664945][ T43] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 277.678065][ T43] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 277.687198][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.773833][ T30] audit: type=1400 audit(1753727953.209:576): avc: denied { append } for pid=8598 comm="syz.2.581" name="sg0" dev="devtmpfs" ino=749 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 277.844469][ T30] audit: type=1400 audit(1753727953.239:577): avc: denied { map } for pid=8598 comm="syz.2.581" path="/dev/sg0" dev="devtmpfs" ino=749 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 277.913694][ T30] audit: type=1400 audit(1753727953.239:578): avc: denied { execute } for pid=8598 comm="syz.2.581" path="/dev/sg0" dev="devtmpfs" ino=749 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 277.967798][ T43] usb 6-1: GET_CAPABILITIES returned 0 [ 277.992194][ T43] usbtmc 6-1:16.0: can't read capabilities [ 278.006524][ T30] audit: type=1400 audit(1753727953.379:579): avc: denied { ioctl } for pid=8604 comm="syz.3.585" path="socket:[17228]" dev="sockfs" ino=17228 ioctlcmd=0x8955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 278.068361][ T30] audit: type=1400 audit(1753727953.419:580): avc: denied { mounton } for pid=8605 comm="syz.6.583" path="/51/file0" dev="tmpfs" ino=280 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 278.129379][ T30] audit: type=1400 audit(1753727953.489:581): avc: denied { unmount } for pid=7164 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 278.213635][ T5891] usb 6-1: USB disconnect, device number 10 [ 278.238936][ T30] audit: type=1400 audit(1753727953.669:582): avc: denied { create } for pid=8614 comm="syz.6.589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 278.314335][ T30] audit: type=1400 audit(1753727953.709:583): avc: denied { ioctl } for pid=8614 comm="syz.6.589" path="socket:[17245]" dev="sockfs" ino=17245 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 278.396015][ T30] audit: type=1400 audit(1753727953.809:584): avc: denied { name_bind } for pid=8622 comm="syz.2.593" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 279.639495][ T43] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 279.903039][ T43] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 280.700358][ T43] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 280.764727][ T8664] netlink: 72 bytes leftover after parsing attributes in process `syz.2.605'. [ 280.838803][ T43] usb 6-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 280.879437][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.922909][ T43] usb 6-1: Product: syz [ 280.939223][ T43] usb 6-1: Manufacturer: syz [ 280.943864][ T43] usb 6-1: SerialNumber: syz [ 281.097281][ T5945] libceph: connect (1)[c::]:6789 error -101 [ 281.109961][ T43] usb 6-1: config 0 descriptor?? [ 281.115641][ T5945] libceph: mon0 (1)[c::]:6789 connect error [ 281.122525][ T8645] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 281.134336][ T8645] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 281.288155][ T8676] netlink: 'syz.3.611': attribute type 10 has an invalid length. [ 281.325467][ T8676] bridge0: left allmulticast mode [ 281.347457][ T8645] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 281.361479][ T8676] bridge0: port 3(dummy0) entered blocking state [ 281.368905][ T8676] bridge0: port 3(dummy0) entered forwarding state [ 281.376703][ T8676] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.383865][ T8676] bridge0: port 2(bridge_slave_1) entered forwarding state [ 281.389465][ T8645] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 281.391291][ T8676] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.405370][ T8676] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.410891][ T5945] libceph: connect (1)[c::]:6789 error -101 [ 281.421339][ T5945] libceph: mon0 (1)[c::]:6789 connect error [ 281.446195][ T8676] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 281.798546][ T8669] ceph: No mds server is up or the cluster is laggy [ 282.483349][ T43] dm9601 6-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 282.753578][ T43] dm9601 6-1:0.0 eth5: register 'dm9601' at usb-dummy_hcd.5-1, Davicom DM96xx USB 10/100 Ethernet, 6e:00:00:00:00:00 [ 282.838278][ T43] usb 6-1: USB disconnect, device number 11 [ 282.845540][ T43] dm9601 6-1:0.0 eth5: unregister 'dm9601' usb-dummy_hcd.5-1, Davicom DM96xx USB 10/100 Ethernet [ 283.628748][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 283.628763][ T30] audit: type=1326 audit(1753727959.059:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8704 comm="syz.5.623" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f45cc58e9a9 code=0x0 [ 283.664398][ T30] audit: type=1400 audit(1753727959.099:592): avc: denied { unmount } for pid=5839 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 285.439242][ T30] audit: type=1400 audit(1753727960.839:593): avc: denied { unlink } for pid=8731 comm="syz.2.632" name="#12" dev="tmpfs" ino=808 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 285.492200][ T30] audit: type=1400 audit(1753727960.849:594): avc: denied { mount } for pid=8731 comm="syz.2.632" name="/" dev="overlay" ino=803 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 285.890589][ T55] dvb-usb: did not find the firmware file 'dvb-usb-s630.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 285.949573][ T55] dvb-usb: found a 'TeVii S630 USB' in cold state, will try to load a firmware [ 285.966512][ T55] usb 1-1: Direct firmware load for dvb-usb-s630.fw failed with error -2 [ 285.997481][ T55] usb 1-1: Falling back to sysfs fallback for: dvb-usb-s630.fw [ 286.013399][ T8749] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 286.080476][ T8752] ip6gre1: entered allmulticast mode [ 286.819218][ T7416] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 286.864255][ T43] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 286.902798][ T30] audit: type=1400 audit(1753727962.339:595): avc: denied { mounton } for pid=8766 comm="syz.0.645" path="/125/file0" dev="tmpfs" ino=674 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 286.928250][ T30] audit: type=1400 audit(1753727962.339:596): avc: denied { setattr } for pid=8766 comm="syz.0.645" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 286.950283][ T30] audit: type=1400 audit(1753727962.339:597): avc: denied { read append } for pid=8766 comm="syz.0.645" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 286.978115][ T30] audit: type=1400 audit(1753727962.339:598): avc: denied { open } for pid=8766 comm="syz.0.645" path="/125/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 286.989280][ T7416] usb 7-1: Using ep0 maxpacket: 8 [ 287.014484][ T7416] usb 7-1: config 0 has an invalid interface number: 31 but max is 0 [ 287.022995][ T7416] usb 7-1: config 0 has no interface number 0 [ 287.031453][ T43] usb 4-1: config 0 has an invalid interface number: 139 but max is 0 [ 287.040510][ T43] usb 4-1: config 0 has no interface number 0 [ 287.046855][ T43] usb 4-1: config 0 interface 139 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 287.058891][ T7416] usb 7-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 287.078383][ T7416] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.096119][ T43] usb 4-1: config 0 interface 139 altsetting 0 has an endpoint descriptor with address 0xBD, changing to 0x8D [ 287.112633][ T7416] usb 7-1: Product: syz [ 287.120316][ T7416] usb 7-1: Manufacturer: syz [ 287.124942][ T7416] usb 7-1: SerialNumber: syz [ 287.133400][ T43] usb 4-1: config 0 interface 139 altsetting 0 endpoint 0x8D has invalid maxpacket 14158, setting to 64 [ 287.148530][ T7416] usb 7-1: config 0 descriptor?? [ 287.153793][ T43] usb 4-1: config 0 interface 139 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 287.176564][ T43] usb 4-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=fd.d6 [ 287.190259][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.200993][ T43] usb 4-1: Product: syz [ 287.205246][ T43] usb 4-1: Manufacturer: syz [ 287.210432][ T43] usb 4-1: SerialNumber: syz [ 287.218158][ T43] usb 4-1: config 0 descriptor?? [ 287.224667][ T8765] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 287.232293][ T8765] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 287.265509][ T8770] "syz.2.647" (8770) uses obsolete ecb(arc4) skcipher [ 287.531178][ T6025] libceph: connect (1)[c::]:6789 error -101 [ 287.537381][ T6025] libceph: mon0 (1)[c::]:6789 connect error [ 287.623966][ T43] mct_u232 4-1:0.139: MCT U232 converter detected [ 287.640655][ T7416] usb 7-1: Found UVC 0.04 device syz (046d:08c3) [ 287.657654][ T7416] usb 7-1: No streaming interface found for terminal 6. [ 287.676307][ T7416] usb 7-1: Failed to initialize entity for entity 5 [ 287.696000][ T7416] usb 7-1: Failed to register entities (-22). [ 287.732675][ T43] usb 4-1: MCT U232 converter now attached to ttyUSB0 [ 287.752681][ T43] usb 4-1: USB disconnect, device number 13 [ 287.788172][ T43] mct_u232 ttyUSB0: MCT U232 converter now disconnected from ttyUSB0 [ 287.809921][ T7416] libceph: connect (1)[c::]:6789 error -101 [ 287.817052][ T7416] libceph: mon0 (1)[c::]:6789 connect error [ 287.828934][ T43] mct_u232 4-1:0.139: device disconnected [ 287.887058][ T7416] usb 7-1: USB disconnect, device number 6 [ 288.074261][ T8775] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 288.082232][ T8775] batadv_slave_0: entered promiscuous mode [ 288.132519][ T8787] syz_tun: entered allmulticast mode [ 288.164780][ T8779] ceph: No mds server is up or the cluster is laggy [ 288.176616][ T8786] syz_tun: left allmulticast mode [ 288.372894][ T30] audit: type=1400 audit(1753727963.809:599): avc: denied { append } for pid=8794 comm="syz.2.652" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 288.429203][ T30] audit: type=1400 audit(1753727963.819:600): avc: denied { read write } for pid=8788 comm="syz.5.650" name="file0" dev="fuse" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 288.454240][ T8799] block device autoloading is deprecated and will be removed. [ 288.651572][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 288.651590][ T30] audit: type=1400 audit(1753727964.079:602): avc: denied { unmount } for pid=5827 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 289.139327][ T8826] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 289.312687][ T8831] netlink: 24 bytes leftover after parsing attributes in process `syz.6.659'. [ 289.861172][ T7416] libceph: connect (1)[c::]:6789 error -101 [ 289.897681][ T7416] libceph: mon0 (1)[c::]:6789 connect error [ 290.171339][ T7416] libceph: connect (1)[c::]:6789 error -101 [ 290.177369][ T7416] libceph: mon0 (1)[c::]:6789 connect error [ 290.461027][ T8833] ceph: No mds server is up or the cluster is laggy [ 290.609314][ T30] audit: type=1400 audit(1753727965.979:603): avc: denied { read write } for pid=5832 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 290.706401][ T30] audit: type=1400 audit(1753727965.979:604): avc: denied { open } for pid=5832 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 290.980713][ T30] audit: type=1400 audit(1753727965.979:605): avc: denied { ioctl } for pid=5832 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 291.007788][ T8872] netlink: 4 bytes leftover after parsing attributes in process `syz.2.675'. [ 291.009978][ T30] audit: type=1400 audit(1753727966.019:606): avc: denied { create } for pid=8843 comm="syz.3.666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 291.043125][ T30] audit: type=1400 audit(1753727966.019:607): avc: denied { write } for pid=8843 comm="syz.3.666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 291.105611][ T30] audit: type=1400 audit(1753727966.099:608): avc: denied { read } for pid=8865 comm="syz.2.672" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 291.134664][ T30] audit: type=1400 audit(1753727966.099:609): avc: denied { open } for pid=8865 comm="syz.2.672" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 291.164462][ T30] audit: type=1400 audit(1753727966.099:610): avc: denied { ioctl } for pid=8865 comm="syz.2.672" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 291.196523][ T30] audit: type=1400 audit(1753727966.109:611): avc: denied { set_context_mgr } for pid=8865 comm="syz.2.672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 291.690984][ T6065] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 291.861440][ T6065] usb 7-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 291.872735][ T6065] usb 7-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 291.882709][ T6065] usb 7-1: config 0 interface 0 has no altsetting 0 [ 291.890306][ T6065] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 291.899418][ T6065] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.908963][ T6065] usb 7-1: config 0 descriptor?? [ 292.244228][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 292.417917][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 292.426801][ T9] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 292.451790][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 292.464225][ T9] usb 3-1: config 0 has no interface number 0 [ 292.472858][ T9] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 292.485526][ T9] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0xE has invalid wMaxPacketSize 0 [ 292.499317][ T9] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 14 [ 292.520521][ T9] usb 3-1: config 0 interface 52 has no altsetting 0 [ 292.527285][ T9] usb 3-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 292.538464][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.549650][ T6065] usb 7-1: string descriptor 0 read error: -22 [ 292.570903][ T9] usb 3-1: config 0 descriptor?? [ 292.761067][ T6065] input: HID 256c:006d as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:256C:006D.0005/input/input14 [ 293.347456][ T6065] uclogic 0003:256C:006D.0005: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.6-1/input0 [ 293.363158][ T6065] usb 7-1: USB disconnect, device number 7 [ 293.427341][ T8909] binder: 8906:8909 ioctl 4018620d 0 returned -22 [ 293.912599][ T9] usb 3-1: USB disconnect, device number 7 [ 293.990094][ T30] kauditd_printk_skb: 51 callbacks suppressed [ 293.990109][ T30] audit: type=1400 audit(1753727969.429:663): avc: denied { read } for pid=8915 comm="syz.0.692" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 293.998355][ T8912] fido_id[8912]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 294.034017][ T30] audit: type=1400 audit(1753727969.429:664): avc: denied { open } for pid=8915 comm="syz.0.692" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 294.084382][ T30] audit: type=1400 audit(1753727969.469:665): avc: denied { ioctl } for pid=8915 comm="syz.0.692" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x640d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 294.109326][ C0] vkms_vblank_simulate: vblank timer overrun [ 294.119738][ T5891] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 294.185178][ T30] audit: type=1400 audit(1753727969.619:666): avc: denied { mounton } for pid=8918 comm="syz.6.694" path="/74/file0" dev="tmpfs" ino=400 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 294.249358][ T30] audit: type=1400 audit(1753727969.659:667): avc: denied { mount } for pid=8918 comm="syz.6.694" name="/" dev="9p" ino=17889801302421081418 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 294.272859][ C0] vkms_vblank_simulate: vblank timer overrun [ 294.292132][ T30] audit: type=1400 audit(1753727969.659:668): avc: denied { write } for pid=8921 comm="syz.3.695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 294.312781][ T5891] usb 6-1: Using ep0 maxpacket: 32 [ 294.323509][ T30] audit: type=1400 audit(1753727969.659:669): avc: denied { read } for pid=8921 comm="syz.3.695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 294.328724][ T5891] usb 6-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 294.344894][ T30] audit: type=1400 audit(1753727969.659:670): avc: denied { ioctl } for pid=8921 comm="syz.3.695" path="socket:[19299]" dev="sockfs" ino=19299 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 294.344942][ T30] audit: type=1400 audit(1753727969.659:671): avc: denied { add_name } for pid=8918 comm="syz.6.694" name="blkio.bfq.io_merged_recursive" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 294.344984][ T30] audit: type=1400 audit(1753727969.659:672): avc: denied { create } for pid=8918 comm="syz.6.694" name="blkio.bfq.io_merged_recursive" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 294.358720][ T5891] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.403322][ C0] vkms_vblank_simulate: vblank timer overrun [ 294.450344][ T5891] usb 6-1: config 0 descriptor?? [ 294.462318][ T5891] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 294.777578][ T43] libceph: connect (1)[c::]:6789 error -101 [ 294.785630][ T43] libceph: mon0 (1)[c::]:6789 connect error [ 294.812967][ T6065] libceph: connect (1)[c::]:6789 error -101 [ 294.819075][ T6065] libceph: mon0 (1)[c::]:6789 connect error [ 294.922250][ T8940] netlink: 24 bytes leftover after parsing attributes in process `syz.2.698'. [ 295.092354][ T6065] libceph: connect (1)[c::]:6789 error -101 [ 295.124268][ T6065] libceph: mon0 (1)[c::]:6789 connect error [ 295.243647][ T8929] ceph: No mds server is up or the cluster is laggy [ 295.250880][ T43] libceph: connect (1)[c::]:6789 error -101 [ 295.257285][ T43] libceph: mon0 (1)[c::]:6789 connect error [ 295.398451][ T8933] ceph: No mds server is up or the cluster is laggy [ 295.640246][ T8948] binder: 8946:8948 ioctl 4018620d 0 returned -22 [ 296.086949][ T5891] gspca_nw80x: reg_w err -110 [ 296.425137][ T5891] nw80x 6-1:0.0: probe with driver nw80x failed with error -110 [ 296.438482][ T5891] usb 6-1: USB disconnect, device number 12 [ 297.320040][ T5891] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 297.489653][ T5891] usb 6-1: Using ep0 maxpacket: 8 [ 297.504643][ T5891] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 297.517378][ T5891] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 0 [ 297.529215][ T5891] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 297.541461][ T5891] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 297.560975][ T5891] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.574036][ T5891] usb 6-1: Product: syz [ 297.578280][ T5891] usb 6-1: Manufacturer: syz [ 297.583438][ T5891] usb 6-1: SerialNumber: syz [ 297.592295][ T8966] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 297.812614][ T5891] usblp 6-1:1.0: usblp0: USB Bidirectional printer dev 13 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 298.091955][ C0] usblp0: nonzero read bulk status received: -71 [ 298.112082][ T8966] usblp0: error -71 reading from printer [ 298.137241][ C0] usblp0: nonzero read bulk status received: -71 [ 298.146028][ T6065] usb 6-1: USB disconnect, device number 13 [ 298.157355][ T6065] usblp0: removed [ 298.219030][ T5891] libceph: connect (1)[c::]:6789 error -101 [ 298.233695][ T5891] libceph: mon0 (1)[c::]:6789 connect error [ 298.510854][ T5891] libceph: connect (1)[c::]:6789 error -101 [ 298.516993][ T5891] libceph: mon0 (1)[c::]:6789 connect error [ 298.599293][ T6065] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 298.717170][ T5988] Bluetooth: hci6: Frame reassembly failed (-84) [ 298.728916][ T9012] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 298.769434][ T6065] usb 7-1: Using ep0 maxpacket: 8 [ 298.777109][ T6065] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 298.787469][ T6065] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.796237][ T6065] usb 7-1: Product: syz [ 298.801663][ T6065] usb 7-1: Manufacturer: syz [ 298.806282][ T6065] usb 7-1: SerialNumber: syz [ 298.812754][ T6065] usb 7-1: config 0 descriptor?? [ 298.823740][ T8991] ceph: No mds server is up or the cluster is laggy [ 298.895774][ T5891] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 298.985163][ T9014] tipc: Started in network mode [ 298.991662][ T9014] tipc: Node identity 2e0164f18611, cluster identity 4711 [ 298.999020][ T9014] tipc: Enabled bearer , priority 0 [ 299.012407][ T9013] tipc: Resetting bearer [ 299.023265][ T6065] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 299.063363][ T5891] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 299.073702][ T5891] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 299.082943][ T5891] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.093951][ T5891] usb 3-1: config 0 descriptor?? [ 299.103189][ T5891] pwc: Askey VC010 type 2 USB webcam detected. [ 299.511034][ T5891] pwc: recv_control_msg error -32 req 02 val 2b00 [ 299.526746][ T5891] pwc: recv_control_msg error -32 req 02 val 2700 [ 299.543583][ T5891] pwc: recv_control_msg error -32 req 02 val 2c00 [ 299.555137][ T5891] pwc: recv_control_msg error -32 req 04 val 1000 [ 299.574184][ T5891] pwc: recv_control_msg error -32 req 04 val 1300 [ 299.582995][ T5891] pwc: recv_control_msg error -32 req 04 val 1400 [ 299.658272][ T6065] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 299.677279][ T6065] usb 7-1: USB disconnect, device number 8 [ 299.795277][ T5891] pwc: recv_control_msg error -71 req 02 val 2100 [ 299.811999][ T5891] pwc: recv_control_msg error -71 req 04 val 1500 [ 299.823184][ T5891] pwc: recv_control_msg error -71 req 02 val 2500 [ 299.834698][ T5891] pwc: recv_control_msg error -71 req 02 val 2400 [ 299.841933][ T5891] pwc: recv_control_msg error -71 req 02 val 2600 [ 299.848737][ T5891] pwc: recv_control_msg error -71 req 02 val 2900 [ 299.855714][ T5891] pwc: recv_control_msg error -71 req 02 val 2800 [ 299.867119][ T5891] pwc: recv_control_msg error -71 req 04 val 1100 [ 299.877812][ T5891] pwc: recv_control_msg error -71 req 04 val 1200 [ 299.903356][ T5891] pwc: Registered as video103. [ 299.916464][ T5891] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input15 [ 299.943911][ T5891] usb 3-1: USB disconnect, device number 8 [ 299.994972][ T24] tipc: Node number set to 2819646705 [ 300.339831][ T9013] tipc: Disabling bearer [ 300.404348][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 300.404363][ T30] audit: type=1400 audit(1753727975.839:700): avc: denied { map } for pid=9018 comm="syz.2.724" path="socket:[19515]" dev="sockfs" ino=19515 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 300.487417][ T30] audit: type=1400 audit(1753727975.919:701): avc: denied { unmount } for pid=5827 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 300.515774][ T5891] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 300.517260][ T9022] binder: 9020:9022 unknown command 0 [ 300.536825][ T5845] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 300.549230][ T9022] binder: 9020:9022 ioctl c0306201 200000000080 returned -22 [ 300.565927][ T30] audit: type=1400 audit(1753727975.999:702): avc: denied { map } for pid=9020 comm="syz.3.725" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 300.614274][ T30] audit: type=1400 audit(1753727976.029:703): avc: denied { call } for pid=9020 comm="syz.3.725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 300.653036][ T30] audit: type=1400 audit(1753727976.089:704): avc: denied { create } for pid=9030 comm="syz.3.729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 300.672460][ T30] audit: type=1400 audit(1753727976.089:705): avc: denied { ioctl } for pid=9030 comm="syz.3.729" path="socket:[19547]" dev="sockfs" ino=19547 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 300.698464][ T30] audit: type=1400 audit(1753727976.089:706): avc: denied { write } for pid=9030 comm="syz.3.729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 300.719564][ T5891] usb 7-1: Using ep0 maxpacket: 16 [ 300.736249][ T5891] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 300.759986][ T5845] Bluetooth: hci6: command 0x1003 tx timeout [ 300.760115][ T5891] usb 7-1: config 0 has no interface number 0 [ 300.766184][ T5153] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 300.794632][ T30] audit: type=1400 audit(1753727976.089:707): avc: denied { read } for pid=9030 comm="syz.3.729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 300.807570][ T5891] usb 7-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 300.865886][ T5891] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.875399][ T5891] usb 7-1: Product: syz [ 300.990924][ T30] audit: type=1400 audit(1753727976.419:708): avc: denied { read write } for pid=9037 comm="syz.5.732" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 301.015329][ T5891] usb 7-1: Manufacturer: syz [ 301.015351][ T5891] usb 7-1: SerialNumber: syz [ 301.017439][ T5891] usb 7-1: config 0 descriptor?? [ 301.160009][ T30] audit: type=1400 audit(1753727976.489:709): avc: denied { open } for pid=9037 comm="syz.5.732" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 301.207956][ T5891] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 301.476506][ T6025] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 301.487286][ T6025] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 301.572855][ T9] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 301.729303][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 301.742488][ T9] usb 6-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 301.755445][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.764779][ T9] usb 6-1: Product: syz [ 301.769613][ T9] usb 6-1: Manufacturer: syz [ 301.774282][ T9] usb 6-1: SerialNumber: syz [ 301.782802][ T9] usb 6-1: config 0 descriptor?? [ 301.800022][ T9] ssu100 6-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 301.858634][ T9049] kvm: emulating exchange as write [ 302.219295][ T5878] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 302.389181][ T5878] usb 3-1: Using ep0 maxpacket: 8 [ 302.395825][ T5878] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 302.407701][ T5878] usb 3-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 302.416842][ T5878] usb 3-1: New USB device strings: Mfr=241, Product=1, SerialNumber=3 [ 302.425058][ T5878] usb 3-1: Product: syz [ 302.429311][ T5878] usb 3-1: Manufacturer: syz [ 302.433940][ T5878] usb 3-1: SerialNumber: syz [ 302.441995][ T5878] usb 3-1: config 0 descriptor?? [ 302.448963][ T5878] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 302.807155][ T5891] gspca_spca1528: reg_r err -71 [ 302.812774][ T5891] spca1528 7-1:0.1: probe with driver spca1528 failed with error -71 [ 302.824754][ T5891] usb 7-1: USB disconnect, device number 9 [ 303.018602][ T9] usb 6-1: Quatech SSU-100 USB to Serial Driver converter now attached to ttyUSB0 [ 303.226722][ T5891] usb 6-1: USB disconnect, device number 14 [ 303.237525][ T5891] ssu100 ttyUSB0: Quatech SSU-100 USB to Serial Driver converter now disconnected from ttyUSB0 [ 303.248496][ T5891] ssu100 6-1:0.0: device disconnected [ 304.110639][ T5878] gspca_zc3xx: reg_w_i err -71 [ 305.329483][ T5878] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 305.369248][ T5878] gspca_zc3xx 3-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 305.460429][ T5878] usb 3-1: USB disconnect, device number 9 [ 305.608860][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 305.608880][ T30] audit: type=1400 audit(1753727981.039:720): avc: denied { allowed } for pid=9086 comm="syz.2.749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 306.398434][ T30] audit: type=1400 audit(1753727981.069:721): avc: denied { create } for pid=9086 comm="syz.2.749" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 306.439597][ T30] audit: type=1400 audit(1753727981.069:722): avc: denied { map } for pid=9086 comm="syz.2.749" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=19716 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 306.487748][ T30] audit: type=1400 audit(1753727981.079:723): avc: denied { read write } for pid=9086 comm="syz.2.749" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=19716 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 306.756321][ T9096] xt_cgroup: invalid path, errno=-2 [ 307.118834][ T30] audit: type=1400 audit(1753727982.549:724): avc: denied { ioctl } for pid=9100 comm="syz.6.753" path="socket:[19733]" dev="sockfs" ino=19733 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 307.179254][ T30] audit: type=1400 audit(1753727982.549:725): avc: denied { read } for pid=9100 comm="syz.6.753" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 307.250591][ T30] audit: type=1400 audit(1753727982.549:726): avc: denied { open } for pid=9100 comm="syz.6.753" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 307.307290][ T30] audit: type=1400 audit(1753727982.549:727): avc: denied { ioctl } for pid=9100 comm="syz.6.753" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 307.336412][ T30] audit: type=1400 audit(1753727982.769:728): avc: denied { create } for pid=9106 comm="syz.2.754" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 307.400188][ T9111] binder: 9110:9111 ioctl c0306201 2000000008c0 returned -14 [ 307.409523][ T30] audit: type=1400 audit(1753727982.779:729): avc: denied { mounton } for pid=9106 comm="syz.2.754" path="/178/file0" dev="tmpfs" ino=958 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 308.552085][ T6025] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 308.749309][ T6025] usb 7-1: Using ep0 maxpacket: 8 [ 309.028358][ T6025] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 309.053838][ T6025] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.066483][ T6025] usb 7-1: Product: syz [ 309.079276][ T6025] usb 7-1: Manufacturer: syz [ 309.115487][ T6025] usb 7-1: SerialNumber: syz [ 309.135506][ T6025] usb 7-1: config 0 descriptor?? [ 309.348152][ T9126] tipc: Started in network mode [ 309.358082][ T9126] tipc: Node identity 4e8fa55cff25, cluster identity 4711 [ 309.370425][ T9126] tipc: Enabled bearer , priority 0 [ 309.382546][ T6025] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 309.517734][ T9127] syzkaller0: entered promiscuous mode [ 309.534538][ T9127] syzkaller0: entered allmulticast mode [ 309.556083][ T9127] tipc: Resetting bearer [ 309.612386][ T9125] tipc: Resetting bearer [ 310.215493][ T6025] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 310.239437][ T6025] usb 7-1: USB disconnect, device number 10 [ 310.449747][ T9] tipc: Node number set to 2980750684 [ 311.084985][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 311.085017][ T30] audit: type=1400 audit(1753727986.499:736): avc: denied { write } for pid=9143 comm="syz.6.770" name="arp" dev="proc" ino=4026533967 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 311.748984][ T30] audit: type=1400 audit(1753727987.179:737): avc: denied { setopt } for pid=9154 comm="syz.6.773" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 311.793909][ T30] audit: type=1400 audit(1753727987.179:738): avc: denied { connect } for pid=9154 comm="syz.6.773" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 311.817292][ T30] audit: type=1400 audit(1753727987.179:739): avc: denied { write } for pid=9154 comm="syz.6.773" laddr=::1 lport=7 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 311.936990][ T30] audit: type=1400 audit(1753727987.179:740): avc: denied { mount } for pid=9154 comm="syz.6.773" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 312.039896][ T30] audit: type=1400 audit(1753727987.179:741): avc: denied { unmount } for pid=9154 comm="syz.6.773" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 312.103437][ T9163] binder_alloc: 9162: binder_alloc_buf, no vma [ 312.443844][ T9125] tipc: Disabling bearer [ 312.452529][ T30] audit: type=1800 audit(1753727987.889:742): pid=9131 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.766" name="/" dev="fuse" ino=1 res=0 errno=0 [ 312.594248][ T9174] netlink: 8 bytes leftover after parsing attributes in process `syz.0.780'. [ 312.698220][ T9174] netlink: 8 bytes leftover after parsing attributes in process `syz.0.780'. [ 313.006088][ T30] audit: type=1400 audit(1753727988.439:743): avc: denied { ioctl } for pid=9179 comm="syz.0.783" path="socket:[20884]" dev="sockfs" ino=20884 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 313.086441][ T30] audit: type=1400 audit(1753727988.439:744): avc: denied { create } for pid=9179 comm="syz.0.783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 313.116725][ T30] audit: type=1400 audit(1753727988.439:745): avc: denied { ioctl } for pid=9179 comm="syz.0.783" path="socket:[20885]" dev="sockfs" ino=20885 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 313.169316][ T5878] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 313.590426][ T5878] usb 6-1: Using ep0 maxpacket: 8 [ 313.606245][ T5878] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 313.645666][ T5878] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 313.659215][ T5878] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 313.669170][ T5878] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 313.680021][ T5878] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 313.699357][ T5878] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 313.893593][ T5878] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.157569][ T5878] usb 6-1: usb_control_msg returned -32 [ 314.165228][ T5878] usbtmc 6-1:16.0: can't read capabilities [ 314.804599][ T43] libceph: connect (1)[c::]:6789 error -101 [ 314.832821][ T43] libceph: mon0 (1)[c::]:6789 connect error [ 315.110573][ T9216] md2: using deprecated bitmap file support [ 315.116684][ T9216] md2: error: bitmap file must be a regular file [ 315.178409][ T9209] ceph: No mds server is up or the cluster is laggy [ 315.328777][ T9222] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 315.336321][ T9222] IPv6: NLM_F_CREATE should be set when creating new route [ 315.493487][ T9228] lo speed is unknown, defaulting to 1000 [ 315.549322][ T5878] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 315.643447][ T9236] fuse: root generation should be zero [ 315.705869][ T5878] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 315.733695][ T5878] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 315.756328][ T5878] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 315.801787][ T5878] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.813030][ T5878] usb 4-1: config 0 descriptor?? [ 315.938165][ T5891] usb 6-1: USB disconnect, device number 15 [ 316.274128][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 316.274142][ T30] audit: type=1400 audit(1753727991.709:758): avc: denied { read write } for pid=9248 comm="syz.6.805" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 316.281818][ T5878] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 316.316047][ T5878] cp2112 0003:10C4:EA90.0007: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 316.414055][ T30] audit: type=1400 audit(1753727991.709:759): avc: denied { open } for pid=9248 comm="syz.6.805" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 316.459412][ T5878] cp2112 0003:10C4:EA90.0007: Part Number: 0x00 Device Version: 0x4D [ 316.610586][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.616901][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.642323][ T30] audit: type=1800 audit(1753727992.079:760): pid=9247 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.804" name="/" dev="fuse" ino=0 res=0 errno=0 [ 316.650155][ T5990] sl0: compressed packet ignored [ 316.669954][ T5956] sl1: compressed packet ignored [ 317.574891][ T5878] cp2112 0003:10C4:EA90.0007: error reading lock byte: -71 [ 317.585861][ T5878] usb 4-1: USB disconnect, device number 14 [ 317.710323][ T9266] ceph: No mds server is up or the cluster is laggy [ 317.862242][ T30] audit: type=1400 audit(1753727993.279:761): avc: denied { name_connect } for pid=9277 comm="syz.0.812" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 317.969490][ T9275] 8021q: adding VLAN 0 to HW filter on device bond1 [ 318.056708][ T30] audit: type=1400 audit(1753727993.379:762): avc: denied { read } for pid=9277 comm="syz.0.812" lport=36828 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 318.715161][ T5845] Bluetooth: hci5: command 0x0406 tx timeout [ 318.937198][ T9280] bond_slave_0: entered promiscuous mode [ 318.943186][ T9280] bond_slave_1: entered promiscuous mode [ 318.949706][ T9280] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 318.961929][ T9280] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 319.107092][ T30] audit: type=1400 audit(1753727994.539:763): avc: denied { append } for pid=9289 comm="syz.0.814" name="usbmon2" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 319.787860][ T9296] tipc: Started in network mode [ 319.804471][ T30] audit: type=1400 audit(1753727994.569:764): avc: denied { open } for pid=9289 comm="syz.0.814" path="/dev/usbmon2" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 319.869829][ T9296] tipc: Node identity eae37edc1f37, cluster identity 4711 [ 319.885149][ T9296] tipc: Enabled bearer , priority 0 [ 320.275479][ T43] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 320.308376][ T9299] syzkaller0: entered promiscuous mode [ 320.332482][ T43] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 320.409501][ T9299] syzkaller0: entered allmulticast mode [ 320.431649][ T9299] tipc: Resetting bearer [ 320.590578][ T30] audit: type=1400 audit(1753727996.029:765): avc: denied { read } for pid=9312 comm="syz.5.821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 320.882406][ T79] tipc: Resetting bearer [ 320.892666][ T9295] tipc: Resetting bearer [ 321.029392][ T43] tipc: Node number set to 4124344028 [ 321.506114][ T9327] o2cb: This node has not been configured. [ 321.512260][ T9327] o2cb: Cluster check failed. Fix errors before retrying. [ 321.519564][ T9327] (syz.5.824,9327,0):user_dlm_register:674 ERROR: status = -22 [ 321.527154][ T9327] (syz.5.824,9327,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "bus" [ 321.571029][ T30] audit: type=1400 audit(1753727996.939:766): avc: denied { create } for pid=9325 comm="syz.5.824" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 321.974305][ T30] audit: type=1400 audit(1753727997.409:767): avc: denied { mount } for pid=9328 comm="syz.2.825" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 322.050655][ T9330] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 322.120271][ T30] audit: type=1400 audit(1753727997.429:768): avc: denied { mounton } for pid=9328 comm="syz.2.825" path="/197/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 323.197860][ T30] audit: type=1400 audit(1753727998.629:769): avc: denied { unmount } for pid=5832 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 323.640402][ T31] INFO: task syz.4.192:6961 blocked for more than 143 seconds. [ 323.648141][ T31] Not tainted 6.16.0-syzkaller #0 [ 323.947327][ T24] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 323.976689][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 323.989207][ T31] task:syz.4.192 state:D stack:26904 pid:6961 tgid:6957 ppid:5833 task_flags:0x400140 flags:0x00004004 [ 324.002384][ T31] Call Trace: [ 324.007762][ T31] [ 324.010923][ T31] __schedule+0x116a/0x5dd0 [ 324.017550][ T31] ? __pfx___schedule+0x10/0x10 [ 324.022672][ T31] ? find_held_lock+0x2b/0x80 [ 324.029286][ T31] ? schedule+0x2d7/0x3a0 [ 324.033701][ T31] schedule+0xe7/0x3a0 [ 324.037834][ T31] schedule_preempt_disabled+0x13/0x30 [ 324.044659][ T31] __mutex_lock+0x6c7/0xb90 [ 324.049442][ T31] ? do_raw_spin_unlock+0x172/0x230 [ 324.054709][ T31] ? usbdev_open+0x1b6/0x8b0 [ 324.059669][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 324.064763][ T31] ? kobject_put+0xab/0x5a0 [ 324.071988][ T31] ? __pfx_device_match_devt+0x10/0x10 [ 324.077539][ T31] ? __pfx_bus_find_device+0x10/0x10 [ 324.084726][ T31] ? usbdev_open+0x1b6/0x8b0 [ 324.089534][ T31] usbdev_open+0x1b6/0x8b0 [ 324.094082][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 324.100421][ T31] ? __pfx_usbdev_open+0x10/0x10 [ 324.105475][ T31] ? chrdev_open+0x58c/0x6a0 [ 324.110367][ T31] ? __pfx_usbdev_open+0x10/0x10 [ 324.119687][ T31] chrdev_open+0x234/0x6a0 [ 324.124316][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 324.124618][ T24] usb 6-1: config 1 interface 0 has no altsetting 0 [ 324.129650][ T31] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 324.143019][ T31] do_dentry_open+0x744/0x1c10 [ 324.148370][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 324.153722][ T31] vfs_open+0x82/0x3f0 [ 324.155233][ T24] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 324.157863][ T31] path_openat+0x1de4/0x2cb0 [ 324.228359][ T31] ? __pfx___schedule+0x10/0x10 [ 324.234176][ T31] ? __pfx_path_openat+0x10/0x10 [ 324.239353][ T31] ? __lock_acquire+0xb8a/0x1c90 [ 324.243917][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.244335][ T31] do_filp_open+0x20b/0x470 [ 324.257564][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 324.262913][ T31] ? alloc_fd+0x471/0x7d0 [ 324.268361][ T31] do_sys_openat2+0x11b/0x1d0 [ 324.273295][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 324.274050][ T24] usb 6-1: Product: syz [ 324.278556][ T31] __x64_sys_openat+0x174/0x210 [ 324.288056][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 324.293643][ T31] do_syscall_64+0xcd/0x4c0 [ 324.297226][ T24] usb 6-1: Manufacturer: syz [ 324.298183][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.302750][ T24] usb 6-1: SerialNumber: syz [ 324.313267][ T31] RIP: 0033:0x7f0cbeb8d310 [ 324.317730][ T31] RSP: 002b:00007f0cbf9d7b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 324.326268][ T31] RAX: ffffffffffffffda RBX: 0000000000101301 RCX: 00007f0cbeb8d310 [ 324.334426][ T31] RDX: 0000000000101301 RSI: 00007f0cbf9d7c10 RDI: 00000000ffffff9c [ 324.345100][ T31] RBP: 00007f0cbf9d7c10 R08: 0000000000000000 R09: 0000000000000000 [ 324.354097][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 324.362175][ T31] R13: 0000000000000000 R14: 00007f0cbedb6080 R15: 00007fffe5cad478 [ 324.370211][ T31] [ 324.373339][ T31] [ 324.373339][ T31] Showing all locks held in the system: [ 324.389189][ T31] 4 locks held by kworker/1:0/24: [ 324.394319][ T31] #0: ffff888022ad8148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 324.406125][ T31] #1: ffffc900001e7d10 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 324.417491][ T31] #2: ffff888029d8b198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fe0 [ 324.426420][ T31] #3: ffff888056ee0198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4b0 [ 324.435729][ T31] 1 lock held by khungtaskd/31: [ 324.440608][ T31] #0: ffffffff8e5c4e00 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 324.452952][ T31] 6 locks held by kworker/1:2/55: [ 324.458016][ T31] #0: ffff888022ad8148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 324.468839][ T31] #1: ffffc9000120fd10 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 324.480279][ T31] #2: ffff888029b53198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fe0 [ 324.489385][ T31] #3: ffff8880329b3198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4b0 [ 324.498830][ T31] #4: ffff8880751a4160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4b0 [ 324.508114][ T31] #5: ffffffff8e478bb0 (umhelper_sem){++++}-{4:4}, at: usermodehelper_read_trylock+0xa9/0x250 [ 324.524809][ T31] 2 locks held by getty/5596: [ 324.530673][ T31] #0: ffff88814c7220a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 324.540474][ T31] #1: ffffc9000333b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 324.550654][ T31] 4 locks held by udevd/5826: [ 324.556077][ T31] #0: ffff88802b6e51c8 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x12c0 [ 324.565039][ T31] #1: ffff8880546e2888 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x4d/0x240 [ 324.574498][ T31] #2: ffff88805ab3b2d8 (kn->active#26){++++}-{0:0}, at: kernfs_seq_start+0x71/0x240 [ 324.584084][ T31] #3: ffff8880329b3198 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 324.593457][ T31] 3 locks held by kworker/u8:42/5990: [ 324.598815][ T31] #0: ffff88814c49d148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 324.610091][ T31] #1: ffffc90005657d10 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 324.622355][ T31] #2: ffffffff9035e928 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x120/0x14e0 [ 324.631902][ T31] 1 lock held by syz.4.192/6961: [ 324.636843][ T31] #0: ffff888029b53198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x1b6/0x8b0 [ 324.645899][ T31] 4 locks held by udevd/7250: [ 324.650608][ T31] #0: ffff888032c29418 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x12c0 [ 324.660735][ T31] #1: ffff88802acbfc88 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x4d/0x240 [ 324.670226][ T31] #2: ffff8880599ed2d8 (kn->active#26){++++}-{0:0}, at: kernfs_seq_start+0x71/0x240 [ 324.679778][ T31] #3: ffff888056ee0198 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 324.689185][ T31] 2 locks held by syz.6.817/9295: [ 324.694207][ T31] #0: ffffffff9035e928 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 324.703189][ T31] #1: ffffffff8e5d03f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x284/0x3c0 [ 324.713241][ T31] 1 lock held by syz.3.820/9309: [ 324.718161][ T31] #0: ffffffff9035e928 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 324.733973][ T31] [ 324.736314][ T31] ============================================= [ 324.736314][ T31] [ 324.753760][ T31] NMI backtrace for cpu 1 [ 324.753774][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 324.753793][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 324.753802][ T31] Call Trace: [ 324.753807][ T31] [ 324.753813][ T31] dump_stack_lvl+0x116/0x1f0 [ 324.753844][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 324.753864][ T31] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 324.753888][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 324.753912][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 324.753933][ T31] watchdog+0xf70/0x12c0 [ 324.753953][ T31] ? __pfx_watchdog+0x10/0x10 [ 324.753968][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 324.753991][ T31] ? __kthread_parkme+0x19e/0x250 [ 324.754013][ T31] ? __pfx_watchdog+0x10/0x10 [ 324.754028][ T31] kthread+0x3c2/0x780 [ 324.754043][ T31] ? __pfx_kthread+0x10/0x10 [ 324.754058][ T31] ? rcu_is_watching+0x12/0xc0 [ 324.754077][ T31] ? __pfx_kthread+0x10/0x10 [ 324.754092][ T31] ret_from_fork+0x5d4/0x6f0 [ 324.754112][ T31] ? __pfx_kthread+0x10/0x10 [ 324.754127][ T31] ret_from_fork_asm+0x1a/0x30 [ 324.754154][ T31] [ 324.754159][ T31] Sending NMI from CPU 1 to CPUs 0: [ 324.877913][ C0] NMI backtrace for cpu 0 [ 324.877926][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 324.877942][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 324.877949][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 324.877973][ C0] Code: 5b 6d 02 e9 83 fb 02 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 03 79 23 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 324.877986][ C0] RSP: 0018:ffffffff8e207e08 EFLAGS: 000002c6 [ 324.877997][ C0] RAX: 0000000000ec8abd RBX: 0000000000000000 RCX: ffffffff8b869c99 [ 324.878005][ C0] RDX: 0000000000000000 RSI: ffffffff8de3003a RDI: ffffffff8c157460 [ 324.878014][ C0] RBP: fffffbfff1c52ef0 R08: 0000000000000001 R09: ffffed1017086645 [ 324.878022][ C0] R10: ffff8880b843322b R11: 0000000000000001 R12: 0000000000000000 [ 324.878030][ C0] R13: ffffffff8e297780 R14: ffffffff90a94250 R15: 0000000000000000 [ 324.878038][ C0] FS: 0000000000000000(0000) GS:ffff888124720000(0000) knlGS:0000000000000000 [ 324.878051][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 324.878060][ C0] CR2: 0000001b30012ff8 CR3: 000000007e181000 CR4: 00000000003526f0 [ 324.878068][ C0] Call Trace: [ 324.878073][ C0] [ 324.878077][ C0] default_idle+0x13/0x20 [ 324.878091][ C0] default_idle_call+0x6d/0xb0 [ 324.878104][ C0] do_idle+0x391/0x510 [ 324.878121][ C0] ? __pfx_do_idle+0x10/0x10 [ 324.878136][ C0] ? trace_sched_exit_tp+0x31/0x130 [ 324.878156][ C0] cpu_startup_entry+0x4f/0x60 [ 324.878172][ C0] rest_init+0x16b/0x2b0 [ 324.878186][ C0] ? acpi_subsystem_init+0x133/0x180 [ 324.878204][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 324.878218][ C0] start_kernel+0x3ee/0x4d0 [ 324.878230][ C0] x86_64_start_reservations+0x18/0x30 [ 324.878255][ C0] x86_64_start_kernel+0x130/0x190 [ 324.878267][ C0] common_startup_64+0x13e/0x148 [ 324.878287][ C0] [ 324.878943][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 325.075347][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 325.085035][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 325.095066][ T31] Call Trace: [ 325.098318][ T31] [ 325.101234][ T31] dump_stack_lvl+0x3d/0x1f0 [ 325.105811][ T31] panic+0x71c/0x800 [ 325.109684][ T31] ? __pfx_panic+0x10/0x10 [ 325.114074][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 325.119434][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 325.125388][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 325.130734][ T31] ? watchdog+0xdda/0x12c0 [ 325.135124][ T31] ? watchdog+0xdcd/0x12c0 [ 325.139513][ T31] watchdog+0xdeb/0x12c0 [ 325.143746][ T31] ? __pfx_watchdog+0x10/0x10 [ 325.148415][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 325.153606][ T31] ? __kthread_parkme+0x19e/0x250 [ 325.158611][ T31] ? __pfx_watchdog+0x10/0x10 [ 325.163302][ T31] kthread+0x3c2/0x780 [ 325.167367][ T31] ? __pfx_kthread+0x10/0x10 [ 325.171952][ T31] ? rcu_is_watching+0x12/0xc0 [ 325.176696][ T31] ? __pfx_kthread+0x10/0x10 [ 325.181268][ T31] ret_from_fork+0x5d4/0x6f0 [ 325.185838][ T31] ? __pfx_kthread+0x10/0x10 [ 325.190401][ T31] ret_from_fork_asm+0x1a/0x30 [ 325.195142][ T31] [ 325.198359][ T31] Kernel Offset: disabled [ 325.202658][ T31] Rebooting in 86400 seconds..