last executing test programs: 11.817908783s ago: executing program 0 (id=1200): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000140), 0x13f, 0x8}}, 0x20) syz_open_dev$sndctrl(0x0, 0x0, 0x0) syz_io_uring_setup(0x49c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) timer_settime(r3, 0x0, &(0x7f0000000380)={{0x0, 0x8}}, 0x0) mount(&(0x7f00000000c0)=@sr0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='pstore\x00', 0x400, &(0x7f0000000280)='-#\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x9, 0x15031, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) getsockopt$sock_buf(r5, 0x1, 0x1a, &(0x7f0000000080)=""/1, &(0x7f00000000c0)=0x1) read$FUSE(0xffffffffffffffff, &(0x7f00000019c0)={0x2020}, 0x2020) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa08, &(0x7f0000000340)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000140)=0x8) sendfile(r2, r2, 0x0, 0x40008) 11.16220937s ago: executing program 2 (id=1203): r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1, @private}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) syz_usb_connect(0x5, 0x0, 0x0, 0x0) read$FUSE(r3, &(0x7f0000000b00)={0x2020}, 0x2020) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x410, r0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f0000000280)={r6, 0xf, 0x7, 0x2, 0x7, 0x6, 0xf76f, 0x3, {0x0, @in6={{0xa, 0x4e22, 0xa30, @ipv4={'\x00', '\xff\xff', @remote}, 0x8001}}, 0x5, 0x200, 0x2, 0x8, 0xf}}, &(0x7f0000000180)=0xb0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) 10.583099478s ago: executing program 3 (id=1204): socket$nl_route(0x10, 0x3, 0x0) socket$igmp6(0xa, 0x3, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003100)=[{&(0x7f0000001f00)=ANY=[@ANYBLOB="10000000200008e82bbd7000ffdbdfa9"], 0x10}], 0x1, &(0x7f0000003140)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01, 0xee00}}}], 0x20, 0x4000000}, 0x6c004) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) 10.170556097s ago: executing program 3 (id=1205): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{0x0}], 0x1) r3 = syz_open_dev$dri(0x0, 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x4008011) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000340)={r6, 0x0, 0x0, 0x0, 0x1, [0x0], [0x0, 0x7], [0x0, 0x80000002, 0x2], [0x0, 0x0, 0x1, 0x1]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000080)={r7, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r8}) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, 0x0, 0x48000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r9, 0x0, 0xd}, 0x18) r10 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r10, 0x114, 0x7, 0x0, 0xa0) 10.087975719s ago: executing program 0 (id=1206): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4014}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82187201, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x400448ca, 0x0) syz_80211_join_ibss(0x0, 0x0, 0x0, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYBLOB], 0x36) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRES64=r1, @ANYRES32], 0xfc}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000181000010000000000000000000000000a40000000060a010400000000000000000200050000000000000400000000000000796e7365740000180002800900010073797a3000000000080004400000000014000000110001"], 0x68}}, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00', @ANYRES16=r3], 0x44}}, 0x0) socket(0x200000100000011, 0x3, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c8, 0x0) 9.776834693s ago: executing program 4 (id=1209): openat$ptmx(0xffffffffffffff9c, 0x0, 0x80222, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, 0x0) r2 = fcntl$getown(r0, 0x9) ptrace$PTRACE_SETSIGMASK(0x420b, r2, 0x8, &(0x7f00000000c0)={[0x9]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) stat(0x0, &(0x7f0000000300)) r3 = getpid() setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6, 0x0, 0x1, 0x0, 0x1, 0x8009}, 0x20) ioctl(0xffffffffffffffff, 0x8b32, &(0x7f0000000040)) r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) r5 = socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000480)=@newqdisc={0x90, 0x24, 0xf0b, 0xfffffffe, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xb, 0x9}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x60, 0x2, {{0x3, 0x0, 0x2, 0x0, 0xfffffffd, 0xbfffffff}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x92, 0x0, 0x10, 0x0, 0x3}}, @TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x5, 0x30, 0x1, 0xade}}]}]}}}]}, 0x90}, 0x1, 0x0, 0x0, 0x2004c084}, 0x40000d0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) 8.773532303s ago: executing program 3 (id=1211): io_uring_register$IORING_REGISTER_CLONE_BUFFERS(0xffffffffffffffff, 0x1e, &(0x7f0000000000), 0x1) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x25) r0 = socket(0x2c, 0x80000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x2040600) r2 = getpgid(0x0) r3 = syz_pidfd_open(r2, 0x0) pidfd_send_signal(r3, 0x0, 0x0, 0x4) write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000001d0000000000000005000900", 0x20) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r5) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="98030000", @ANYRES16=r6, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0"], 0x398}}, 0x0) 8.747778656s ago: executing program 0 (id=1212): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, &(0x7f0000002640), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1508}, 0x1, 0x0, 0x0, 0x24000080}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r5, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 8.394718845s ago: executing program 4 (id=1213): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x28060400) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) lseek(0xffffffffffffffff, 0x14, 0x1) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) statx(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x20, &(0x7f0000000300)) io_uring_enter(0xffffffffffffffff, 0x2def, 0x0, 0x0, 0x0, 0x0) openat$fb0(0xffffff9c, &(0x7f0000002680), 0x100, 0x0) r6 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r6, &(0x7f0000000580)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x43, 0x101d0}, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x4004000) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), r1) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)={0x1c, r7, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004004}, 0x8014) 7.209755979s ago: executing program 2 (id=1215): socket(0x2, 0x80805, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x2000000, 0xe2001) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'vlan0\x00'}) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x0, 0x7ffc, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}, 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f00000004c0)=""/78}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000200), 0x0, 0x0, 0x3) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$admmidi(&(0x7f0000000080), 0x2, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) capset(&(0x7f0000000080)={0x20071026}, 0x0) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000340)="480000001400191809004beafd0d3602028447000b4e230f02000500a2bc5603ca00000f7f89004e00200000000101ff05c00e03000200000000000100000000005839c9", 0x44}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x90}, 0x1, 0x0, 0x0, 0x8000}, 0x44880) unshare(0x26020580) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r3, 0x40096101, &(0x7f0000000100)={{}, 0x7}) 7.119214664s ago: executing program 3 (id=1216): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4895) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) shmdt(0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, 0x0}) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) kcmp(0x0, 0xffffffffffffffff, 0x3, r1, r0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) dup(r2) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)="2b534400a212d1f824d18e530aef16715da54b", 0x13}, {&(0x7f00000005c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c", 0x4a}, {&(0x7f0000000640)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba1493766d09fd561d69a5bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52fbe75287a4b9aaa18fd479bdd154b4efe531a242d90a1ca2799c242bfd4ddd8271448d3415bd3a907ad340dc2fa2471393212d02eb25242808cffdc4e7a646211c18ac8602f5", 0x96}, {&(0x7f0000000740)="f52ec22aafecc37a6d9995f1afb5c1727f223f9b84451a110b1dfbf19cc7ed183ba93f6d55645001887fc999262b9c938e22ef5ec46b4b1b535060dcca5cff1f0e5a1d9b32cef2b6e0a61af7968dc1759c4d901867d7d6e9f2521f6a1578e1cc2fbf58837a2633c0b8299192718c61227412dafd01e899723b33735bbec3e1429117362acc4139fc3565f183bd5568f47f4bc416ad", 0x95}, {&(0x7f0000000800)="1e385182c55247faf18100293ce63efe242a82de6de74560a9c4b8a3f33fa229f6a34c1846953adf438277d1e38d9263fdcc49df72fd9d8cf45893010f14ba523621193a081494babc7ce753b5f87f5339dadddfeed58952ab685c5058d25221cc61f35bef565c3cf7b96484358c0306ad0428bbdf9d50fe42a8bdc52f0ee28ae9b11a3ed083da48daa5d1dc556b71aa4411c138da4ea01a2d532451dc7d96464d7bc4ba47c46ff623cce167a8847c45e9df3d01e7132d3d8abff1eb", 0xbc}], 0x5}}], 0x1, 0xc0) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 6.655189839s ago: executing program 4 (id=1217): socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x12, 0xd8}, [@ldst={0x6, 0x0, 0x6}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xa) socket$unix(0x1, 0xc17a9ab45fe0440f, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, 0x0, 0x24000800) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x2, 0x3a) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r2 = dup(r1) bind$unix(r2, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) syz_open_dev$usbfs(0x0, 0x0, 0x103981) r3 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_SNDBIT(r3, 0x4004556a, 0xfffffffffffffffa) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000040)={0x18, 0x0, {0x3, @random="bb7fb37b9489", 'bond0\x00'}}, 0x1e) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe8c, 0x30, 0x25, 0x0, 0x0, {}, [{0xe78, 0x1, [@m_pedit={0xe74, 0x1, 0x0, 0x0, {{0xa}, {0xe48, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x24, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {0x5943}, {}, {}, {}, {0x0, 0x0, 0x0, 0x10}, {}, {}, {0x0, 0xa2}, {}, {}, {}, {0x0, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x8}, {}, {0x0, 0xfffffffe, 0x400000}, {0x0, 0xfffffffc}, {0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0xffff8000}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x2ca2}, {}, {0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x5}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x27a}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x47d6}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {0x0, 0x0, 0x3}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0xfffffc00}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x80000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {}, {0x0, 0x40000000, 0x1}, {0x2}, {}, {0x80000}, {0x0, 0x0, 0x0, 0xffffffff, 0x6}, {0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, {0x4}, {}, {0x0, 0x0, 0x0, 0x400}, {}, {0x0, 0xa, 0xfffffffc}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x9d}], [{}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x6}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {0x0, 0x1}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7}, {}, {}, {}, {}, {}, {0x1}]}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xe8c}}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) 6.236221081s ago: executing program 2 (id=1219): getpeername$unix(0xffffffffffffffff, 0x0, &(0x7f0000000280)) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x60000000, 0x0, 0x22, &(0x7f0000000000), &(0x7f0000002c80)="8dc92a8ff39080a675b6565efa3ed46f2a2756e43abbfd8c44686c04d6a0c42f2599"}, 0x4c) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004071}, 0x0) 5.133932798s ago: executing program 2 (id=1221): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xcc) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, &(0x7f00000003c0)) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r2 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x2, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x2, 0x2}) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f000001b000)="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", 0xfff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r5 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x800000) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r5, 0xc0bc5351, &(0x7f00000001c0)={0x25, 0x0, 'client0\x00', 0x0, "fca77e7fbadd83c4", "fd6581ac4b8a5d32a2763732acee190e65e0f6d112d11261c517ef5eca53c5ee", 0x9, 0xfffffffa}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r4, @ANYBLOB="00001700000000001c0037800b0001006970768a616e08000c0002800600010000000000050027"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000440)=[{0x45, 0x0, 0x1, 0xfffffffc}]}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp6(0xa, 0x2, 0x73) r6 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) bpf$MAP_CREATE(0xb00000000000000, &(0x7f0000004080)=@base={0x8, 0x4, 0x4, 0xe02, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) io_uring_enter(r6, 0x847ba, 0x0, 0xe, 0x0, 0x0) r9 = syz_open_dev$sndmidi(&(0x7f0000000280), 0x200, 0x141121) r10 = dup(r9) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r10, 0xc0385720, 0x0) 5.042677945s ago: executing program 3 (id=1222): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) r3 = syz_open_dev$dri(0x0, 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x4008011) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000340)={r6, 0x0, 0x0, 0x0, 0x1, [0x0], [0x0, 0x7], [0x0, 0x80000002, 0x2], [0x0, 0x0, 0x1, 0x1]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000080)={r7, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r8}) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, 0x0, 0x48000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r9, 0x0, 0xd}, 0x18) r10 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r10, 0x114, 0x7, 0x0, 0xa0) 4.470126758s ago: executing program 1 (id=1223): socket$inet(0x10, 0x3, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x62043, 0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$IOMMU_DESTROY$hwpt(0xffffffffffffffff, 0x3b80, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x100000400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0xfffffffffffffc39, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000100)={0x0, 0x1000, 0x7, 0x0, 0x41}) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_IO(r2, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffe, 0x6, 0x3, @scatter={0x2, 0x0, &(0x7f0000000440)=[{&(0x7f0000000140)=""/22, 0x16}, {&(0x7f0000000340)=""/203, 0x129}]}, &(0x7f0000000180)="bb881affa01a", 0x0, 0x8001, 0x0, 0x3, 0x0}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x7) ioctl$TIOCVHANGUP(r1, 0x5437, 0x2) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x200100, 0x0) getrlimit(0x9, &(0x7f00000000c0)) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) 4.236251412s ago: executing program 0 (id=1224): openat$ptmx(0xffffffffffffff9c, 0x0, 0x80222, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, 0x0) r2 = fcntl$getown(r0, 0x9) ptrace$PTRACE_SETSIGMASK(0x420b, r2, 0x8, &(0x7f00000000c0)={[0x9]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) stat(0x0, &(0x7f0000000300)) r3 = getpid() ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) ioctl(0xffffffffffffffff, 0x8b32, &(0x7f0000000040)) r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) r5 = socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000480)=@newqdisc={0x90, 0x24, 0xf0b, 0xfffffffe, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xb, 0x9}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x60, 0x2, {{0x3, 0x0, 0x2, 0x0, 0xfffffffd, 0xbfffffff}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x92, 0x0, 0x10, 0x0, 0x3}}, @TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x5, 0x30, 0x1, 0xade}}]}]}}}]}, 0x90}, 0x1, 0x0, 0x0, 0x2004c084}, 0x40000d0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) 4.020884794s ago: executing program 1 (id=1225): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000500)='GPL\x00', 0x5, 0xbb, &(0x7f000000cf3d)=""/187, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x7}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) syz_open_dev$sndpcmp(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000002100010000000000000300000000000000000000000800000800060000000000"], 0x24}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x4000009ca) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x4, &(0x7f0000000240)=[{0x9dae, 0xff, 0x6, 0x1}, {0x5, 0x4, 0x1, 0x4}, {0x6, 0x80, 0x3, 0x6}, {0x7fff, 0xf9, 0xb, 0xffffffff}]}, 0x10) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000003c0)={0x1, @pix_mp={0x8e0, 0x96f, 0x3136564e, 0x6, 0x3, [{0x2, 0x6}, {0xc00}, {0x3, 0x5de3}, {0x14, 0x5}, {0xa, 0x4000069a}, {0x7, 0x3}, {0x81, 0x5}, {0x9}], 0x5, 0x7, 0x8, 0x0, 0x4}}) r1 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000540)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x98f903, 0x0, '\x00', @p_u32=&(0x7f0000000340)=0x5}}) socket$kcm(0x29, 0x2, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f7, 0x0) socket$igmp6(0xa, 0x3, 0x2) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r3, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x31, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0) 3.707045494s ago: executing program 3 (id=1226): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x8}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x22) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000023"], 0x0, 0x4, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x78}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x2e}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 3.171616604s ago: executing program 1 (id=1227): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x28060400) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) lseek(0xffffffffffffffff, 0x14, 0x1) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) statx(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x20, &(0x7f0000000300)) io_uring_enter(0xffffffffffffffff, 0x2def, 0x0, 0x0, 0x0, 0x0) openat$fb0(0xffffff9c, &(0x7f0000002680), 0x100, 0x0) r6 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r6, &(0x7f0000000580)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x43, 0x101d0}, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x4004000) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), r1) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)={0x1c, r7, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004004}, 0x8014) 3.074055203s ago: executing program 0 (id=1228): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) r2 = openat$incfs(r1, &(0x7f0000000280)='.pending_reads\x00', 0x240401, 0x46) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x19, 0x4, 0x4, 0x12}, 0x50) syz_open_dev$loop(0x0, 0x207, 0x161a81) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) ioctl$KDGKBMODE(r2, 0x4b44, &(0x7f0000000300)) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAXSEG(r5, 0x84, 0xd, 0x0, &(0x7f0000000340)) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r6, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000002c00)}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000000540)="679512f062b8d965651edd4c06c901784e56aa174403ad4134742b71d211c6a85d8bc563c27f754fc2af5351f2f41e867c71c19837f2feba7862e511a47c446cd11c960f018962a53f6cf31a1123ff8092c9ff560701bfc579fa80f9149acafe2a225fed70d9173f0243a55be3c4028da556cf126da9c1b9b8f8e11356", 0x7d}, {&(0x7f0000002d80)="15", 0x1}, {&(0x7f0000000e80)='S', 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000003200)="8c", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000380)="01", 0x1}, {&(0x7f00000012c0)="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", 0xfffffe95}, {&(0x7f0000000a00)=',', 0x1}, {&(0x7f00000022c0)='Z', 0x1}, {&(0x7f00000005c0)="f5364e548c550000000000000000000000009c20aa8f88f2a2e98330e3799522896ebfddd4848b9deeecae27e7d77317facda9ee98b10c68444b7c094658bed24fd6766444ba58941c4d2a2cea03546fa8d215c3547d076a9543f841b2add236c19bdcf172a69ab70a7df1ad7ebc55e947f2c7a7a356fd68dbce155d2e22d72a5a65dbc16f7103ee6d06748b2ddf2799d94bfbcf1140285facb31bce2fba7fe3617478337692b1236f", 0x11}, {&(0x7f0000003240)="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", 0xdc1}, {&(0x7f0000002380)='L', 0x1}], 0x7}}], 0x4, 0xf000000) setsockopt$sock_int(r6, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r7, r3, 0x4, 0x0, @void}, 0x10) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0xa, 0x0, 0x384, 0x0, 0x180, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}) ioctl$FBIOGET_FSCREENINFO(r0, 0x4602, &(0x7f0000000080)) 2.920149125s ago: executing program 4 (id=1229): openat$ptmx(0xffffffffffffff9c, 0x0, 0x80222, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, 0x0) fcntl$getown(r0, 0x9) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6, 0x0, 0x1, 0x0, 0x1, 0x8009}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r2, 0x8b32, &(0x7f0000000040)) 2.333835571s ago: executing program 2 (id=1230): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r0, 0x0) mount(0x0, 0x0, 0x0, 0x400, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sendfile(r0, r0, 0x0, 0x40008) 1.856822757s ago: executing program 1 (id=1231): getpeername$unix(0xffffffffffffffff, 0x0, &(0x7f0000000280)) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x60000000, 0x0, 0x22, &(0x7f0000000000), &(0x7f0000002c80)="8dc92a8ff39080a675b6565efa3ed46f2a2756e43abbfd8c44686c04d6a0c42f2599"}, 0x4c) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004071}, 0x0) 1.493115707s ago: executing program 1 (id=1232): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$pfkey(0xffffff9c, 0x0, 0xa802, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x101121) r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, 0x0, 0x0) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$sock_SIOCETHTOOL(r2, 0x8946, 0x0) r3 = syz_io_uring_setup(0x1c57, &(0x7f0000000580)={0x0, 0x40ac, 0x10000, 0x2, 0x3f, 0x0, r2}, &(0x7f0000000180)=0x0, &(0x7f0000000300)=0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@bloom_filter={0x1e, 0x87f4, 0x637, 0x49, 0x800, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x1, 0x6}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x14, &(0x7f0000000240)=ANY=[@ANYRES32=r6], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000140)) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x8) io_uring_enter(r3, 0x2def, 0x4000, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000100)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x100, 0x7}, 0xf2, 0xffffffff, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x9}) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000340)='./file0\x00') openat$incfs(0xffffffffffffff9c, &(0x7f00000a0040)='.pending_reads\x00', 0x80102, 0x10) 1.442634352s ago: executing program 4 (id=1233): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="11000000040000000400", @ANYRES32, @ANYBLOB='\x00'/12, @ANYBLOB], 0x50) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) kcmp(0x0, 0x0, 0x2, r1, 0xffffffffffffffff) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000009c0), 0x183106, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @local}}, 0xee55, 0x0, 0x400, 0x0, 0x32, 0x2}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x8000000}}, 0x0, 0x0, 0x0, 0x7f, 0x8a}, 0x9c) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='./binderfs2/binder-control\x00', 0x800, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x3) setsockopt$nfc_llcp_NFC_LLCP_RW(r3, 0x118, 0x1000000, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x478103, 0x60) 1.417577098s ago: executing program 2 (id=1234): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, &(0x7f0000002640), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1508}, 0x1, 0x0, 0x0, 0x24000080}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r5, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 1.361411008s ago: executing program 0 (id=1235): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000500)='GPL\x00', 0x5, 0xbb, &(0x7f000000cf3d)=""/187, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x7}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) syz_open_dev$sndpcmp(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000002100010000000000000300000000000000000000000800000800060000000000"], 0x24}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x4000009ca) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x4, &(0x7f0000000240)=[{0x9dae, 0xff, 0x6, 0x1}, {0x5, 0x4, 0x1, 0x4}, {0x6, 0x80, 0x3, 0x6}, {0x7fff, 0xf9, 0xb, 0xffffffff}]}, 0x10) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000003c0)={0x1, @pix_mp={0x8e0, 0x96f, 0x3136564e, 0x6, 0x3, [{0x2, 0x6}, {0xc00}, {0x3, 0x5de3}, {0x14, 0x5}, {0xa, 0x4000069a}, {0x7, 0x3}, {0x81, 0x5}, {0x9}], 0x5, 0x7, 0x8, 0x0, 0x4}}) r1 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000540)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x98f903, 0x0, '\x00', @p_u32=&(0x7f0000000340)=0x5}}) socket$kcm(0x29, 0x2, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f7, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080), 0x8) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4000, &(0x7f0000000380)=0xa636, 0x9, 0x2) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000000280)=0x5, 0x6, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r3, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x31, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0) 107.762475ms ago: executing program 4 (id=1236): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4895) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) shmdt(0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, 0x0}) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) kcmp(0x0, 0xffffffffffffffff, 0x3, r1, r0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) dup(r2) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)="2b534400a212d1f824d18e530aef16715da54b", 0x13}, {&(0x7f00000005c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c", 0x4a}, {&(0x7f0000000640)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba1493766d09fd561d69a5bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52fbe75287a4b9aaa18fd479bdd154b4efe531a242d90a1ca2799c242bfd4ddd8271448d3415bd3a907ad340dc2fa2471393212d02eb25242808cffdc4e7a646211c18ac8602f5", 0x96}, {&(0x7f0000000740)="f52ec22aafecc37a6d9995f1afb5c1727f223f9b84451a110b1dfbf19cc7ed183ba93f6d55645001887fc999262b9c938e22ef5ec46b4b1b535060dcca5cff1f0e5a1d9b32cef2b6e0a61af7968dc1759c4d901867d7d6e9f2521f6a1578e1cc2fbf58837a2633c0b8299192718c61227412dafd01e899723b33735bbec3e1429117362acc4139fc3565f183bd5568f47f4bc416ad", 0x95}, {&(0x7f0000000800)="1e385182c55247faf18100293ce63efe242a82de6de74560a9c4b8a3f33fa229f6a34c1846953adf438277d1e38d9263fdcc49df72fd9d8cf45893010f14ba523621193a081494babc7ce753b5f87f5339dadddfeed58952ab685c5058d25221cc61f35bef565c3cf7b96484358c0306ad0428bbdf9d50fe42a8bdc52f0ee28ae9b11a3ed083da48daa5d1dc556b71aa4411c138da4ea01a2d532451dc7d96464d7bc4ba47c46ff623cce167a8847c45e9df3d01e7132d3d8abff1eb", 0xbc}], 0x5}}], 0x1, 0xc0) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 0s ago: executing program 1 (id=1237): socket$inet(0x10, 0x3, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x62043, 0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$IOMMU_DESTROY$hwpt(0xffffffffffffffff, 0x3b80, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x100000400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0xfffffffffffffc39, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000100)={0x0, 0x1000, 0x7, 0x0, 0x41}) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_IO(r2, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffe, 0x6, 0x3, @scatter={0x2, 0x0, &(0x7f0000000440)=[{&(0x7f0000000140)=""/22, 0x16}, {&(0x7f0000000340)=""/203, 0x129}]}, &(0x7f0000000180)="bb881affa01a", 0x0, 0x8001, 0x0, 0x3, 0x0}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x7) ioctl$TIOCVHANGUP(r1, 0x5437, 0x2) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x200100, 0x0) getrlimit(0x9, &(0x7f00000000c0)) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) kernel console output (not intermixed with test programs): oot:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 114.261105][ T30] audit: type=1400 audit(1751666367.666:401): avc: denied { map } for pid=6467 comm="syz.1.136" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 114.265600][ T5876] usb 5-1: config 0 interface 255 has no altsetting 0 [ 114.398262][ T5876] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 114.409987][ T5876] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.426910][ T5876] usb 5-1: config 0 descriptor?? [ 114.433810][ T5876] cp210x 5-1:0.255: cp210x converter detected [ 114.611327][ T30] audit: type=1400 audit(1751666368.846:402): avc: denied { sys_module } for pid=6486 comm="syz.1.140" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 114.747715][ T6489] netlink: 4 bytes leftover after parsing attributes in process `syz.0.138'. [ 114.769826][ T30] audit: type=1400 audit(1751666368.976:403): avc: denied { ioctl } for pid=6479 comm="syz.0.138" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 114.864794][ T6497] netlink: 16 bytes leftover after parsing attributes in process `syz.3.139'. [ 114.904493][ T5876] cp210x 5-1:0.255: failed to get vendor val 0x000e size 3: -71 [ 114.972287][ T5876] cp210x 5-1:0.255: failed to get vendor val 0x3711 size 2: -71 [ 115.133609][ T5876] cp210x 5-1:0.255: GPIO initialisation failed: -71 [ 115.333552][ T30] audit: type=1400 audit(1751666368.986:404): avc: denied { append } for pid=6479 comm="syz.0.138" name="dlm-control" dev="devtmpfs" ino=94 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 115.389742][ T5876] usb 5-1: cp210x converter now attached to ttyUSB0 [ 115.478043][ T5876] usb 5-1: USB disconnect, device number 7 [ 115.492549][ T5876] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 115.503070][ T5876] cp210x 5-1:0.255: device disconnected [ 115.515091][ T30] audit: type=1400 audit(1751666368.986:405): avc: denied { ioctl } for pid=6479 comm="syz.0.138" path="socket:[9949]" dev="sockfs" ino=9949 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 115.634648][ T6500] netlink: 52 bytes leftover after parsing attributes in process `syz.1.141'. [ 115.686298][ T6506] fuse: Unknown parameter 'fd0x0000000000000004' [ 116.261215][ T6513] siw: device registration error -23 [ 117.454440][ T6524] 9pnet_fd: Insufficient options for proto=fd [ 117.974600][ T6525] tipc: Started in network mode [ 117.979678][ T6525] tipc: Node identity 4, cluster identity 4711 [ 117.985910][ T6525] tipc: Node number set to 4 [ 118.680848][ T6522] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 118.687411][ T6522] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 118.719201][ T6523] vhci_hcd: connection closed [ 118.719374][ T6522] vhci_hcd vhci_hcd.0: Device attached [ 118.789781][ T1111] vhci_hcd: stop threads [ 118.825710][ T1111] vhci_hcd: release socket [ 118.856101][ T1111] vhci_hcd: disconnect device [ 118.864917][ T6535] fuse: Unknown parameter 'group_i00000000000000000000' [ 118.905903][ T5956] vhci_hcd: vhci_device speed not set [ 119.656687][ T6550] lo speed is unknown, defaulting to 1000 [ 120.074194][ T6565] fuse: Unknown parameter 'fd0x0000000000000004' [ 120.098333][ T6567] netlink: 12 bytes leftover after parsing attributes in process `syz.0.157'. [ 120.155902][ T9] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 120.323272][ T9] usb 5-1: config 0 has an invalid interface number: 255 but max is 0 [ 120.352187][ T9] usb 5-1: config 0 has no interface number 0 [ 120.383012][ T9] usb 5-1: config 0 interface 255 has no altsetting 0 [ 120.422568][ T9] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 120.435552][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.447227][ T9] usb 5-1: config 0 descriptor?? [ 120.509653][ T9] cp210x 5-1:0.255: cp210x converter detected [ 120.645964][ T5956] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 120.871569][ T5956] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 120.885232][ T9] cp210x 5-1:0.255: failed to get vendor val 0x000e size 3: -71 [ 120.907610][ T5956] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 120.929375][ T6581] netlink: 4 bytes leftover after parsing attributes in process `syz.3.160'. [ 120.940426][ T9] cp210x 5-1:0.255: failed to get vendor val 0x3711 size 2: -71 [ 120.956340][ T9] cp210x 5-1:0.255: GPIO initialisation failed: -71 [ 120.963076][ T5956] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 120.979696][ T5956] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 120.993010][ T9] usb 5-1: cp210x converter now attached to ttyUSB0 [ 121.003358][ T5956] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 121.019287][ T9] usb 5-1: USB disconnect, device number 8 [ 121.037564][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 121.051560][ T5956] usb 1-1: config 0 interface 0 has no altsetting 0 [ 121.064698][ T9] cp210x 5-1:0.255: device disconnected [ 121.144685][ T5956] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 122.078180][ T5956] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 122.160774][ T5956] usb 1-1: Product: syz [ 122.166067][ T5956] usb 1-1: Manufacturer: syz [ 122.171060][ T5956] usb 1-1: SerialNumber: syz [ 122.178914][ T5956] usb 1-1: config 0 descriptor?? [ 122.185697][ T6575] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 122.199043][ T5956] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 122.219068][ T5956] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 122.392303][ T6592] fuse: Unknown parameter 'group_i00000000000000000000' [ 122.655647][ T6596] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8 [ 123.621739][ T5876] usb 1-1: USB disconnect, device number 5 [ 123.713968][ T5876] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 124.756281][ T6624] fuse: Unknown parameter 'fd0x0000000000000004' [ 124.767543][ T6625] netlink: 12 bytes leftover after parsing attributes in process `syz.4.170'. [ 125.851228][ T6641] netlink: 16 bytes leftover after parsing attributes in process `syz.3.175'. [ 126.998722][ T6645] syz.2.177 uses obsolete (PF_INET,SOCK_PACKET) [ 127.121138][ T30] audit: type=1400 audit(1751666381.336:406): avc: denied { getopt } for pid=6644 comm="syz.4.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 127.163836][ T6653] netlink: 1300 bytes leftover after parsing attributes in process `syz.0.179'. [ 127.184629][ T30] audit: type=1400 audit(1751666381.336:407): avc: denied { read } for pid=6644 comm="syz.4.176" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 127.264254][ T30] audit: type=1400 audit(1751666381.336:408): avc: denied { open } for pid=6644 comm="syz.4.176" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 127.305908][ T43] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 127.348453][ T30] audit: type=1400 audit(1751666381.336:409): avc: denied { ioctl } for pid=6644 comm="syz.4.176" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 127.465944][ T43] usb 4-1: device descriptor read/64, error -71 [ 127.858791][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 127.898765][ T43] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 128.025850][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 128.040626][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.045963][ T43] usb 4-1: device descriptor read/64, error -71 [ 128.053131][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.073083][ T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 128.082593][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.125292][ T9] usb 3-1: config 0 descriptor?? [ 128.176168][ T43] usb usb4-port1: attempt power cycle [ 128.329536][ T30] audit: type=1400 audit(1751666382.476:410): avc: denied { mounton } for pid=6656 comm="syz.1.180" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 128.540036][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 128.546326][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 128.587782][ T43] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 128.610985][ T9] usb 3-1: USB disconnect, device number 7 [ 128.616591][ T43] usb 4-1: device descriptor read/8, error -71 [ 128.777980][ T6670] netlink: 5364 bytes leftover after parsing attributes in process `syz.0.185'. [ 129.185855][ T43] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 129.568069][ T43] usb 4-1: device descriptor read/8, error -71 [ 129.677015][ T43] usb usb4-port1: unable to enumerate USB device [ 129.835880][ T5956] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 130.047141][ T5956] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 130.104336][ T5956] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 24623, setting to 1024 [ 130.150875][ T5956] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 130.162620][ T5956] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 130.171814][ T5956] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.298332][ T6671] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 130.318472][ T5956] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 130.426072][ T10] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 130.562993][ T6671] netlink: 56 bytes leftover after parsing attributes in process `syz.1.184'. [ 130.604114][ T43] usb 2-1: USB disconnect, device number 3 [ 130.855902][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 130.868778][ T10] usb 3-1: config 0 has no interfaces? [ 130.888063][ T10] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 130.899301][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.909343][ T10] usb 3-1: Product: syz [ 130.913570][ T10] usb 3-1: Manufacturer: syz [ 130.920214][ T10] usb 3-1: SerialNumber: syz [ 130.940023][ T30] audit: type=1326 audit(1751666385.176:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6683 comm="syz.4.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29b7b8e929 code=0x7fc00000 [ 130.993577][ T10] usb 3-1: config 0 descriptor?? [ 131.013422][ T30] audit: type=1326 audit(1751666385.176:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6683 comm="syz.4.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f29b7b8e929 code=0x7fc00000 [ 131.075669][ T30] audit: type=1326 audit(1751666385.176:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6683 comm="syz.4.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29b7b8e929 code=0x7fc00000 [ 131.191255][ T30] audit: type=1326 audit(1751666385.176:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6683 comm="syz.4.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29b7b8e929 code=0x7fc00000 [ 131.211299][ T5889] usb 3-1: USB disconnect, device number 8 [ 131.269535][ T30] audit: type=1326 audit(1751666385.176:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6683 comm="syz.4.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29b7b8e929 code=0x7fc00000 [ 131.750989][ T6704] netlink: 1300 bytes leftover after parsing attributes in process `syz.1.196'. [ 131.868893][ T6705] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 131.875447][ T6705] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 131.925059][ T6702] 9pnet_fd: Insufficient options for proto=fd [ 131.933197][ T6705] vhci_hcd vhci_hcd.0: Device attached [ 131.989198][ T6706] vhci_hcd: connection closed [ 132.006153][ T1111] vhci_hcd: stop threads [ 132.021364][ T1111] vhci_hcd: release socket [ 132.039477][ T1111] vhci_hcd: disconnect device [ 132.075882][ T5942] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 132.340183][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.353071][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.396664][ T5942] usb 2-1: Using ep0 maxpacket: 16 [ 132.426166][ T6721] netlink: 5364 bytes leftover after parsing attributes in process `syz.2.200'. [ 133.125078][ T6734] netlink: 16 bytes leftover after parsing attributes in process `syz.4.202'. [ 133.710032][ T6735] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input9 [ 133.981115][ T5942] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.074402][ T5942] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.084251][ T5942] usb 2-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 134.093324][ T5942] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.199213][ T5942] usb 2-1: config 0 descriptor?? [ 134.709443][ T5942] usbhid 2-1:0.0: can't add hid device: -71 [ 134.715849][ T5942] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 134.726568][ T5942] usb 2-1: USB disconnect, device number 4 [ 134.845948][ T6752] fuse: Unknown parameter 'group_i00000000000000000000' [ 135.155275][ T6755] netlink: 1300 bytes leftover after parsing attributes in process `syz.0.208'. [ 135.705896][ T5862] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 135.865839][ T5862] usb 5-1: Using ep0 maxpacket: 16 [ 135.894975][ T5862] usb 5-1: config 0 has no interfaces? [ 135.935474][ T5862] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 135.947255][ T5862] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.959819][ T5862] usb 5-1: Product: syz [ 135.965370][ T5862] usb 5-1: Manufacturer: syz [ 135.971545][ T5862] usb 5-1: SerialNumber: syz [ 135.980642][ T5862] usb 5-1: config 0 descriptor?? [ 136.051773][ T6770] 9pnet_fd: Insufficient options for proto=fd [ 136.137369][ T6774] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 136.144503][ T6774] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 136.154146][ T6774] vhci_hcd vhci_hcd.0: Device attached [ 136.173161][ T6775] vhci_hcd: connection closed [ 136.190319][ T36] vhci_hcd: stop threads [ 136.235064][ T10] usb 5-1: USB disconnect, device number 9 [ 136.345843][ T36] vhci_hcd: release socket [ 136.375865][ T36] vhci_hcd: disconnect device [ 136.425881][ T5956] vhci_hcd: vhci_device speed not set [ 136.489657][ T6783] netlink: 5364 bytes leftover after parsing attributes in process `syz.2.215'. [ 136.798174][ T6786] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input10 [ 138.967491][ T6795] fuse: Unknown parameter 'group_id00000000000000000000' [ 139.621842][ T6796] netlink: 16 bytes leftover after parsing attributes in process `syz.2.218'. [ 139.836492][ T6801] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input11 [ 140.058993][ T6808] netlink: 1300 bytes leftover after parsing attributes in process `syz.3.222'. [ 140.080797][ T6810] overlayfs: missing 'lowerdir' [ 141.287841][ T6836] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input12 [ 141.533583][ T5956] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 141.950999][ T5956] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 142.056961][ T5956] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 142.109292][ T5956] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 142.137127][ T5956] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 142.175334][ T5956] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 142.249148][ T5956] usb 1-1: config 0 interface 0 has no altsetting 0 [ 142.294501][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 142.294536][ T30] audit: type=1400 audit(1751666396.506:417): avc: denied { create } for pid=6839 comm="syz.3.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 142.379870][ T5956] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 142.417656][ T5956] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 142.475833][ T5956] usb 1-1: Product: syz [ 142.494861][ T30] audit: type=1400 audit(1751666396.526:418): avc: denied { connect } for pid=6839 comm="syz.3.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 142.542381][ T5956] usb 1-1: Manufacturer: syz [ 142.569128][ T5956] usb 1-1: SerialNumber: syz [ 142.651647][ T30] audit: type=1400 audit(1751666396.526:419): avc: denied { read } for pid=6839 comm="syz.3.232" path="socket:[10833]" dev="sockfs" ino=10833 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 142.702574][ T5956] usb 1-1: config 0 descriptor?? [ 142.728885][ T6828] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 142.814385][ T5956] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 142.903855][ T5956] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 143.205277][ T5889] usb 1-1: USB disconnect, device number 6 [ 143.213462][ T5889] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 143.284628][ T6848] netlink: 16 bytes leftover after parsing attributes in process `syz.4.233'. [ 143.917080][ T6854] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input13 [ 144.287158][ T6859] overlayfs: missing 'lowerdir' [ 144.341065][ T6861] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 144.392153][ T30] audit: type=1400 audit(1751666398.626:420): avc: denied { bind } for pid=6860 comm="syz.2.237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 144.412086][ T5889] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 144.480876][ T6871] netlink: 1300 bytes leftover after parsing attributes in process `syz.1.240'. [ 144.565890][ T5889] usb 1-1: Using ep0 maxpacket: 16 [ 144.572606][ T5889] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.830981][ T5889] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.848535][ T5889] usb 1-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 144.888843][ T5889] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.913718][ T5889] usb 1-1: config 0 descriptor?? [ 146.080093][ T5889] usbhid 1-1:0.0: can't add hid device: -71 [ 146.089351][ T5889] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 146.210851][ T5889] usb 1-1: USB disconnect, device number 7 [ 146.445215][ T6895] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 146.451768][ T6895] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 146.469531][ T6895] vhci_hcd vhci_hcd.0: Device attached [ 146.485109][ T6895] 9pnet_fd: Insufficient options for proto=fd [ 146.562680][ T6901] vhci_hcd: connection closed [ 146.563165][ T59] vhci_hcd: stop threads [ 146.594976][ T59] vhci_hcd: release socket [ 146.616371][ T59] vhci_hcd: disconnect device [ 146.656498][ T5956] vhci_hcd: vhci_device speed not set [ 146.789637][ T6907] overlayfs: missing 'lowerdir' [ 147.168356][ T6917] siw: device registration error -23 [ 147.461503][ T6921] netlink: 1360 bytes leftover after parsing attributes in process `syz.2.254'. [ 147.643376][ T6926] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input14 [ 148.389208][ T6934] netlink: 16 bytes leftover after parsing attributes in process `syz.2.256'. [ 148.945872][ T10] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 149.604677][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 149.612294][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.635837][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.645604][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 149.672512][ T30] audit: type=1400 audit(1751666403.906:421): avc: denied { create } for pid=6946 comm="syz.0.260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 149.685821][ T10] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 149.711448][ T30] audit: type=1400 audit(1751666403.936:422): avc: denied { connect } for pid=6946 comm="syz.0.260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 149.721500][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.769857][ T5942] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 149.779117][ T30] audit: type=1326 audit(1751666403.976:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6937 comm="syz.2.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c3718e929 code=0x7fc00000 [ 149.839064][ T10] usb 4-1: config 0 descriptor?? [ 149.844263][ T30] audit: type=1326 audit(1751666403.976:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6937 comm="syz.2.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1c3718e929 code=0x7fc00000 [ 149.898926][ T30] audit: type=1326 audit(1751666403.976:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6937 comm="syz.2.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c3718e929 code=0x7fc00000 [ 149.929855][ T30] audit: type=1326 audit(1751666403.976:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6937 comm="syz.2.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c3718e929 code=0x7fc00000 [ 150.007858][ T30] audit: type=1326 audit(1751666403.976:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6937 comm="syz.2.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c3718e929 code=0x7fc00000 [ 150.051438][ T5942] usb 2-1: config 0 has an invalid interface number: 255 but max is 0 [ 150.061668][ T5942] usb 2-1: config 0 has no interface number 0 [ 150.077355][ T30] audit: type=1326 audit(1751666403.976:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6937 comm="syz.2.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c3718e929 code=0x7fc00000 [ 150.122160][ T5942] usb 2-1: config 0 interface 255 has no altsetting 0 [ 150.142120][ T5942] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 150.160442][ T5942] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.162905][ T6959] fuse: Bad value for 'user_id' [ 150.173726][ T30] audit: type=1326 audit(1751666403.976:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6937 comm="syz.2.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c3718e929 code=0x7fc00000 [ 150.197397][ T6959] fuse: Bad value for 'user_id' [ 150.203377][ T5942] usb 2-1: config 0 descriptor?? [ 150.221801][ T5942] cp210x 2-1:0.255: cp210x converter detected [ 150.250476][ T30] audit: type=1326 audit(1751666403.976:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6937 comm="syz.2.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c3718e929 code=0x7fc00000 [ 150.336551][ T10] shield 0003:0955:7214.0003: unknown main item tag 0x0 [ 150.370340][ T10] shield 0003:0955:7214.0003: unknown main item tag 0x0 [ 150.400486][ T6963] overlayfs: missing 'lowerdir' [ 150.427320][ T10] shield 0003:0955:7214.0003: unknown main item tag 0x0 [ 150.435716][ T5942] usb 2-1: cp210x converter now attached to ttyUSB0 [ 150.463437][ T10] shield 0003:0955:7214.0003: unknown main item tag 0x0 [ 150.506816][ T10] shield 0003:0955:7214.0003: unknown main item tag 0x0 [ 150.534781][ T6936] netlink: 'syz.3.257': attribute type 2 has an invalid length. [ 150.563724][ T6936] netlink: 244 bytes leftover after parsing attributes in process `syz.3.257'. [ 150.584126][ T10] input: HID 0955:7214 Haptics as /devices/virtual/input/input15 [ 150.638149][ T43] usb 2-1: USB disconnect, device number 5 [ 150.649595][ T43] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 150.694286][ T43] cp210x 2-1:0.255: device disconnected [ 150.741819][ T10] shield 0003:0955:7214.0003: Registered Thunderstrike controller [ 150.781790][ T10] shield 0003:0955:7214.0003: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0 [ 151.150710][ T9] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 151.167286][ T10] usb 4-1: USB disconnect, device number 9 [ 151.179963][ T9] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 151.340521][ T9] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 151.353481][ T6979] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input16 [ 151.353953][ T9] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 151.463786][ T6983] netlink: 5364 bytes leftover after parsing attributes in process `syz.1.268'. [ 152.065282][ T6988] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input17 [ 155.166970][ T7006] fuse: Bad value for 'user_id' [ 155.187856][ T7006] fuse: Bad value for 'user_id' [ 155.550373][ T7021] netlink: 16 bytes leftover after parsing attributes in process `syz.0.270'. [ 156.484655][ T7044] netlink: 5364 bytes leftover after parsing attributes in process `syz.1.282'. [ 156.511261][ T7046] netlink: 16 bytes leftover after parsing attributes in process `syz.3.281'. [ 157.472240][ T7054] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input18 [ 159.651007][ T7063] fuse: Bad value for 'user_id' [ 160.147173][ T7063] fuse: Bad value for 'user_id' [ 162.110879][ T7101] netlink: 16 bytes leftover after parsing attributes in process `syz.4.294'. [ 162.782623][ T7106] 9pnet: Could not find request transport: fd0x0000000000000003 [ 162.876954][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 162.876971][ T30] audit: type=1326 audit(1751666417.036:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7099 comm="syz.2.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c3718e929 code=0x7fc00000 [ 162.907807][ T30] audit: type=1326 audit(1751666417.036:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7099 comm="syz.2.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1c3718e929 code=0x7fc00000 [ 164.055996][ T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 165.000966][ T9] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 165.103123][ T9] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 24623, setting to 1024 [ 165.184217][ T9] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 165.231433][ T9] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 165.271876][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.318119][ T7114] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 165.349111][ T9] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 165.760740][ T7152] netlink: 56 bytes leftover after parsing attributes in process `syz.2.300'. [ 167.320353][ T7167] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 168.745463][ T7182] netlink: 4 bytes leftover after parsing attributes in process `syz.1.315'. [ 168.866200][ T5862] usb 3-1: USB disconnect, device number 9 [ 168.963270][ T7192] overlayfs: missing 'workdir' [ 168.990138][ T7193] netlink: 'syz.4.320': attribute type 5 has an invalid length. [ 169.018981][ T7193] netlink: 4 bytes leftover after parsing attributes in process `syz.4.320'. [ 169.127945][ T7195] netlink: 5364 bytes leftover after parsing attributes in process `syz.2.321'. [ 170.491771][ T7215] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 170.894486][ T7228] netlink: 4 bytes leftover after parsing attributes in process `syz.0.328'. [ 171.832153][ T7237] overlayfs: missing 'lowerdir' [ 171.895833][ T5956] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 172.978628][ T5956] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 172.990377][ T5956] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 24623, setting to 1024 [ 173.001929][ T5956] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 173.014064][ T5956] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 173.487663][ T5956] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.519801][ T7233] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 173.541103][ T5956] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 174.466240][ T7267] netlink: 56 bytes leftover after parsing attributes in process `syz.2.331'. [ 174.621487][ T7271] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 175.815606][ T30] audit: type=1326 audit(1751666430.046:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7273 comm="syz.0.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e6598e929 code=0x7fc00000 [ 175.925836][ T30] audit: type=1326 audit(1751666430.046:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7273 comm="syz.0.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8e6598e929 code=0x7fc00000 [ 176.210113][ T30] audit: type=1326 audit(1751666430.046:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7273 comm="syz.0.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e6598e929 code=0x7fc00000 [ 176.315099][ T7297] overlayfs: missing 'lowerdir' [ 177.610397][ T7319] netlink: 4 bytes leftover after parsing attributes in process `syz.1.353'. [ 177.941221][ T30] audit: type=1326 audit(1751666430.046:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7273 comm="syz.0.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e6598e929 code=0x7fc00000 [ 178.001151][ T30] audit: type=1326 audit(1751666430.046:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7273 comm="syz.0.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e6598e929 code=0x7fc00000 [ 178.082126][ T30] audit: type=1326 audit(1751666430.046:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7273 comm="syz.0.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e6598e929 code=0x7fc00000 [ 178.136851][ T30] audit: type=1326 audit(1751666430.046:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7273 comm="syz.0.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e6598e929 code=0x7fc00000 [ 178.568973][ T7331] netlink: 5364 bytes leftover after parsing attributes in process `syz.0.357'. [ 178.921906][ T7334] netlink: 1688 bytes leftover after parsing attributes in process `syz.0.358'. [ 179.700901][ T7342] block device autoloading is deprecated and will be removed. [ 179.739543][ T5942] usb 3-1: USB disconnect, device number 10 [ 179.803415][ T7342] syz.0.360: attempt to access beyond end of device [ 179.803415][ T7342] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 183.394076][ T7372] netlink: 16 bytes leftover after parsing attributes in process `syz.4.367'. [ 184.395818][ T30] audit: type=1400 audit(1751666438.066:442): avc: denied { write } for pid=7369 comm="syz.1.368" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 184.692175][ T7371] hub 8-0:1.0: USB hub found [ 184.697668][ T7371] hub 8-0:1.0: 1 port detected [ 185.068862][ T5942] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 185.288357][ T5942] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 185.327422][ T5942] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 185.351203][ T5942] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 185.956416][ T5942] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 185.986098][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 185.992316][ T5836] Bluetooth: hci2: command 0x0406 tx timeout [ 186.013383][ T5840] Bluetooth: hci3: command 0x0406 tx timeout [ 186.101129][ T5942] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 186.317996][ T5942] usb 3-1: config 0 interface 0 has no altsetting 0 [ 186.327045][ T5942] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 186.351971][ T5942] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 186.361511][ T5942] usb 3-1: Product: syz [ 186.365866][ T5942] usb 3-1: Manufacturer: syz [ 186.372164][ T5942] usb 3-1: SerialNumber: syz [ 186.382520][ T5942] usb 3-1: config 0 descriptor?? [ 186.402590][ T7378] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 186.413465][ T5942] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 186.427822][ T5942] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 186.570075][ T7394] : entered promiscuous mode [ 186.723332][ T7404] netlink: 4 bytes leftover after parsing attributes in process `syz.4.377'. [ 186.777590][ T5942] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 187.020012][ T9] usb 3-1: USB disconnect, device number 11 [ 187.030978][ T9] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 187.048696][ T30] audit: type=1400 audit(1751666441.226:443): avc: denied { create } for pid=7408 comm="syz.1.379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 187.100104][ T30] audit: type=1400 audit(1751666441.226:444): avc: denied { write } for pid=7408 comm="syz.1.379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 187.125943][ T5942] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 187.137392][ T5942] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 24623, setting to 1024 [ 187.150240][ T30] audit: type=1400 audit(1751666441.236:445): avc: denied { read } for pid=7408 comm="syz.1.379" path="socket:[13047]" dev="sockfs" ino=13047 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 187.174046][ T5942] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 187.186666][ T5942] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 187.195858][ T5942] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.761126][ T7396] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 187.841588][ T7415] netlink: 16 bytes leftover after parsing attributes in process `syz.2.380'. [ 188.234299][ T5942] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 188.336232][ T30] audit: type=1400 audit(1751666442.566:446): avc: denied { create } for pid=7416 comm="syz.0.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 188.772111][ T7423] netlink: 56 bytes leftover after parsing attributes in process `syz.3.374'. [ 191.424301][ T7448] siw: device registration error -23 [ 192.257811][ T7452] 9pnet_fd: Insufficient options for proto=fd [ 193.289136][ T5876] usb 4-1: USB disconnect, device number 10 [ 193.485896][ T7453] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 193.492458][ T7453] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 193.503001][ T7454] vhci_hcd: connection closed [ 193.547166][ T7453] vhci_hcd vhci_hcd.0: Device attached [ 193.745089][ T7465] netlink: 4 bytes leftover after parsing attributes in process `syz.0.392'. [ 193.786399][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.806855][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.813197][ T6211] vhci_hcd: stop threads [ 193.817884][ T5876] usb 41-1: new high-speed USB device number 3 using vhci_hcd [ 193.828422][ T9] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 193.830212][ T6211] vhci_hcd: release socket [ 193.863158][ T6211] vhci_hcd: disconnect device [ 194.265836][ T9] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 194.281350][ T9] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 194.294887][ T9] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 194.315294][ T9] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 194.368434][ T9] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 194.383966][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 194.402088][ T7471] netlink: 'syz.0.395': attribute type 2 has an invalid length. [ 194.427770][ T9] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 194.449643][ T9] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 194.475667][ T9] usb 2-1: Product: syz [ 194.495612][ T9] usb 2-1: Manufacturer: syz [ 194.522358][ T9] usb 2-1: SerialNumber: syz [ 194.567155][ T9] usb 2-1: config 0 descriptor?? [ 194.731510][ T30] audit: type=1400 audit(1751666448.966:447): avc: denied { mount } for pid=7476 comm="syz.4.397" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 194.788025][ T7462] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 194.827707][ T9] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 194.853366][ T9] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 195.839343][ T30] audit: type=1400 audit(1751666450.066:448): avc: denied { write } for pid=7490 comm="syz.0.399" path="socket:[13142]" dev="sockfs" ino=13142 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 195.923613][ T7493] block device autoloading is deprecated and will be removed. [ 196.730719][ T30] audit: type=1400 audit(1751666450.106:449): avc: denied { bind } for pid=7490 comm="syz.0.399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 196.750197][ T30] audit: type=1400 audit(1751666450.106:450): avc: denied { write } for pid=7490 comm="syz.0.399" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 196.772874][ T30] audit: type=1400 audit(1751666450.106:451): avc: denied { open } for pid=7490 comm="syz.0.399" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 196.795863][ T30] audit: type=1400 audit(1751666450.116:452): avc: denied { ioctl } for pid=7490 comm="syz.0.399" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 196.881790][ T30] audit: type=1400 audit(1751666450.946:453): avc: denied { unmount } for pid=5828 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 196.959471][ T5956] usb 2-1: USB disconnect, device number 6 [ 196.987979][ T5956] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 197.547002][ T7514] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 197.553556][ T7514] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 197.561306][ T7514] vhci_hcd vhci_hcd.0: Device attached [ 197.580163][ T7514] 9pnet_fd: Insufficient options for proto=fd [ 197.649025][ T7517] tipc: Started in network mode [ 197.653943][ T7517] tipc: Node identity 4, cluster identity 4711 [ 197.660154][ T7517] tipc: Node number set to 4 [ 198.435818][ T7515] vhci_hcd: connection closed [ 198.497526][ T13] vhci_hcd: stop threads [ 198.558024][ T13] vhci_hcd: release socket [ 198.562561][ T13] vhci_hcd: disconnect device [ 198.621149][ T43] usb 33-1: new high-speed USB device number 2 using vhci_hcd [ 198.628784][ T43] usb 33-1: enqueue for inactive port 0 [ 198.705860][ T43] vhci_hcd: vhci_device speed not set [ 198.723773][ T7527] netlink: 'syz.2.409': attribute type 72 has an invalid length. [ 198.742001][ T7527] netlink: 1360 bytes leftover after parsing attributes in process `syz.2.409'. [ 199.090813][ T5876] vhci_hcd: vhci_device speed not set [ 199.644396][ T30] audit: type=1400 audit(1751666453.876:454): avc: denied { unmount } for pid=5828 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 200.206194][ T7547] netlink: 'syz.1.417': attribute type 7 has an invalid length. [ 200.211178][ T7548] netlink: 36 bytes leftover after parsing attributes in process `syz.3.416'. [ 200.530979][ T7555] hub 8-0:1.0: USB hub found [ 200.545933][ T7555] hub 8-0:1.0: 1 port detected [ 203.071482][ T7570] 9pnet_fd: Insufficient options for proto=fd [ 204.243051][ T7568] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 204.249581][ T7568] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 204.796762][ T7581] /dev/nullb0: Can't open blockdev [ 204.809461][ T7568] vhci_hcd vhci_hcd.0: Device attached [ 204.815720][ T7569] vhci_hcd: connection closed [ 204.854307][ T3484] vhci_hcd: stop threads [ 204.867154][ T3484] vhci_hcd: release socket [ 204.872671][ T3484] vhci_hcd: disconnect device [ 205.048281][ T30] audit: type=1400 audit(1751666459.276:455): avc: denied { unlink } for pid=7583 comm="syz.1.424" name="#1" dev="tmpfs" ino=539 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 205.102493][ T30] audit: type=1400 audit(1751666459.276:456): avc: denied { mount } for pid=7583 comm="syz.1.424" name="/" dev="overlay" ino=534 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 205.457437][ T30] audit: type=1400 audit(1751666459.686:457): avc: denied { getopt } for pid=7585 comm="syz.2.425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 205.683246][ T7595] siw: device registration error -23 [ 206.250050][ T30] audit: type=1400 audit(1751666460.486:458): avc: denied { read } for pid=7585 comm="syz.2.425" path="socket:[13882]" dev="sockfs" ino=13882 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 206.658181][ T7599] netlink: 5364 bytes leftover after parsing attributes in process `syz.1.428'. [ 207.292472][ T7607] evm: overlay not supported [ 207.409475][ T7609] netlink: 16 bytes leftover after parsing attributes in process `syz.0.430'. [ 208.485848][ T7620] syz.4.433: attempt to access beyond end of device [ 208.485848][ T7620] nbd4: rw=0, sector=64, nr_sectors = 1 limit=0 [ 208.521347][ T7620] syz.4.433: attempt to access beyond end of device [ 208.521347][ T7620] nbd4: rw=0, sector=256, nr_sectors = 1 limit=0 [ 208.541892][ T7620] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 208.552184][ T7620] syz.4.433: attempt to access beyond end of device [ 208.552184][ T7620] nbd4: rw=0, sector=512, nr_sectors = 1 limit=0 [ 208.565519][ T7620] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 208.585141][ T7620] syz.4.433: attempt to access beyond end of device [ 208.585141][ T7620] nbd4: rw=0, sector=64, nr_sectors = 2 limit=0 [ 208.595910][ T7624] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 208.604356][ T7624] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 208.612105][ T7624] vhci_hcd vhci_hcd.0: Device attached [ 208.619759][ T7624] 9pnet_fd: Insufficient options for proto=fd [ 208.628824][ T7620] syz.4.433: attempt to access beyond end of device [ 208.628824][ T7620] nbd4: rw=0, sector=512, nr_sectors = 2 limit=0 [ 208.642653][ T7620] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 208.653870][ T7620] syz.4.433: attempt to access beyond end of device [ 208.653870][ T7620] nbd4: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 208.667215][ T7620] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 208.717959][ T7620] syz.4.433: attempt to access beyond end of device [ 208.717959][ T7620] nbd4: rw=0, sector=64, nr_sectors = 4 limit=0 [ 208.730905][ T7620] syz.4.433: attempt to access beyond end of device [ 208.730905][ T7620] nbd4: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 208.744245][ T7620] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 208.805077][ T7620] syz.4.433: attempt to access beyond end of device [ 208.805077][ T7620] nbd4: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 208.842417][ T7620] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 209.062166][ T7620] syz.4.433: attempt to access beyond end of device [ 209.062166][ T7620] nbd4: rw=0, sector=64, nr_sectors = 8 limit=0 [ 209.076419][ T5876] usb 33-1: new high-speed USB device number 3 using vhci_hcd [ 209.095719][ T7625] vhci_hcd: connection reset by peer [ 209.101759][ T13] vhci_hcd: stop threads [ 209.224923][ T13] vhci_hcd: release socket [ 209.232358][ T13] vhci_hcd: disconnect device [ 209.235158][ T7620] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 209.246803][ T7620] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 209.393823][ T7620] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 210.055839][ T5956] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 210.737345][ T5956] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 210.751574][ T5956] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 24623, setting to 1024 [ 210.782820][ T5956] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 210.806905][ T5956] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 210.835208][ T5956] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.920543][ T7644] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 210.937232][ T5956] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 211.019734][ T7652] netlink: 5364 bytes leftover after parsing attributes in process `syz.3.443'. [ 213.168745][ T7667] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input19 [ 214.882952][ T5876] vhci_hcd: vhci_device speed not set [ 215.012851][ T7672] netlink: 1360 bytes leftover after parsing attributes in process `syz.2.448'. [ 215.207533][ T2148] usb 1-1: USB disconnect, device number 8 [ 215.624660][ T7682] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 217.004022][ T7700] netlink: 'syz.2.457': attribute type 2 has an invalid length. [ 219.833544][ T7713] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input20 [ 222.151653][ T7728] Device name cannot be null; rc = [-22] [ 222.271635][ T7729] overlayfs: overlapping lowerdir path [ 223.542753][ T7744] xt_SECMARK: invalid mode: 2 [ 224.371372][ T7754] netlink: 5364 bytes leftover after parsing attributes in process `syz.4.468'. [ 224.620686][ T7750] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 225.126726][ T7760] netlink: 'syz.1.471': attribute type 2 has an invalid length. [ 225.364432][ T7770] netlink: 'syz.1.474': attribute type 9 has an invalid length. [ 225.748011][ T7777] netlink: 36 bytes leftover after parsing attributes in process `syz.0.477'. [ 227.852873][ T7795] siw: device registration error -23 [ 228.618803][ T30] audit: type=1400 audit(1751666482.856:459): avc: denied { append } for pid=7792 comm="syz.2.482" name="sg0" dev="devtmpfs" ino=770 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 228.836016][ T30] audit: type=1400 audit(1751666482.916:460): avc: denied { ioctl } for pid=7792 comm="syz.2.482" path="/dev/sg0" dev="devtmpfs" ino=770 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 228.948147][ T7806] netlink: 'syz.4.486': attribute type 2 has an invalid length. [ 229.331955][ T7822] netlink: 4 bytes leftover after parsing attributes in process `syz.0.491'. [ 229.447318][ T43] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 229.448981][ T7816] netlink: 36 bytes leftover after parsing attributes in process `syz.4.490'. [ 229.510565][ T30] audit: type=1400 audit(1751666483.736:461): avc: denied { read } for pid=7810 comm="syz.2.487" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 229.553372][ T7827] bridge0: entered promiscuous mode [ 229.649143][ T43] usb 4-1: Using ep0 maxpacket: 16 [ 229.678997][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.715959][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 229.742781][ T43] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 229.808289][ T43] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 229.896372][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.071586][ T43] usb 4-1: config 0 descriptor?? [ 230.075397][ T7834] netlink: 4 bytes leftover after parsing attributes in process `syz.4.492'. [ 230.526380][ T7844] Device name cannot be null; rc = [-22] [ 230.542175][ T7844] overlayfs: overlapping lowerdir path [ 230.840161][ T43] shield 0003:0955:7214.0004: unknown main item tag 0x0 [ 230.865808][ T43] shield 0003:0955:7214.0004: unknown main item tag 0x0 [ 230.884934][ T43] shield 0003:0955:7214.0004: unknown main item tag 0x0 [ 230.893289][ T43] shield 0003:0955:7214.0004: unknown main item tag 0x0 [ 230.902145][ T43] shield 0003:0955:7214.0004: unknown main item tag 0x0 [ 230.947020][ T43] input: HID 0955:7214 Haptics as /devices/virtual/input/input21 [ 231.077040][ T7819] netlink: 'syz.3.489': attribute type 2 has an invalid length. [ 231.084734][ T7819] netlink: 244 bytes leftover after parsing attributes in process `syz.3.489'. [ 231.963762][ T7856] siw: device registration error -23 [ 232.682606][ T43] shield 0003:0955:7214.0004: Registered Thunderstrike controller [ 232.693362][ T43] shield 0003:0955:7214.0004: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0 [ 232.959001][ T2148] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 233.022708][ T43] usb 4-1: USB disconnect, device number 11 [ 233.052762][ T2148] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 233.088109][ T7867] netlink: 'syz.3.501': attribute type 2 has an invalid length. [ 233.183148][ T2148] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 233.564744][ T2148] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 234.876045][ T7876] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 234.877262][ T7882] 9pnet_fd: Insufficient options for proto=fd [ 234.882582][ T7876] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 234.897259][ T7876] vhci_hcd vhci_hcd.0: Device attached [ 235.155875][ T9] usb 39-1: new high-speed USB device number 4 using vhci_hcd [ 235.336971][ T7877] vhci_hcd: connection closed [ 235.337273][ T6312] vhci_hcd: stop threads [ 235.431774][ T6312] vhci_hcd: release socket [ 235.441589][ T6312] vhci_hcd: disconnect device [ 235.559085][ T7885] siw: device registration error -23 [ 235.566298][ T30] audit: type=1400 audit(1751666489.806:462): avc: denied { connect } for pid=7873 comm="syz.0.503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 237.098231][ T5956] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 237.395960][ T5956] usb 4-1: Using ep0 maxpacket: 16 [ 237.438638][ T5956] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 237.561679][ T5956] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.041553][ T5956] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 239.557764][ T5956] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 239.567915][ T5956] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.578227][ T5956] usb 4-1: config 0 descriptor?? [ 239.723683][ T7915] Bluetooth: hci5: Frame reassembly failed (-84) [ 239.737284][ T30] audit: type=1400 audit(1751666493.916:463): avc: denied { read } for pid=7913 comm="syz.1.515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 240.050492][ T30] audit: type=1400 audit(1751666493.926:464): avc: denied { write } for pid=7913 comm="syz.1.515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 240.093056][ T5956] usbhid 4-1:0.0: can't add hid device: -71 [ 240.103391][ T5956] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 240.205975][ T30] audit: type=1400 audit(1751666494.426:465): avc: denied { create } for pid=7916 comm="syz.2.516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 240.856158][ T9] vhci_hcd: vhci_device speed not set [ 241.319323][ T5956] usb 4-1: USB disconnect, device number 12 [ 241.430470][ T30] audit: type=1400 audit(1751666494.426:466): avc: denied { write } for pid=7916 comm="syz.2.516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 241.451953][ T30] audit: type=1400 audit(1751666494.426:467): avc: denied { nlmsg_write } for pid=7916 comm="syz.2.516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 241.536195][ T7924] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 241.775994][ T5844] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 241.782480][ T5837] Bluetooth: hci5: command 0x1003 tx timeout [ 243.366223][ T30] audit: type=1400 audit(1751666497.536:468): avc: denied { mount } for pid=7952 comm="syz.2.526" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 243.558044][ T30] audit: type=1400 audit(1751666497.706:469): avc: denied { bind } for pid=7952 comm="syz.2.526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 243.586148][ T30] audit: type=1400 audit(1751666497.706:470): avc: denied { write } for pid=7952 comm="syz.2.526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 243.832712][ T2148] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 244.597315][ T2148] usb 1-1: Using ep0 maxpacket: 16 [ 244.604201][ T2148] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.649050][ T2148] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 246.190391][ T2148] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 246.204186][ T2148] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 246.255673][ T2148] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.268181][ T2148] usb 1-1: config 0 descriptor?? [ 246.528895][ T7983] siw: device registration error -23 [ 247.124334][ T2148] usbhid 1-1:0.0: can't add hid device: -71 [ 247.159907][ T2148] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 247.201880][ T2148] usb 1-1: USB disconnect, device number 9 [ 248.205479][ T6211] Bluetooth: hci5: Frame reassembly failed (-84) [ 248.216014][ T6211] Bluetooth: hci5: Frame reassembly failed (-84) [ 248.217757][ T2148] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 248.222437][ T12] Bluetooth: hci5: Frame reassembly failed (-84) [ 248.270663][ T7995] Bluetooth: hci5: Frame reassembly failed (-84) [ 248.406100][ T2148] usb 1-1: Using ep0 maxpacket: 16 [ 248.453883][ T2148] usb 1-1: config 0 has no interfaces? [ 248.474250][ T2148] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 248.521003][ T2148] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.551096][ T2148] usb 1-1: Product: syz [ 248.671288][ T2148] usb 1-1: Manufacturer: syz [ 248.682331][ T2148] usb 1-1: SerialNumber: syz [ 248.702956][ T2148] usb 1-1: config 0 descriptor?? [ 248.912866][ T5912] usb 1-1: USB disconnect, device number 10 [ 249.025890][ T2148] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 249.384981][ T2148] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 249.435870][ T2148] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 249.450267][ T2148] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 249.471906][ T2148] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 249.488997][ T2148] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 249.512869][ T2148] usb 3-1: config 0 interface 0 has no altsetting 0 [ 249.524959][ T2148] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 249.540706][ T2148] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 249.549958][ T2148] usb 3-1: Product: syz [ 249.554131][ T2148] usb 3-1: Manufacturer: syz [ 249.562770][ T2148] usb 3-1: SerialNumber: syz [ 249.586592][ T2148] usb 3-1: config 0 descriptor?? [ 249.593344][ T8010] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 249.733670][ T2148] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 249.745846][ T2148] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 250.605960][ T5829] Bluetooth: hci5: command 0x1003 tx timeout [ 250.646812][ T5844] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 252.984023][ T8046] Bluetooth: hci5: Frame reassembly failed (-84) [ 253.312374][ T8049] netlink: 'syz.0.552': attribute type 2 has an invalid length. [ 253.658927][ T5956] usb 3-1: USB disconnect, device number 12 [ 253.684529][ T5956] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 253.989563][ T8064] input input22: cannot allocate more than FF_MAX_EFFECTS effects [ 255.351199][ T5844] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 255.354664][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.371294][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.955261][ T8087] bio_check_eod: 2 callbacks suppressed [ 255.955280][ T8087] syz.4.559: attempt to access beyond end of device [ 255.955280][ T8087] loop4: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 255.974536][ T8087] EXT4-fs (loop4): unable to read superblock [ 256.015134][ T30] audit: type=1400 audit(1751666510.086:471): avc: denied { execute } for pid=8083 comm="syz.4.559" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=15266 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 258.332977][ T30] audit: type=1400 audit(1751666512.226:472): avc: denied { bind } for pid=8094 comm="syz.2.562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 259.438144][ T43] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 259.850847][ T30] audit: type=1400 audit(1751666513.846:473): avc: denied { map } for pid=8121 comm="syz.3.570" path="socket:[16408]" dev="sockfs" ino=16408 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 259.887314][ T43] usb 3-1: Using ep0 maxpacket: 16 [ 259.893991][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.905407][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 259.926750][ T43] usb 3-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 259.949350][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.973912][ T43] usb 3-1: config 0 descriptor?? [ 261.119432][ T8133] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input23 [ 262.049315][ T43] input: HID 05ac:8241 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:05AC:8241.0005/input/input24 [ 263.195388][ T43] appleir 0003:05AC:8241.0005: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.2-1/input0 [ 264.244353][ T43] usb 3-1: USB disconnect, device number 13 [ 264.415719][ T8153] hub 8-0:1.0: USB hub found [ 264.425913][ T8153] hub 8-0:1.0: 1 port detected [ 265.289923][ T8150] fido_id[8150]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 266.523559][ T8173] netlink: 4 bytes leftover after parsing attributes in process `syz.0.583'. [ 267.538383][ T8181] syz.2.586: attempt to access beyond end of device [ 267.538383][ T8181] loop2: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 267.551665][ T8181] EXT4-fs (loop2): unable to read superblock [ 268.199885][ T8188] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input25 [ 269.467913][ T10] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 269.635904][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 269.781343][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 270.667664][ T8199] Device name cannot be null; rc = [-22] [ 270.722016][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 270.837286][ T8199] overlayfs: overlapping lowerdir path [ 270.861554][ T8198] Bluetooth: MGMT ver 1.23 [ 270.865847][ T10] usb 2-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 270.866932][ T30] audit: type=1400 audit(1751666525.096:474): avc: denied { write } for pid=8197 comm="syz.2.592" path="socket:[15808]" dev="sockfs" ino=15808 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 270.905918][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.935041][ T10] usb 2-1: config 0 descriptor?? [ 270.944822][ T10] usb 2-1: can't set config #0, error -71 [ 270.983916][ T10] usb 2-1: USB disconnect, device number 7 [ 271.895945][ T30] audit: type=1400 audit(1751666526.116:475): avc: denied { create } for pid=8214 comm="syz.3.598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 272.458579][ T30] audit: type=1400 audit(1751666526.696:476): avc: denied { setopt } for pid=8214 comm="syz.3.598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 273.047290][ T8221] syz.4.599: attempt to access beyond end of device [ 273.047290][ T8221] loop4: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 273.060593][ T8221] EXT4-fs (loop4): unable to read superblock [ 273.107779][ T30] audit: type=1400 audit(1751666526.776:477): avc: denied { bind } for pid=8214 comm="syz.3.598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 273.352427][ T30] audit: type=1400 audit(1751666526.776:478): avc: denied { write } for pid=8214 comm="syz.3.598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 273.451817][ T30] audit: type=1400 audit(1751666526.776:479): avc: denied { read } for pid=8214 comm="syz.3.598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 273.476637][ T8223] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 276.580935][ T8268] netlink: 4 bytes leftover after parsing attributes in process `syz.3.610'. [ 278.672836][ T30] audit: type=1400 audit(1751666532.906:480): avc: denied { create } for pid=8291 comm="syz.2.619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 279.216390][ T8296] warning: `syz.2.619' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 279.378610][ T30] audit: type=1400 audit(1751666533.256:481): avc: denied { mount } for pid=8291 comm="syz.2.619" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 279.406517][ T30] audit: type=1400 audit(1751666533.446:482): avc: denied { ioctl } for pid=8291 comm="syz.2.619" path="socket:[15939]" dev="sockfs" ino=15939 ioctlcmd=0x8b36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 279.431532][ T30] audit: type=1400 audit(1751666533.486:483): avc: denied { ioctl } for pid=8291 comm="syz.2.619" path="socket:[15935]" dev="sockfs" ino=15935 ioctlcmd=0x4943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 279.517251][ T8291] delete_channel: no stack [ 279.578169][ T30] audit: type=1400 audit(1751666533.806:484): avc: denied { unmount } for pid=5825 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 280.768295][ T30] audit: type=1400 audit(1751666534.886:485): avc: denied { create } for pid=8309 comm="syz.3.624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 280.982521][ T8313] netlink: 16 bytes leftover after parsing attributes in process `syz.4.621'. [ 283.727180][ T8330] netlink: 860 bytes leftover after parsing attributes in process `syz.1.628'. [ 283.885847][ T5889] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 283.968109][ T8333] netlink: 5364 bytes leftover after parsing attributes in process `syz.0.629'. [ 284.079054][ T5889] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 284.091625][ T5889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.211067][ T5889] usb 4-1: config 0 descriptor?? [ 285.145376][ T5889] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 285.450089][ T5889] [drm:udl_init] *ERROR* Selecting channel failed [ 285.680964][ T5889] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 285.703170][ T5889] [drm] Initialized udl on minor 2 [ 285.730615][ T5889] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 285.739708][ T8362] netlink: 4 bytes leftover after parsing attributes in process `syz.0.634'. [ 285.776884][ T5889] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 285.788774][ T5951] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 285.805128][ T5889] usb 4-1: USB disconnect, device number 13 [ 285.876290][ T5951] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 288.218606][ T8379] delete_channel: no stack [ 288.271492][ T10] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 288.566349][ T8391] netlink: 4 bytes leftover after parsing attributes in process `syz.3.641'. [ 288.789625][ T10] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 288.878508][ T30] audit: type=1400 audit(1751666543.116:486): avc: denied { read } for pid=8390 comm="syz.2.642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 289.767186][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.783083][ T10] usb 5-1: config 0 descriptor?? [ 291.257854][ T10] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 291.327081][ T10] [drm:udl_init] *ERROR* Selecting channel failed [ 292.838480][ T10] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 293.207788][ T10] [drm] Initialized udl on minor 2 [ 293.255883][ T10] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 293.283778][ T10] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 293.294848][ T5951] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 293.848651][ T8433] xt_SECMARK: invalid mode: 2 [ 293.900540][ T10] usb 5-1: USB disconnect, device number 10 [ 293.918895][ T5951] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 294.826401][ T5951] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 295.709533][ T8442] netlink: 16 bytes leftover after parsing attributes in process `syz.3.656'. [ 296.925135][ T8453] netlink: 'syz.1.659': attribute type 10 has an invalid length. [ 297.069572][ T8453] 8021q: adding VLAN 0 to HW filter on device team0 [ 297.120374][ T8453] bond0: (slave team0): Enslaving as an active interface with an up link [ 297.717704][ T8462] netlink: 4 bytes leftover after parsing attributes in process `syz.4.660'. [ 298.464201][ T8471] hub 8-0:1.0: USB hub found [ 298.476057][ T8471] hub 8-0:1.0: 1 port detected [ 300.520762][ T5876] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 300.663116][ T30] audit: type=1400 audit(1751666554.896:487): avc: denied { block_suspend } for pid=8489 comm="syz.4.669" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 300.775861][ T5876] usb 2-1: device descriptor read/64, error -71 [ 301.297348][ T5876] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 302.279729][ T5876] usb 2-1: device descriptor read/64, error -71 [ 302.398885][ T8518] netlink: 16 bytes leftover after parsing attributes in process `syz.4.674'. [ 302.420768][ T5876] usb usb2-port1: attempt power cycle [ 302.538962][ T8487] delete_channel: no stack [ 302.575907][ T5956] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 302.625912][ T8521] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 302.632443][ T8521] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 302.642468][ T8521] vhci_hcd vhci_hcd.0: Device attached [ 302.657585][ T8521] 9pnet_fd: Insufficient options for proto=fd [ 302.763520][ T5956] usb 4-1: device descriptor read/64, error -71 [ 302.763564][ T8525] vhci_hcd: connection closed [ 302.782192][ T8532] netlink: 'syz.2.680': attribute type 10 has an invalid length. [ 302.858388][ T8532] team0: Device ipvlan1 failed to register rx_handler [ 303.050203][ T1089] vhci_hcd: stop threads [ 303.065322][ T1089] vhci_hcd: release socket [ 303.071866][ T1089] vhci_hcd: disconnect device [ 303.154422][ T5951] vhci_hcd: vhci_device speed not set [ 303.631692][ T5956] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 303.784810][ T5956] usb 4-1: device descriptor read/64, error -71 [ 304.315898][ T5956] usb usb4-port1: attempt power cycle [ 304.353047][ T8515] delete_channel: no stack [ 306.402038][ T8564] netlink: 16 bytes leftover after parsing attributes in process `syz.4.689'. [ 307.504512][ T30] audit: type=1400 audit(1751666561.736:488): avc: denied { execute } for pid=8577 comm="syz.0.692" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 309.949445][ T5956] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 310.285780][ T5956] usb 2-1: device descriptor read/64, error -71 [ 310.704913][ T8615] [U]  [ 311.368374][ T8612] sp0: Synchronizing with TNC [ 311.479741][ T5956] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 311.956499][ T5956] usb 2-1: device descriptor read/64, error -71 [ 311.980147][ T8622] sp0: Synchronizing with TNC [ 312.086140][ T5956] usb usb2-port1: attempt power cycle [ 316.772159][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.778479][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.838055][ T2148] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 317.060230][ T2148] usb 4-1: device descriptor read/64, error -71 [ 317.424640][ T2148] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 317.666526][ T2148] usb 4-1: device descriptor read/64, error -71 [ 318.415806][ T5876] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 318.431798][ T2148] usb usb4-port1: attempt power cycle [ 318.581823][ T5876] usb 3-1: device descriptor read/64, error -71 [ 318.832263][ T8699] netlink: 4 bytes leftover after parsing attributes in process `syz.4.721'. [ 319.065778][ T5876] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 319.213688][ T8701] siw: device registration error -23 [ 319.442403][ T5876] usb 3-1: device descriptor read/64, error -71 [ 319.556207][ T5876] usb usb3-port1: attempt power cycle [ 319.563453][ T30] audit: type=1400 audit(1751666573.796:489): avc: denied { ioctl } for pid=8703 comm="syz.4.723" path="socket:[18592]" dev="sockfs" ino=18592 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 319.587894][ C0] vkms_vblank_simulate: vblank timer overrun [ 319.604086][ T8704] vxcan0: tx drop: invalid da for name 0x0000000000000003 [ 319.925780][ T5876] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 319.947341][ T5876] usb 3-1: device descriptor read/8, error -71 [ 320.305066][ T8691] delete_channel: no stack [ 320.585820][ T8718] netlink: 16 bytes leftover after parsing attributes in process `syz.2.729'. [ 325.199132][ T8738] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 325.205961][ T5889] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 325.595952][ T5889] usb 3-1: device descriptor read/64, error -71 [ 325.965939][ T5889] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 326.175972][ T5889] usb 3-1: device descriptor read/64, error -71 [ 326.295908][ T5956] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 326.351713][ T5889] usb usb3-port1: attempt power cycle [ 326.477249][ T5956] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 326.589344][ T5956] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.660673][ T5956] usb 1-1: config 0 descriptor?? [ 326.757610][ T5889] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 326.789388][ T5889] usb 3-1: device descriptor read/8, error -71 [ 326.820932][ T8750] kAFS: No cell specified [ 326.921997][ T5956] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 327.035941][ T5889] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 327.058299][ T5889] usb 3-1: device descriptor read/8, error -71 [ 327.131095][ T5956] [drm:udl_init] *ERROR* Selecting channel failed [ 327.164571][ T5956] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 327.189450][ T5889] usb usb3-port1: unable to enumerate USB device [ 327.198438][ T8756] input input26: cannot allocate more than FF_MAX_EFFECTS effects [ 327.203996][ T5956] [drm] Initialized udl on minor 2 [ 327.225551][ T5956] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 327.236699][ T5956] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 327.254589][ T5889] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 327.264138][ T5956] usb 1-1: USB disconnect, device number 11 [ 327.296169][ T5889] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 328.988468][ T8773] program syz.2.742 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 329.004156][ T30] audit: type=1400 audit(1751666583.216:490): avc: denied { read } for pid=8767 comm="syz.2.742" name="sg0" dev="devtmpfs" ino=770 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 330.973540][ T8796] netlink: 4 bytes leftover after parsing attributes in process `syz.3.749'. [ 331.374266][ T8800] kAFS: No cell specified [ 331.454449][ T8783] siw: device registration error -23 [ 334.292589][ T8824] program syz.1.754 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 336.246108][ T8678] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 337.512591][ T5912] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 337.543576][ T8678] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 337.553868][ T8678] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.569516][ T8678] usb 1-1: Product: syz [ 337.593282][ T8678] usb 1-1: Manufacturer: syz [ 337.614354][ T8678] usb 1-1: SerialNumber: syz [ 337.783907][ T5912] usb 4-1: device descriptor read/64, error -71 [ 337.811539][ T8678] usb 1-1: config 0 descriptor?? [ 338.104665][ T5912] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 338.133091][ T8678] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 339.186191][ T5912] usb 4-1: device descriptor read/64, error -71 [ 339.233458][ T8865] netlink: 'syz.4.766': attribute type 1 has an invalid length. [ 339.243486][ T8865] netlink: 144 bytes leftover after parsing attributes in process `syz.4.766'. [ 339.253635][ T8865] netlink: 'syz.4.766': attribute type 1 has an invalid length. [ 339.261922][ T8865] netlink: 'syz.4.766': attribute type 2 has an invalid length. [ 339.270349][ T8865] netlink: 64 bytes leftover after parsing attributes in process `syz.4.766'. [ 339.296040][ T8865] netlink: 12 bytes leftover after parsing attributes in process `syz.4.766'. [ 339.394283][ T8868] syz.4.766: attempt to access beyond end of device [ 339.394283][ T8868] nbd4: rw=0, sector=2, nr_sectors = 1 limit=0 [ 339.407660][ T8868] hfs: can't find a HFS filesystem on dev nbd4 [ 339.691616][ T8851] delete_channel: no stack [ 339.756099][ T5912] usb usb4-port1: attempt power cycle [ 340.112739][ T8678] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 341.250173][ T5956] usb 1-1: USB disconnect, device number 12 [ 342.332022][ T8894] netlink: 16 bytes leftover after parsing attributes in process `syz.0.772'. [ 342.495834][ T43] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 343.535368][ T43] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 343.584531][ T43] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 24623, setting to 1024 [ 343.931430][ T43] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 343.971259][ T43] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 343.989946][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.022762][ T8893] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 344.160104][ T43] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 344.280094][ T8916] netlink: 'syz.4.777': attribute type 1 has an invalid length. [ 344.287862][ T8916] netlink: 144 bytes leftover after parsing attributes in process `syz.4.777'. [ 344.296868][ T8916] netlink: 'syz.4.777': attribute type 1 has an invalid length. [ 344.304522][ T8916] netlink: 'syz.4.777': attribute type 2 has an invalid length. [ 344.312206][ T8916] netlink: 64 bytes leftover after parsing attributes in process `syz.4.777'. [ 344.346295][ T8916] netlink: 12 bytes leftover after parsing attributes in process `syz.4.777'. [ 344.443365][ T8917] syz.4.777: attempt to access beyond end of device [ 344.443365][ T8917] nbd4: rw=0, sector=2, nr_sectors = 1 limit=0 [ 344.456359][ T8917] hfs: can't find a HFS filesystem on dev nbd4 [ 345.126430][ T8920] netlink: 56 bytes leftover after parsing attributes in process `syz.1.773'. [ 345.672558][ T8933] program syz.3.782 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 346.593184][ T30] audit: type=1400 audit(1751666600.826:491): avc: denied { connect } for pid=8941 comm="syz.0.784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 346.878549][ T8944] netlink: 'syz.2.781': attribute type 1 has an invalid length. [ 346.886296][ T8944] netlink: 144 bytes leftover after parsing attributes in process `syz.2.781'. [ 346.895245][ T8944] netlink: 'syz.2.781': attribute type 1 has an invalid length. [ 346.903023][ T8944] netlink: 'syz.2.781': attribute type 2 has an invalid length. [ 346.910763][ T8944] netlink: 64 bytes leftover after parsing attributes in process `syz.2.781'. [ 346.954077][ T8936] netlink: 12 bytes leftover after parsing attributes in process `syz.2.781'. [ 346.997241][ T8936] syz.2.781: attempt to access beyond end of device [ 346.997241][ T8936] nbd2: rw=0, sector=2, nr_sectors = 1 limit=0 [ 347.011047][ T8936] hfs: can't find a HFS filesystem on dev nbd2 [ 347.518304][ T9] usb 2-1: USB disconnect, device number 14 [ 348.063058][ T8950] netlink: 16 bytes leftover after parsing attributes in process `syz.4.786'. [ 350.420766][ T8975] fuse: Bad value for 'fd' [ 350.818431][ T5912] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 351.178906][ T5912] usb 4-1: Using ep0 maxpacket: 16 [ 351.869435][ T5912] usb 4-1: config 0 has no interfaces? [ 351.881477][ T5912] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 351.892755][ T5912] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.010940][ T5912] usb 4-1: Product: syz [ 352.015144][ T5912] usb 4-1: Manufacturer: syz [ 352.066696][ T5912] usb 4-1: SerialNumber: syz [ 352.089088][ T5912] usb 4-1: config 0 descriptor?? [ 352.476469][ T5912] usb 4-1: USB disconnect, device number 23 [ 352.646866][ T9005] [U]  [ 357.211579][ T9043] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 357.218146][ T9043] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 357.225959][ T9043] vhci_hcd vhci_hcd.0: Device attached [ 357.241288][ T9043] 9pnet_fd: Insufficient options for proto=fd [ 357.344291][ T9044] vhci_hcd: connection closed [ 357.356566][ T3484] vhci_hcd: stop threads [ 357.401812][ T9039] syz.4.809: attempt to access beyond end of device [ 357.401812][ T9039] loop4: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 357.414821][ T9039] EXT4-fs (loop4): unable to read superblock [ 357.457234][ T3484] vhci_hcd: release socket [ 357.497221][ T3484] vhci_hcd: disconnect device [ 357.611934][ T5889] vhci_hcd: vhci_device speed not set [ 358.751970][ T9062] netlink: 16 bytes leftover after parsing attributes in process `syz.1.812'. [ 359.213349][ T9063] block device autoloading is deprecated and will be removed. [ 359.315961][ T9063] syz.0.811: attempt to access beyond end of device [ 359.315961][ T9063] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 360.786073][ T43] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 361.172377][ T43] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 361.189507][ T43] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 361.217022][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 361.242498][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 361.262634][ T43] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 361.315189][ T43] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 362.811520][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 362.832141][ T43] usb 2-1: Product: syz [ 362.855248][ T43] usb 2-1: Manufacturer: syz [ 363.015835][ T43] usb 2-1: SerialNumber: syz [ 363.031673][ T43] usb 2-1: config 0 descriptor?? [ 363.131282][ T30] audit: type=1400 audit(1751666617.356:492): avc: denied { ioctl } for pid=9106 comm="syz.2.824" path="socket:[18284]" dev="sockfs" ino=18284 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 363.581116][ T43] radio-si470x 2-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 363.601859][ T43] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -5 [ 363.664632][ T43] usb 2-1: USB disconnect, device number 15 [ 364.966995][ T9129] xt_SECMARK: invalid mode: 2 [ 368.151845][ T30] audit: type=1400 audit(1751666622.386:493): avc: denied { write } for pid=9154 comm="syz.0.836" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 368.229233][ T9158] vxcan0: tx drop: invalid da for name 0x0000000000000003 [ 368.246034][ T30] audit: type=1400 audit(1751666622.386:494): avc: denied { open } for pid=9154 comm="syz.0.836" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 368.270322][ C0] vkms_vblank_simulate: vblank timer overrun [ 371.673903][ T9187] [U]  [ 373.377280][ T9198] program syz.1.846 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 374.285944][ T10] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 374.441697][ T10] usb 4-1: device descriptor read/64, error -71 [ 375.355561][ T9192] delete_channel: no stack [ 375.389258][ T10] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 376.636931][ T9220] syz.0.853: attempt to access beyond end of device [ 376.636931][ T9220] loop0: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 376.651253][ T9220] EXT4-fs (loop0): unable to read superblock [ 378.387118][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.393402][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.803253][ T9239] program syz.1.860 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 380.391944][ T9255] netlink: 4 bytes leftover after parsing attributes in process `syz.3.862'. [ 380.573979][ T9259] program syz.1.864 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 381.068678][ T9262] binder: 9258:9262 ioctl c0306201 200000000240 returned -11 [ 381.081018][ T30] audit: type=1400 audit(1751666635.286:495): avc: denied { ioctl } for pid=9258 comm="syz.0.867" path="/dev/binderfs/binder0" dev="binder" ino=16 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 381.216207][ T30] audit: type=1400 audit(1751666635.296:496): avc: denied { map } for pid=9258 comm="syz.0.867" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 381.249661][ T30] audit: type=1400 audit(1751666635.306:497): avc: denied { set_context_mgr } for pid=9258 comm="syz.0.867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 382.948651][ T9287] netlink: 'syz.1.872': attribute type 7 has an invalid length. [ 384.707230][ T9296] netlink: 'syz.4.875': attribute type 1 has an invalid length. [ 384.715017][ T9296] netlink: 144 bytes leftover after parsing attributes in process `syz.4.875'. [ 384.724153][ T9296] netlink: 'syz.4.875': attribute type 1 has an invalid length. [ 384.731880][ T9296] netlink: 'syz.4.875': attribute type 2 has an invalid length. [ 384.739697][ T9296] netlink: 64 bytes leftover after parsing attributes in process `syz.4.875'. [ 384.868403][ T9295] netlink: 12 bytes leftover after parsing attributes in process `syz.4.875'. [ 385.066748][ T30] audit: type=1400 audit(1751666639.276:498): avc: denied { setopt } for pid=9292 comm="syz.4.875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 385.805409][ T9302] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 385.811959][ T9302] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 385.819952][ T9302] vhci_hcd vhci_hcd.0: Device attached [ 385.940442][ T9303] vhci_hcd: connection closed [ 385.940783][ T6310] vhci_hcd: stop threads [ 386.020424][ T9314] program syz.2.879 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 386.250592][ T6310] vhci_hcd: release socket [ 386.264534][ T6310] vhci_hcd: disconnect device [ 386.285811][ T5951] usb 33-1: new high-speed USB device number 5 using vhci_hcd [ 386.921441][ T9320] [U]  [ 387.805785][ T5889] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 387.964593][ T9329] netlink: 16 bytes leftover after parsing attributes in process `syz.2.881'. [ 388.406166][ T5889] usb 4-1: Using ep0 maxpacket: 16 [ 388.502481][ T5889] usb 4-1: config 0 has no interfaces? [ 388.569338][ T5889] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 388.590147][ T5889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.601564][ T5889] usb 4-1: Product: syz [ 388.609028][ T5889] usb 4-1: Manufacturer: syz [ 388.925009][ T5889] usb 4-1: SerialNumber: syz [ 388.979870][ T5889] usb 4-1: config 0 descriptor?? [ 388.989322][ T5889] usb 4-1: can't set config #0, error -71 [ 389.009298][ T5889] usb 4-1: USB disconnect, device number 26 [ 390.417483][ T5844] Bluetooth: hci4: command 0x0406 tx timeout [ 391.031926][ T9367] ieee802154 phy0 wpan0: encryption failed: -22 [ 391.039281][ T30] audit: type=1400 audit(1751666645.256:499): avc: denied { create } for pid=9365 comm="syz.2.893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 391.765834][ T5951] vhci_hcd: vhci_device speed not set [ 392.088442][ T9381] netlink: 16 bytes leftover after parsing attributes in process `syz.1.896'. [ 392.471372][ T9382] program syz.3.898 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 392.844907][ T30] audit: type=1400 audit(1751666647.066:500): avc: denied { create } for pid=9383 comm="syz.2.899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 396.905000][ T9416] netlink: 'syz.3.907': attribute type 1 has an invalid length. [ 396.912845][ T9416] netlink: 144 bytes leftover after parsing attributes in process `syz.3.907'. [ 396.921848][ T9416] netlink: 'syz.3.907': attribute type 1 has an invalid length. [ 396.929584][ T9416] netlink: 'syz.3.907': attribute type 2 has an invalid length. [ 396.937298][ T9416] netlink: 64 bytes leftover after parsing attributes in process `syz.3.907'. [ 396.954691][ T9416] netlink: 12 bytes leftover after parsing attributes in process `syz.3.907'. [ 397.779114][ T9423] vivid-002: disconnect [ 398.627375][ T9419] vivid-002: reconnect [ 398.981231][ T9438] netlink: 'syz.0.912': attribute type 7 has an invalid length. [ 399.013044][ T9438] : entered promiscuous mode [ 399.828753][ T9442] Device name cannot be null; rc = [-22] [ 400.132765][ T9448] netlink: 'syz.0.916': attribute type 1 has an invalid length. [ 400.140528][ T9448] netlink: 144 bytes leftover after parsing attributes in process `syz.0.916'. [ 400.149542][ T9448] netlink: 'syz.0.916': attribute type 1 has an invalid length. [ 400.157361][ T9448] netlink: 'syz.0.916': attribute type 2 has an invalid length. [ 400.165020][ T9448] netlink: 64 bytes leftover after parsing attributes in process `syz.0.916'. [ 400.199785][ T9448] netlink: 12 bytes leftover after parsing attributes in process `syz.0.916'. [ 400.285602][ T9449] syz.0.916: attempt to access beyond end of device [ 400.285602][ T9449] nbd0: rw=0, sector=2, nr_sectors = 1 limit=0 [ 400.298611][ T9449] hfs: can't find a HFS filesystem on dev nbd0 [ 400.499697][ T30] audit: type=1400 audit(1751666654.736:501): avc: denied { lock } for pid=9451 comm="syz.4.917" path="socket:[20716]" dev="sockfs" ino=20716 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 400.556808][ T9435] overlayfs: overlapping lowerdir path [ 402.770036][ T9477] [U]  [ 403.853016][ T9485] netlink: 'syz.3.927': attribute type 1 has an invalid length. [ 403.860827][ T9485] netlink: 144 bytes leftover after parsing attributes in process `syz.3.927'. [ 403.869855][ T9485] netlink: 'syz.3.927': attribute type 1 has an invalid length. [ 403.877544][ T9485] netlink: 'syz.3.927': attribute type 2 has an invalid length. [ 403.885200][ T9485] netlink: 64 bytes leftover after parsing attributes in process `syz.3.927'. [ 403.918522][ T9485] netlink: 12 bytes leftover after parsing attributes in process `syz.3.927'. [ 404.772676][ T9489] [U]  [ 405.744279][ T9493] hub 8-0:1.0: USB hub found [ 405.749734][ T9493] hub 8-0:1.0: 1 port detected [ 407.357923][ T9502] netlink: 'syz.2.929': attribute type 72 has an invalid length. [ 407.366015][ T9502] netlink: 'syz.2.929': attribute type 8 has an invalid length. [ 407.754279][ T9509] netlink: 'syz.1.932': attribute type 7 has an invalid length. [ 408.139144][ T9516] program syz.3.936 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 408.977851][ T30] audit: type=1400 audit(1751666663.216:502): avc: denied { open } for pid=9524 comm="syz.2.939" path="/dev/ptyq9" dev="devtmpfs" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 410.148570][ T30] audit: type=1400 audit(1751666664.386:503): avc: denied { read write } for pid=9536 comm="syz.1.942" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 410.171865][ C1] vkms_vblank_simulate: vblank timer overrun [ 410.341110][ T30] audit: type=1400 audit(1751666664.386:504): avc: denied { open } for pid=9536 comm="syz.1.942" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 410.465895][ T2148] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 410.596599][ T30] audit: type=1400 audit(1751666664.386:505): avc: denied { ioctl } for pid=9536 comm="syz.1.942" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 410.621363][ C1] vkms_vblank_simulate: vblank timer overrun [ 410.649931][ T2148] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 410.661161][ T2148] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 410.672868][ T2148] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 410.684134][ T2148] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 410.694031][ T2148] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 410.719762][ T2148] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 410.737568][ T2148] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 410.785470][ T2148] usb 2-1: Product: syz [ 410.817390][ T2148] usb 2-1: Manufacturer: syz [ 410.943356][ T9548] netlink: 'syz.0.946': attribute type 72 has an invalid length. [ 410.951143][ T9548] netlink: 'syz.0.946': attribute type 8 has an invalid length. [ 411.034332][ T9553] netlink: 5364 bytes leftover after parsing attributes in process `syz.4.947'. [ 411.126717][ T2148] usb 2-1: SerialNumber: syz [ 411.203885][ T2148] usb 2-1: config 0 descriptor?? [ 411.420146][ T2148] radio-si470x 2-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 411.435826][ T2148] radio-si470x 2-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 411.620947][ T2148] radio-si470x 2-1:0.0: software version 0, hardware version 0 [ 411.632174][ T2148] radio-si470x 2-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 411.655781][ T2148] radio-si470x 2-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 411.828929][ T2148] radio-si470x 2-1:0.0: submitting int urb failed (-90) [ 411.890303][ T9568] program syz.0.951 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 413.410725][ T2148] radio-si470x 2-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 413.430826][ T2148] radio-si470x 2-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 413.443945][ T2148] usb 2-1: USB disconnect, device number 16 [ 413.541510][ T9581] netlink: 'syz.3.954': attribute type 1 has an invalid length. [ 413.549234][ T9581] netlink: 144 bytes leftover after parsing attributes in process `syz.3.954'. [ 413.558315][ T9581] netlink: 'syz.3.954': attribute type 1 has an invalid length. [ 413.565987][ T9581] netlink: 'syz.3.954': attribute type 2 has an invalid length. [ 413.573705][ T9581] netlink: 64 bytes leftover after parsing attributes in process `syz.3.954'. [ 413.592501][ T9581] netlink: 12 bytes leftover after parsing attributes in process `syz.3.954'. [ 414.558510][ T9591] ieee802154 phy0 wpan0: encryption failed: -22 [ 415.948856][ T9607] netlink: 5364 bytes leftover after parsing attributes in process `syz.0.959'. [ 417.474508][ T30] audit: type=1400 audit(1751666671.706:506): avc: denied { write } for pid=9613 comm="syz.0.963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 419.311282][ T9635] xt_SECMARK: invalid mode: 2 [ 420.284500][ T9644] input input27: cannot allocate more than FF_MAX_EFFECTS effects [ 420.715890][ T5907] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 421.113433][ T5907] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 421.332376][ T9656] vivid-001: disconnect [ 421.534462][ T5907] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.868231][ T9645] vivid-001: reconnect [ 421.876056][ T5907] usb 5-1: Product: syz [ 421.880291][ T5907] usb 5-1: Manufacturer: syz [ 421.884867][ T5907] usb 5-1: SerialNumber: syz [ 421.987055][ T5907] usb 5-1: config 0 descriptor?? [ 422.302332][ T9662] vxcan0: tx drop: invalid da for name 0x0000000000000003 [ 422.410886][ T5907] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 422.682242][ T9665] ieee802154 phy0 wpan0: encryption failed: -22 [ 424.226413][ T5907] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 424.271077][ T9681] nbd: must specify at least one socket [ 424.386609][ T9682] syz.2.978: attempt to access beyond end of device [ 424.386609][ T9682] loop2: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 424.399886][ T9682] EXT4-fs (loop2): unable to read superblock [ 424.743634][ T5907] usb 5-1: USB disconnect, device number 11 [ 426.218194][ T9700] ieee802154 phy0 wpan0: encryption failed: -22 [ 427.579940][ T9713] vxcan0: tx drop: invalid da for name 0x0000000000000003 [ 427.670994][ T9716] Device name cannot be null; rc = [-22] [ 427.681500][ T9716] overlayfs: overlapping lowerdir path [ 428.679887][ T9727] No control pipe specified [ 428.694621][ T30] audit: type=1400 audit(1751666682.926:507): avc: denied { execute } for pid=9726 comm="syz.1.992" path="/206/cpuset.memory_pressure_enabled" dev="tmpfs" ino=1117 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 428.904654][ T9728] netlink: 5364 bytes leftover after parsing attributes in process `syz.2.991'. [ 429.019775][ T9733] fuse: Unknown parameter 'user_id00000000000000000000' [ 429.753059][ T9733] lo speed is unknown, defaulting to 1000 [ 429.876380][ T9746] program syz.4.997 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 430.937972][ T9757] program syz.4.1000 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 431.894848][ T9762] ieee802154 phy0 wpan0: encryption failed: -22 [ 432.287914][ T9773] netlink: 'syz.4.1003': attribute type 7 has an invalid length. [ 432.322500][ T9773] : entered promiscuous mode [ 434.574200][ T9784] netlink: 5364 bytes leftover after parsing attributes in process `syz.2.1009'. [ 436.637839][ T9800] program syz.3.1013 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 437.429122][ T9811] netlink: 868 bytes leftover after parsing attributes in process `syz.0.1014'. [ 439.459504][ T9826] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.583437][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.597542][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.003741][ T30] audit: type=1400 audit(1751666694.216:508): avc: denied { ioctl } for pid=9830 comm="syz.0.1022" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 440.017055][ T9832] usb usb5: usbfs: process 9832 (syz.0.1022) did not claim interface 0 before use [ 441.564539][ T9841] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 441.679761][ T30] audit: type=1400 audit(1751666695.876:509): avc: denied { bind } for pid=9836 comm="syz.3.1021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 441.786109][ T30] audit: type=1400 audit(1751666695.876:510): avc: denied { name_bind } for pid=9836 comm="syz.3.1021" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 441.886953][ T30] audit: type=1400 audit(1751666695.886:511): avc: denied { node_bind } for pid=9836 comm="syz.3.1021" saddr=ff02::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 441.915811][ T30] audit: type=1400 audit(1751666695.906:512): avc: denied { read } for pid=9836 comm="syz.3.1021" path="socket:[21589]" dev="sockfs" ino=21589 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 442.185143][ T9847] netlink: 'syz.2.1024': attribute type 1 has an invalid length. [ 442.193017][ T9847] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1024'. [ 442.202123][ T9847] netlink: 'syz.2.1024': attribute type 1 has an invalid length. [ 442.209956][ T9847] netlink: 'syz.2.1024': attribute type 2 has an invalid length. [ 442.217737][ T9847] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1024'. [ 442.235955][ T9847] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1024'. [ 443.017969][ T9849] netlink: 5364 bytes leftover after parsing attributes in process `syz.1.1025'. [ 446.486722][ T9867] ieee802154 phy0 wpan0: encryption failed: -22 [ 446.825954][ T9866] ieee802154 phy0 wpan0: encryption failed: -22 [ 447.106857][ T9870] ieee802154 phy0 wpan0: encryption failed: -22 [ 448.833788][ T9884] netlink: 'syz.2.1034': attribute type 7 has an invalid length. [ 448.845157][ T9884] : entered promiscuous mode [ 450.355402][ T9896] hub 8-0:1.0: USB hub found [ 450.360271][ T9896] hub 8-0:1.0: 1 port detected [ 451.967291][ T9905] vxcan0: tx drop: invalid da for name 0x0000000000000003 [ 452.320352][ T9918] netlink: 'syz.1.1043': attribute type 1 has an invalid length. [ 452.328169][ T9918] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1043'. [ 452.337586][ T9918] netlink: 'syz.1.1043': attribute type 1 has an invalid length. [ 452.345336][ T9918] netlink: 'syz.1.1043': attribute type 2 has an invalid length. [ 452.353120][ T9918] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1043'. [ 452.386035][ T9918] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1043'. [ 452.475312][ T9919] syz.1.1043: attempt to access beyond end of device [ 452.475312][ T9919] nbd1: rw=0, sector=2, nr_sectors = 1 limit=0 [ 452.488462][ T9919] hfs: can't find a HFS filesystem on dev nbd1 [ 452.706455][ T9921] Device name cannot be null; rc = [-22] [ 452.758838][ T9921] overlayfs: overlapping lowerdir path [ 453.141853][ T9924] ieee802154 phy0 wpan0: encryption failed: -22 [ 454.174539][ T9932] program syz.4.1047 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 454.206243][ T9935] Device name cannot be null; rc = [-22] [ 454.230729][ T9935] overlayfs: overlapping lowerdir path [ 455.658155][ T9952] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1051'. [ 456.769843][ T9960] syz.1.1053: attempt to access beyond end of device [ 456.769843][ T9960] loop1: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 456.783265][ T9960] EXT4-fs (loop1): unable to read superblock [ 458.335465][ T30] audit: type=1400 audit(1751666711.646:513): avc: denied { create } for pid=9958 comm="syz.4.1055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 458.335515][ T30] audit: type=1400 audit(1751666711.716:514): avc: denied { setopt } for pid=9958 comm="syz.4.1055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 458.769744][ T9965] tty tty3: ldisc open failed (-12), clearing slot 2 [ 459.529783][ T9982] ieee802154 phy0 wpan0: encryption failed: -22 [ 461.141983][T10003] hub 8-0:1.0: USB hub found [ 461.155868][T10003] hub 8-0:1.0: 1 port detected [ 461.896942][T10013] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1065'. [ 462.230927][T10016] usb usb5: usbfs: process 10016 (syz.2.1067) did not claim interface 0 before use [ 462.725239][T10018] fuse: Bad value for 'fd' [ 462.895440][T10018] lo speed is unknown, defaulting to 1000 [ 463.013143][T10026] netlink: 'syz.0.1068': attribute type 7 has an invalid length. [ 465.088183][T10039] vivid-001: disconnect [ 465.903604][T10037] vivid-001: reconnect [ 466.021460][T10043] netlink: 5364 bytes leftover after parsing attributes in process `syz.4.1074'. [ 467.379278][T10053] syz.2.1077: attempt to access beyond end of device [ 467.379278][T10053] loop2: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 467.392652][T10053] EXT4-fs (loop2): unable to read superblock [ 468.250569][T10058] [U]  [ 470.248677][ T30] audit: type=1400 audit(1751666724.486:515): avc: denied { kexec_image_load } for pid=10081 comm="syz.4.1086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 471.191422][T10092] netlink: 5364 bytes leftover after parsing attributes in process `syz.1.1089'. [ 471.350529][ T9334] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 471.485422][T10095] hub 8-0:1.0: USB hub found [ 471.490464][T10095] hub 8-0:1.0: 1 port detected [ 471.636678][ T9334] usb 1-1: Using ep0 maxpacket: 16 [ 471.887433][ T9334] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 471.898403][ T9334] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 472.233262][T10107] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1093'. [ 472.310525][ T9334] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 472.360678][ T9334] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 472.702436][ T9334] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.709175][ T9334] usb 1-1: config 0 descriptor?? [ 474.825413][ T9334] usbhid 1-1:0.0: can't add hid device: -71 [ 474.842971][ T9334] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 474.880175][ T9334] usb 1-1: USB disconnect, device number 13 [ 475.247727][T10139] syz.3.1101: attempt to access beyond end of device [ 475.247727][T10139] loop7: rw=0, sector=0, nr_sectors = 1 limit=0 [ 475.260986][T10139] FAT-fs (loop7): unable to read boot sector [ 475.595825][ T30] audit: type=1400 audit(1751666729.466:516): avc: denied { create } for pid=10127 comm="syz.3.1101" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 475.617268][ T30] audit: type=1400 audit(1751666729.476:517): avc: denied { mounton } for pid=10127 comm="syz.3.1101" path="/217/file0" dev="tmpfs" ino=1171 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 475.924852][ T30] audit: type=1400 audit(1751666730.156:518): avc: denied { unlink } for pid=5830 comm="syz-executor" name="file0" dev="tmpfs" ino=1171 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 476.523422][ T30] audit: type=1400 audit(1751666730.756:519): avc: denied { create } for pid=10143 comm="syz.1.1104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 476.646187][ T30] audit: type=1400 audit(1751666730.756:520): avc: denied { write } for pid=10143 comm="syz.1.1104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 477.743389][T10163] Device name cannot be null; rc = [-22] [ 477.774479][T10163] overlayfs: overlapping lowerdir path [ 478.035779][ T8678] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 478.095775][ T9334] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 478.228851][ T9334] usb 5-1: device descriptor read/64, error -71 [ 478.298771][T10168] netlink: 'syz.1.1109': attribute type 7 has an invalid length. [ 478.733940][ T8678] usb 3-1: Using ep0 maxpacket: 8 [ 478.740554][ T8678] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 478.749980][ T8678] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.770200][ T8678] pvrusb2: Hardware description: Terratec Grabster AV400 [ 478.789717][ T8678] pvrusb2: ********** [ 478.793739][ T8678] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 478.804277][ T8678] pvrusb2: Important functionality might not be entirely working. [ 478.815207][ T8678] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 478.819285][ T9334] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 478.829248][ T8678] pvrusb2: ********** [ 478.989093][ T2335] pvrusb2: Invalid write control endpoint [ 479.010197][ T9334] usb 5-1: device descriptor read/64, error -71 [ 479.415734][ T9334] usb usb5-port1: attempt power cycle [ 479.642577][T10179] ieee802154 phy0 wpan0: encryption failed: -22 [ 479.861341][ T2335] pvrusb2: Invalid write control endpoint [ 479.878909][ T2335] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 479.908833][ T2335] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 479.932561][ T2335] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 479.985910][ T9334] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 480.033023][T10160] delete_channel: no stack [ 480.093137][ T2335] pvrusb2: Device being rendered inoperable [ 480.120016][ T2335] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 480.135851][ T2335] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 480.630866][ T9334] usb 5-1: device not accepting address 14, error -71 [ 480.643835][ T2335] pvrusb2: Attached sub-driver cx25840 [ 480.649564][ T2335] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 480.711337][ T2335] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 481.775318][ T5956] usb 3-1: USB disconnect, device number 22 [ 482.130486][T10199] Device name cannot be null; rc = [-22] [ 482.169628][T10199] overlayfs: overlapping lowerdir path [ 483.765982][ T9334] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 483.926173][ T9334] usb 5-1: Using ep0 maxpacket: 16 [ 483.938663][ T9334] usb 5-1: config 0 has no interfaces? [ 483.947641][ T9334] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 483.957088][ T9334] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.967828][ T9334] usb 5-1: Product: syz [ 483.977583][ T9334] usb 5-1: Manufacturer: syz [ 483.987912][ T9334] usb 5-1: SerialNumber: syz [ 484.000885][ T9334] usb 5-1: config 0 descriptor?? [ 484.135815][ T5951] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 484.468825][ T5896] usb 5-1: USB disconnect, device number 16 [ 484.536859][ T5951] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 484.557811][ T5951] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 484.569745][ T5951] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 484.581150][ T5951] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 484.591463][ T5951] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 484.606376][ T5951] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 484.616061][ T5951] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 484.626821][ T5951] usb 3-1: Product: syz [ 484.631935][ T5951] usb 3-1: Manufacturer: syz [ 484.660607][ T5951] usb 3-1: SerialNumber: syz [ 484.674959][ T5951] usb 3-1: config 0 descriptor?? [ 484.904981][ T5951] radio-si470x 3-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 484.912705][ T5951] radio-si470x 3-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 485.803454][ T5951] radio-si470x 3-1:0.0: software version 0, hardware version 0 [ 485.811156][ T5951] radio-si470x 3-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 485.823574][ T5951] radio-si470x 3-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 485.837186][ T5951] radio-si470x 3-1:0.0: submitting int urb failed (-90) [ 486.430356][T10252] netlink: 'syz.1.1132': attribute type 1 has an invalid length. [ 486.438242][T10252] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1132'. [ 486.447356][T10252] netlink: 'syz.1.1132': attribute type 1 has an invalid length. [ 486.455124][T10252] netlink: 'syz.1.1132': attribute type 2 has an invalid length. [ 486.462922][T10252] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1132'. [ 486.839900][T10253] capability: warning: `syz.3.1133' uses deprecated v2 capabilities in a way that may be insecure [ 486.884751][T10253] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1133'. [ 486.931275][T10253] QAT: Device 7 not found [ 486.954213][ T5951] radio-si470x 3-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 487.123330][ T5951] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -22 [ 487.151415][ T5951] usb 3-1: USB disconnect, device number 23 [ 487.348994][ T30] audit: type=1400 audit(1751666741.576:521): avc: denied { write } for pid=10256 comm="syz.4.1135" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 487.406450][ T30] audit: type=1400 audit(1751666741.586:522): avc: denied { open } for pid=10256 comm="syz.4.1135" path="/222/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 487.541335][T10262] ieee802154 phy0 wpan0: encryption failed: -22 [ 487.940850][T10263] usb usb5: usbfs: process 10263 (syz.3.1138) did not claim interface 0 before use [ 493.424691][T10309] vivid-001: disconnect [ 493.734933][T10315] syz.4.1152: attempt to access beyond end of device [ 493.734933][T10315] loop9: rw=0, sector=0, nr_sectors = 1 limit=0 [ 493.748104][T10315] FAT-fs (loop9): unable to read boot sector [ 494.390364][T10300] vivid-001: reconnect [ 494.908157][T10324] usb usb5: usbfs: process 10324 (syz.2.1155) did not claim interface 0 before use [ 495.637469][T10332] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1158'. [ 496.184678][T10334] block device autoloading is deprecated and will be removed. [ 496.192528][T10334] syz.4.1159: attempt to access beyond end of device [ 496.192528][T10334] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 496.260599][ T30] audit: type=1400 audit(1751666750.486:523): avc: denied { ioctl } for pid=5831 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=3096 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 496.843020][T10339] netlink: 'syz.0.1160': attribute type 7 has an invalid length. [ 496.913497][ T30] audit: type=1400 audit(1751666751.146:524): avc: denied { bind } for pid=10345 comm="syz.3.1162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 497.955793][T10355] Device name cannot be null; rc = [-22] [ 497.972492][T10355] overlayfs: overlapping lowerdir path [ 498.280772][T10359] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1165'. [ 501.245153][T10383] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1171'. [ 501.276609][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.289986][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.070611][T10404] netlink: 'syz.3.1178': attribute type 1 has an invalid length. [ 503.079410][T10404] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1178'. [ 503.089273][T10404] netlink: 'syz.3.1178': attribute type 1 has an invalid length. [ 503.097059][T10404] netlink: 'syz.3.1178': attribute type 2 has an invalid length. [ 503.104810][T10404] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1178'. [ 503.149496][T10404] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1178'. [ 503.233128][T10405] syz.3.1178: attempt to access beyond end of device [ 503.233128][T10405] nbd3: rw=0, sector=2, nr_sectors = 1 limit=0 [ 503.246228][T10405] hfs: can't find a HFS filesystem on dev nbd3 [ 503.506586][T10406] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1177'. [ 504.325541][T10423] [U]  [ 505.115728][T10427] usb usb5: usbfs: process 10427 (syz.2.1183) did not claim interface 0 before use [ 507.418387][T10451] ieee802154 phy0 wpan0: encryption failed: -22 [ 507.817504][T10439] syz.3.1187: attempt to access beyond end of device [ 507.817504][T10439] loop3: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 507.830628][T10439] EXT4-fs (loop3): unable to read superblock [ 509.348113][ T30] audit: type=1400 audit(1751666763.576:525): avc: denied { bind } for pid=10470 comm="syz.3.1195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 509.534687][ T30] audit: type=1400 audit(1751666763.766:526): avc: denied { accept } for pid=10479 comm="syz.0.1196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 512.460312][T10511] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 512.955281][T10520] netlink: 'syz.1.1208': attribute type 1 has an invalid length. [ 512.963144][T10520] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1208'. [ 512.972296][T10520] netlink: 'syz.1.1208': attribute type 1 has an invalid length. [ 512.980091][T10520] netlink: 'syz.1.1208': attribute type 2 has an invalid length. [ 512.987868][T10520] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1208'. [ 513.034664][T10520] syz.1.1208: attempt to access beyond end of device [ 513.034664][T10520] nbd1: rw=0, sector=2, nr_sectors = 1 limit=0 [ 513.047772][T10520] hfs: can't find a HFS filesystem on dev nbd1 [ 513.346514][T10521] program syz.4.1209 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 514.125153][T10525] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1211'. [ 515.820238][T10545] QAT: Device 7 not found [ 516.328918][ T30] audit: type=1400 audit(1751666770.556:527): avc: denied { create } for pid=10547 comm="syz.4.1217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 516.343103][T10551] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1217'. [ 516.472558][ T30] audit: type=1400 audit(1751666770.576:528): avc: denied { bind } for pid=10547 comm="syz.4.1217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 517.305492][ T30] audit: type=1400 audit(1751666770.576:529): avc: denied { name_bind } for pid=10547 comm="syz.4.1217" src=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 517.326125][ C0] vkms_vblank_simulate: vblank timer overrun [ 517.337998][ T30] audit: type=1400 audit(1751666770.576:530): avc: denied { node_bind } for pid=10547 comm="syz.4.1217" saddr=2f23:2f6d:7372:: src=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 517.360599][ C0] vkms_vblank_simulate: vblank timer overrun [ 517.382104][ T30] audit: type=1400 audit(1751666770.576:531): avc: denied { create } for pid=10547 comm="syz.4.1217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 517.676543][T10560] ieee802154 phy0 wpan0: encryption failed: -22 [ 517.960036][ T30] audit: type=1400 audit(1751666770.576:532): avc: denied { connect } for pid=10547 comm="syz.4.1217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 518.592580][T10569] ieee802154 phy0 wpan0: encryption failed: -22 [ 518.891294][T10573] program syz.0.1224 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 519.147718][T10551] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 519.281994][T10551] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 519.311030][T10551] bond0 (unregistering): Released all slaves [ 520.734707][T10590] program syz.4.1229 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 522.208871][T10607] ieee802154 phy0 wpan0: encryption failed: -22 [ 522.579338][T10604] page: refcount:3 mapcount:0 mapping:ffff888148e6b678 index:0x2 pfn:0x72fc6 [ 522.588411][T10604] memcg:ffff88801cae1a00 [ 522.592647][T10604] aops:def_blk_aops ino:fa00000 [ 522.597542][T10604] flags: 0xfff6800000003d(locked|referenced|uptodate|dirty|lru|node=0|zone=1|lastcpupid=0x7ff) [ 522.607915][T10604] raw: 00fff6800000003d ffffea0001cbf1c8 ffffea000148d808 ffff888148e6b678 [ 522.616516][T10604] raw: 0000000000000002 0000000000000000 00000003ffffffff ffff88801cae1a00 [ 522.625099][T10604] page dumped because: VM_BUG_ON_FOLIO(!folio_contains(folio, index)) [ 522.633316][T10604] page_owner tracks the page as allocated [ 522.639926][T10604] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 10604, tgid 10603 (syz.2.1234), ts 522517634535, free_ts 521079685756 [ 522.660792][T10604] post_alloc_hook+0x1c0/0x230 [ 522.665578][T10604] get_page_from_freelist+0x1321/0x3890 [ 522.671132][T10604] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 522.677040][T10604] alloc_pages_mpol+0x1fb/0x550 [ 522.681903][T10604] folio_alloc_noprof+0x20/0x2d0 [ 522.686842][T10604] filemap_alloc_folio_noprof+0x3a1/0x470 [ 522.692581][T10604] page_cache_ra_order+0x4c0/0xd00 [ 522.697704][T10604] filemap_fault+0x1465/0x26c0 [ 522.702475][T10604] __do_fault+0x10d/0x490 [ 522.706807][T10604] __handle_mm_fault+0x3c2a/0x5490 [ 522.711917][T10604] handle_mm_fault+0x589/0xd10 [ 522.716730][T10604] do_user_addr_fault+0x7a6/0x1370 [ 522.721845][T10604] exc_page_fault+0x5c/0xb0 [ 522.726360][T10604] asm_exc_page_fault+0x26/0x30 [ 522.731212][T10604] page last free pid 6600 tgid 6600 stack trace: [ 522.737588][T10604] __free_frozen_pages+0x7fe/0x1180 [ 522.743657][T10604] qlist_free_all+0x4d/0x120 [ 522.748280][T10604] kasan_quarantine_reduce+0x195/0x1e0 [ 522.753742][T10604] __kasan_slab_alloc+0x69/0x90 [ 522.758615][T10604] kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 522.764086][T10604] getname_flags.part.0+0x4c/0x550 [ 522.769217][T10604] getname_flags+0x93/0xf0 [ 522.773631][T10604] do_readlinkat+0xb4/0x3a0 [ 522.778155][T10604] __x64_sys_readlink+0x78/0xc0 [ 522.783008][T10604] do_syscall_64+0xcd/0x4c0 [ 522.787537][T10604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.793487][T10604] ------------[ cut here ]------------ [ 522.798966][T10604] kernel BUG at mm/filemap.c:3442! [ 522.804088][T10604] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 522.810479][T10604] CPU: 0 UID: 0 PID: 10604 Comm: syz.2.1234 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 522.822513][T10604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 522.832543][T10604] RIP: 0010:filemap_fault+0x1847/0x26c0 [ 522.838072][T10604] Code: 00 e9 d2 ec ff ff 48 8b 7c 24 28 e8 63 38 2e 00 e9 79 f3 ff ff e8 89 5c c7 ff 48 c7 c6 20 23 b9 8b 48 89 df e8 0a a0 10 00 90 <0f> 0b e8 72 5c c7 ff 48 c7 c6 20 19 b9 8b 48 89 df e8 f3 9f 10 00 [ 522.857680][T10604] RSP: 0018:ffffc90003cbf5a8 EFLAGS: 00010246 [ 522.863724][T10604] RAX: 0000000000080000 RBX: ffffea0001cbf180 RCX: ffffc9000cce4000 [ 522.871684][T10604] RDX: 0000000000080000 RSI: ffffffff81f4c426 RDI: ffff888027972884 [ 522.879632][T10604] RBP: ffffc90003cbf7d8 R08: 0000000000000001 R09: 0000000000000000 [ 522.887584][T10604] R10: 0000000000000001 R11: 0000000000000001 R12: ffff888148e6b678 [ 522.895530][T10604] R13: 0000000000000001 R14: 0000000000000001 R15: 0000000000000000 [ 522.903494][T10604] FS: 00007f1c37fc56c0(0000) GS:ffff888124717000(0000) knlGS:0000000000000000 [ 522.912427][T10604] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 522.918990][T10604] CR2: 0000200000001df0 CR3: 00000000359d0000 CR4: 00000000003526f0 [ 522.926950][T10604] Call Trace: [ 522.930204][T10604] [ 522.933120][T10604] ? __pfx_filemap_fault+0x10/0x10 [ 522.938214][T10604] __do_fault+0x10d/0x490 [ 522.942518][T10604] __handle_mm_fault+0x3c2a/0x5490 [ 522.947605][T10604] ? __pfx___handle_mm_fault+0x10/0x10 [ 522.953040][T10604] ? __pfx_mt_find+0x10/0x10 [ 522.957612][T10604] ? find_vma+0xbf/0x140 [ 522.961824][T10604] ? __pfx_find_vma+0x10/0x10 [ 522.966472][T10604] handle_mm_fault+0x589/0xd10 [ 522.971210][T10604] ? __pkru_allows_pkey+0x41/0xb0 [ 522.976213][T10604] do_user_addr_fault+0x7a6/0x1370 [ 522.981300][T10604] ? rcu_is_watching+0x12/0xc0 [ 522.986038][T10604] exc_page_fault+0x5c/0xb0 [ 522.990517][T10604] asm_exc_page_fault+0x26/0x30 [ 522.995338][T10604] RIP: 0010:rep_movs_alternative+0xf/0x90 [ 523.001030][T10604] Code: c4 10 c3 cc cc cc cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 fd 10 04 00 66 66 [ 523.020610][T10604] RSP: 0018:ffffc90003cbfa78 EFLAGS: 00050202 [ 523.026648][T10604] RAX: 0000000000000001 RBX: 0000200000001df0 RCX: 0000000000000001 [ 523.034590][T10604] RDX: ffffed100ed83567 RSI: 0000200000001df0 RDI: ffff888076c1ab30 [ 523.042533][T10604] RBP: 0000000000000001 R08: 0000000000000001 R09: ffffed100ed83566 [ 523.050479][T10604] R10: ffff888076c1ab30 R11: 0000000000000001 R12: 0000000000000000 [ 523.058422][T10604] R13: ffff888076c1ab30 R14: dffffc0000000000 R15: 0000200000001df0 [ 523.066371][T10604] _copy_from_user+0x98/0xd0 [ 523.070940][T10604] snd_rawmidi_kernel_write1+0x50a/0x8a0 [ 523.076547][T10604] snd_rawmidi_write+0x26e/0xc10 [ 523.081458][T10604] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 523.086888][T10604] ? __import_iovec+0x1dd/0x650 [ 523.091715][T10604] ? avc_policy_seqno+0x9/0x20 [ 523.096450][T10604] ? selinux_file_permission+0x126/0x660 [ 523.102068][T10604] ? __pfx_default_wake_function+0x10/0x10 [ 523.107848][T10604] ? bpf_lsm_file_permission+0x9/0x10 [ 523.113194][T10604] ? security_file_permission+0x71/0x210 [ 523.118805][T10604] ? rw_verify_area+0xcf/0x680 [ 523.123542][T10604] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 523.128972][T10604] vfs_writev+0x5dc/0xde0 [ 523.133278][T10604] ? __pfx_vfs_writev+0x10/0x10 [ 523.138104][T10604] ? kmem_cache_free+0x2d1/0x4d0 [ 523.143020][T10604] ? __fget_files+0x20e/0x3c0 [ 523.147675][T10604] ? do_writev+0x28c/0x340 [ 523.152069][T10604] do_writev+0x28c/0x340 [ 523.156287][T10604] ? __pfx_do_writev+0x10/0x10 [ 523.161026][T10604] do_syscall_64+0xcd/0x4c0 [ 523.165506][T10604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.171373][T10604] RIP: 0033:0x7f1c3718e929 [ 523.175761][T10604] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 523.195343][T10604] RSP: 002b:00007f1c37fc5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 523.203729][T10604] RAX: ffffffffffffffda RBX: 00007f1c373b5fa0 RCX: 00007f1c3718e929 [ 523.211674][T10604] RDX: 0000000000000002 RSI: 0000200000000840 RDI: 0000000000000005 [ 523.219617][T10604] RBP: 00007f1c37210b39 R08: 0000000000000000 R09: 0000000000000000 [ 523.227559][T10604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 523.235502][T10604] R13: 0000000000000000 R14: 00007f1c373b5fa0 R15: 00007ffd8b31f2d8 [ 523.243448][T10604] [ 523.246441][T10604] Modules linked in: [ 523.250339][ C0] vkms_vblank_simulate: vblank timer overrun [ 523.256929][T10604] ---[ end trace 0000000000000000 ]--- [ 523.262363][T10604] RIP: 0010:filemap_fault+0x1847/0x26c0 [ 523.267926][T10604] Code: 00 e9 d2 ec ff ff 48 8b 7c 24 28 e8 63 38 2e 00 e9 79 f3 ff ff e8 89 5c c7 ff 48 c7 c6 20 23 b9 8b 48 89 df e8 0a a0 10 00 90 <0f> 0b e8 72 5c c7 ff 48 c7 c6 20 19 b9 8b 48 89 df e8 f3 9f 10 00 [ 523.287549][T10604] RSP: 0018:ffffc90003cbf5a8 EFLAGS: 00010246 [ 523.293591][T10604] RAX: 0000000000080000 RBX: ffffea0001cbf180 RCX: ffffc9000cce4000 [ 523.305239][T10604] RDX: 0000000000080000 RSI: ffffffff81f4c426 RDI: ffff888027972884 [ 523.313223][T10604] RBP: ffffc90003cbf7d8 R08: 0000000000000001 R09: 0000000000000000 [ 523.321193][T10604] R10: 0000000000000001 R11: 0000000000000001 R12: ffff888148e6b678 [ 523.329149][T10604] R13: 0000000000000001 R14: 0000000000000001 R15: 0000000000000000 [ 523.337104][T10604] FS: 00007f1c37fc56c0(0000) GS:ffff888124717000(0000) knlGS:0000000000000000 [ 523.346021][T10604] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 523.353285][T10604] CR2: 0000200000001df0 CR3: 00000000359d0000 CR4: 00000000003526f0 [ 523.361254][T10604] Kernel panic - not syncing: Fatal exception [ 523.367484][T10604] Kernel Offset: disabled [ 523.371802][T10604] Rebooting in 86400 seconds..