last executing test programs: 6.189329486s ago: executing program 2 (id=643): socket(0x80000000000000a, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000048000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006c617374000000000400028008000340000001"], 0xe4}}, 0x20050800) 6.079242785s ago: executing program 2 (id=644): syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b000100001000090455070103490200090582030004"], 0x0) futex(&(0x7f0000000140)=0x1, 0x8b, 0x1, &(0x7f0000000180), 0x0, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, &(0x7f0000000080)) socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) socket$igmp6(0xa, 0x3, 0x2) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="500000001114100026bd7000fcdbdf25080003000300000008004f000400000008004f000000000008004b002800000008004b0000000000080003000400000008004a00008000000800010001000000"], 0x50}, 0x1, 0x0, 0x0, 0x40400c5}, 0x4) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xfffffffd, 0x0, 0x1000000, 0x0, 0x40c}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) syz_open_dev$sndmidi(0x0, 0x2, 0x141581) r3 = dup(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x24, 0x2c, 0x933, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x800) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$DRM_IOCTL_GET_MAP(r3, 0xc0286404, &(0x7f0000000140)={&(0x7f0000329000/0x4000)=nil}) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2d6802, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r7, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f000300000008002600"], 0x40}}, 0x0) write$rfkill(r4, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) 5.230853789s ago: executing program 3 (id=649): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) dup3(r1, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/igmp6\x00') preadv(r2, &(0x7f0000002400)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1, 0x39c5, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x14, 0x52, 0x1, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2}) 4.961706681s ago: executing program 3 (id=650): syz_usb_connect(0x3, 0x38, &(0x7f0000000140)=ANY=[@ANYBLOB], &(0x7f0000000680)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x150, 0x6a, 0x5, 0x9, 0x8, 0xd8}, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x1404}}]}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 4.670083556s ago: executing program 4 (id=654): openat$rfkill(0xffffffffffffff9c, 0x0, 0x80040, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, 0x0) fspick(0xffffffffffffff9c, 0x0, 0xf) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000440), 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(0x0, 0x0) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400120}, 0xc, &(0x7f00000000c0)={&(0x7f0000000880)={0x14, 0x0, 0x8, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x40000) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000001180)=ANY=[@ANYBLOB="020200090d0000fffd000000000000000200081c08002000fd00000000000000020001000000000000000500000000a0030006000000000002000000ac1414ff0000000000000000030005000000000002000000000000000000000000000000010014009b71000000"], 0x68}, 0x1, 0x7}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r5, 0x5420, &(0x7f0000000100)=0xcf5) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000dc0)={0x0, 0x3, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r6 = syz_open_pts(r5, 0x121500) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000280)=0x3) 4.486951155s ago: executing program 4 (id=656): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000700)='source', &(0x7f0000000780)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xa6\x1a\x96\xael\x11\xa6\x06\xe3G\xb1\x1d$\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xe5\x01V\xdc\x05#\x13\xe9F\xa0\x1b\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\xae\x9c\xba\x1c\xfa\xbc\xa8\xbf\xff\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x13u\xb0I\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&t&A0\xa7\xef\x9cL\x8e1K', 0x0) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000040)='source', 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 3.485818561s ago: executing program 4 (id=660): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = signalfd(0xffffffffffffffff, &(0x7f0000003540)={[0x7fffffff]}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = epoll_create(0x10000e9) fcntl$addseals(r2, 0x409, 0x6) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000280)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f0000000000)) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f00000000c0)={'nat\x00', 0x2, [{}, {}]}, 0x48) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_CHANNELS(r6, 0xc0045006, &(0x7f0000000040)=0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x4, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000200)=0xb) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000640)=0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x5, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x9d}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x10000000}], {0x95, 0x0, 0x5a5}}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) r7 = socket$inet6(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000005800410f9c00f4f90085b3a85c91fddf080001", 0x17) sendto$inet6(r7, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 3.219464169s ago: executing program 0 (id=661): ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={'\x00', 0x27, 0x2, 0x240000, 0x7, 0x7, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r2, 0x25, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000200)=@o_path={&(0x7f00000001c0)='./cgroup/../file0\x00', r2, 0x4000, r1}, 0x18) r3 = gettid() ioctl$KDSKBENT(r2, 0x4b47, &(0x7f0000000180)={0x43, 0x5, 0x2}) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x22081) syz_open_procfs(r0, &(0x7f0000000140)='net/psched\x00') mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x19a) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000100)='pids.max\x00', 0x2, 0x0) sendfile(r5, r5, 0x0, 0x93) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r5, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r5}, './cgroup/../file0\x00'}) 3.05627122s ago: executing program 4 (id=662): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000000f3ff00000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000c20000000000000000000000900000000000000000000000900000000000000000000000902"], 0x0, 0x96}, 0x28) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x1f, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80) 3.04245549s ago: executing program 2 (id=663): r0 = socket(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="400400001000030400000000000000000000001f779ad83491490966009b00", @ANYRESHEX=r0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES8=r1, @ANYRES16=r1, @ANYRES32], 0x40}, 0x1, 0x0, 0x0, 0x40804}, 0x20008000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00'}) socket$nl_route(0x10, 0x3, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xeffffe0000000001, 0xfa11, 0xffffffff}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, &(0x7f0000000040)=0x54) socket$l2tp6(0xa, 0x2, 0x73) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000100)={0x362, 0x6a, 0x55c9, 0x8000000000000005, 0x100000048d, 0x5, 0x800000000000000d, 0x424, 0x2, 0xffffffffffffffff, 0xf423f, 0xfffffffffffffff9, 0x4, 0x2, 0x1000000081, 0xe5e5, 0xfffffffffffffffe, 0x4, 0x8, 0x9220000000000000, 0x3, 0x0, 0x80000001, 0x8000, 0x1, 0x7}) ioctl$sock_inet6_SIOCDIFADDR(r5, 0x8936, &(0x7f0000000240)={@private0={0xfc, 0x0, '\x00', 0x1}, 0xc}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() r6 = socket$kcm(0x2b, 0x4, 0x0) sendmsg$inet(r6, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) setsockopt$sock_attach_bpf(r6, 0x1, 0xd, &(0x7f0000000080), 0x24) close(r6) r7 = syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0x141101) dup(r7) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='1', 0x1) r8 = userfaultfd(0x80001) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x8a}) 2.943603539s ago: executing program 0 (id=664): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'geneve1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="5800000010000300000000000100000000000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028005000400010000001c001a8018000a80140007"], 0x58}, 0x1, 0x2}, 0x0) 2.942681591s ago: executing program 4 (id=666): recvmmsg(0xffffffffffffffff, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/86, 0x56}], 0x1}, 0x8}], 0x1, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async) process_mrelease(0xffffffffffffffff, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="01000000000000000000540000000e0002006e657464657673696d0000000f0002006e657464657673696d3000000800030000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x8001}, 0x0) (async) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) (async) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), r6) sendmsg$NL802154_CMD_SET_CHANNEL(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f00000000c0)={0x20, r7, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x20}, 0x1, 0x0, 0x0, 0x840}, 0x64000) (async) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00", 0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) (async) close_range(r2, r8, 0x0) (async) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x2}, 0xa0) 2.798940179s ago: executing program 0 (id=668): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$inet6_udp(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket(0xa, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000a00fc00fc0018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2.559594343s ago: executing program 0 (id=670): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000700)='source', &(0x7f0000000780)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xa6\x1a\x96\xael\x11\xa6\x06\xe3G\xb1\x1d$\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xe5\x01V\xdc\x05#\x13\xe9F\xa0\x1b\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\xae\x9c\xba\x1c\xfa\xbc\xa8\xbf\xff\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x13u\xb0I\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&t&A0\xa7\xef\x9cL\x8e1K', 0x0) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000040)='source', 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 2.107512271s ago: executing program 4 (id=673): syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b000100001000090455070103490200090582030004"], 0x0) futex(&(0x7f0000000140)=0x1, 0x8b, 0x1, &(0x7f0000000180), 0x0, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, &(0x7f0000000080)) socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) socket$igmp6(0xa, 0x3, 0x2) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="500000001114100026bd7000fcdbdf25080003000300000008004f000400000008004f000000000008004b002800000008004b0000000000080003000400000008004a00008000000800010001000000"], 0x50}, 0x1, 0x0, 0x0, 0x40400c5}, 0x4) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xfffffffd, 0x0, 0x1000000, 0x0, 0x40c}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) syz_open_dev$sndmidi(0x0, 0x2, 0x141581) r3 = dup(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x24, 0x2c, 0x933, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x800) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$DRM_IOCTL_GET_MAP(r3, 0xc0286404, &(0x7f0000000140)={&(0x7f0000329000/0x4000)=nil}) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2d6802, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r7, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f000300000008002600"], 0x40}}, 0x0) write$rfkill(r4, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) 2.053289591s ago: executing program 2 (id=675): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r1], 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001880)=ANY=[@ANYBLOB="50000000100021047ffffffffedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000004000008000500", @ANYRES32=r4], 0x50}}, 0x2) 1.855221755s ago: executing program 2 (id=676): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) pread64(0xffffffffffffffff, 0x0, 0x0, 0x80000001) mlockall(0x3) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00'}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e22}, 0x6e) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000013c0)={0x0, 0x3, 0x4, {0x5, @pix_mp={0x5, 0x99, 0x34324142, 0x9, 0xf, [{0x16, 0x9}, {0x9, 0x7}, {0x4, 0x9}, {0xffffff00, 0x2}, {0x5, 0x7}, {0x8, 0x6}, {0x5, 0x75d}, {0xb8c7, 0x5}], 0x5, 0x7, 0x6, 0x1, 0x4}}, 0x5}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'bridge_slave_0\x00', &(0x7f0000000340)=@ethtool_rx_ntuple={0x35, {0x12, @udp_ip4_spec={@empty, @multicast1, 0x4e20, 0x4e22, 0x7}, @tcp_ip4_spec={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0x4e24, 0x4e22, 0x48}, 0x15, 0x217, 0x8, 0x8, 0xfffffffffffffffe}}}) socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001aa40)=""/102400, 0x19000) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') sendmsg$sock(r1, &(0x7f0000001480)={0x0, 0x0, 0x0}, 0x0) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x1, {0x3, 0xffffffff, 0x403}}) r2 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNDEL(r2, 0x400442c9, &(0x7f0000000080)={0x8, @random="c005b0f96711"}) 1.854819221s ago: executing program 3 (id=677): syz_usb_connect(0x2, 0x24, 0xfffffffffffffffc, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e27, @empty}, {0x2, 0x0, @remote}, {0x2, 0x4e21, @empty}, 0x107, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x2000000000}) 1.604941713s ago: executing program 0 (id=678): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0x0, 0xa1ffffff}, 0x0) 1.54031322s ago: executing program 0 (id=679): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x34f}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000240)=0xffffffff, 0x0, 0x4) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x50}, 0x4, 0x700000000000000}, 0x0) r4 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r4, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) bpf$MAP_CREATE(0x0, 0x0, 0x50) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f00000014c0)=ANY=[@ANYBLOB="850000007e000000950000000000000024d5788589d8fd21b4de818d1891052dc2abf0664a4645525ee1d99c8ccb"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000100)={0x3, 0x2, 0x1}) r6 = dup(r5) mmap(&(0x7f0000fed000/0x12000)=nil, 0x12000, 0x2, 0x11, r6, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0585609, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}) syz_usb_connect(0x0, 0x51, &(0x7f0000000000)=ANY=[@ANYBLOB="120101024cf1c50863070210845f0102030109023f0001000000000904000005ff87e7000905ee63dd0000000009050300000000000009050cf2010002060209050f000000400000090507c6"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) socket$inet6_sctp(0xa, 0x0, 0x84) timer_create(0x3, 0x0, &(0x7f0000044000)=0x0) timer_settime(r7, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000340)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x400, 0xc, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, [0xfffffffe, 0x0, 0x4, 0xfffffffe, 0x0, 0x80, 0x1]}}) timer_gettime(r7, &(0x7f00000000c0)) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r9 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={0x400, 0x70, 0x28}, 0x18) preadv(r9, &(0x7f0000001440)=[{&(0x7f00000001c0)=""/2, 0x2}, {&(0x7f0000000200)=""/72, 0x48}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/17, 0x11}, {&(0x7f0000001340)=""/65, 0x41}, {&(0x7f00000013c0)=""/9, 0x9}, {&(0x7f0000001400)=""/38, 0x26}], 0x7, 0x6, 0x2) 1.215493939s ago: executing program 3 (id=680): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0x3) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) fsetxattr$security_ima(r0, &(0x7f0000000040), &(0x7f0000000100)=@md5={0x1, "75546171cf60ae36a7158a6748b36bec"}, 0x11, 0x1) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r5, &(0x7f00000013c0)=[{&(0x7f0000000080)='4', 0x1}, {&(0x7f0000000100)="a7", 0xfec7}, {&(0x7f0000000880)="9f3846581b1b5159fa75b369536aed7fc089b18592fd1bd099864f1ed35c7046e78c84f4cf0e59594f6dac655efbe84343ff8c186af752f7691c612987b6c089fc2ac412de8edab1f67d0300a1acf9ef331f2b436ff4322adcde8648bcd1e193eb1cb83b0ff2de12d2", 0xfdb9}, {&(0x7f0000000300)='b', 0x1}], 0x28, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4048aecb, &(0x7f00000000c0)=ANY=[@ANYRES64=r4]) r6 = socket$kcm(0x10, 0x2, 0x4) close(r6) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000780)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00800020004000c000600ffa10364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.084044934s ago: executing program 3 (id=682): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000080)={0x0, 0x13, 0x6, @local}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x14, r1, 0x301, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20008800}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$smc(&(0x7f0000001500), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r6, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000040)={0x30, r7, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x228e660f298b4012}, 0x40000) sendmsg$SMC_PNETID_DEL(r0, 0x0, 0xd0) 947.435465ms ago: executing program 3 (id=683): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8010) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000000c0)="b9da06ce171c2e7cc2a25d589ccd75d0275367048f46e1d1833f0b225d71e6aeeafac6b1195e3a2a07b7", 0x2a) r3 = accept4(r2, 0x0, 0x0, 0x80000) sendmsg$alg(r3, 0x0, 0x0) recvmsg$can_raw(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)=""/103, 0x67}], 0x1}, 0x40010022) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_procfs$pagemap(0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000574000/0x3000)=nil, &(0x7f0000322000/0x3000)=nil, 0x7fffffff, 0x0, 0x18, 0x6, 0x0, 0x2}) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}}}, 0x24}}, 0x0) close(0x3) openat$audio1(0xffffffffffffff9c, 0x0, 0x68000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1000, 0xb20}, 0x48) 580.299073ms ago: executing program 1 (id=685): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1fffffff}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x98}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0xfffffffc}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xa0}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x9, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x5d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 483.48192ms ago: executing program 1 (id=686): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x48, 0x18, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg2\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x40044}, 0x200080f5) 422.666788ms ago: executing program 1 (id=687): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0xb0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) (async) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f0000000140)={{&(0x7f0000765000/0x1000)=nil, 0x1000}}) (async) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x7fffffffffffffff) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)}, 0x20) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r2, 0x6628) (async) r3 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000180)={{0x3, @rose}, [@rose, @remote, @bcast, @netrom, @remote, @default, @default, @bcast]}, &(0x7f0000000200)=0x48, 0x80800) shutdown(r3, 0x0) 315.448511ms ago: executing program 1 (id=688): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) socket$phonet_pipe(0x23, 0x5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000004c00)=""/102392, 0x18ff8) writev(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) r2 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x4}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3, 0x0, 0x0, 0xff01}], 0x1, 0x0) 239.215736ms ago: executing program 2 (id=689): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x181942, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r2}, 0x10) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080), 0x2) ioctl$UDMABUF_CREATE_LIST(r3, 0x40087543, &(0x7f0000000100)={0x1, 0x1, [{0xffffffffffffffff, 0x0, 0x4000, 0xfffffffff0000000}]}) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303031303030322c757365725f69643d91da8538240557e6408a96ba43e765a7ea12886ad29fbb355e301e5242938eea83afc242ab0e0ea2c0b448ae1db3f30b0c021598444f3a18fe8a90ad1982b41ae6068bc9a930590c", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) statx(r0, &(0x7f0000000040)='./file0\x00', 0x100, 0x7ff, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(0xffffffffffffffff, 0x8040942d, &(0x7f0000000180)) read$FUSE(r1, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f0000002300)="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", 0x2000, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0x130, 0x0, 0x1, {0xffffffffffffff80, 0x7, 0x0, '\x00', {0x7ff, 0x7, 0x4, 0x2, r6, 0xffffffffffffffff, 0xc000, '\x00', 0x1, 0x80000000, 0xb4e7, 0x2, {0x3, 0x8}, {0x100000006, 0x10001, 0x1000000}, {0x100000000, 0x7}, {0x9, 0xa80}, 0x8000, 0xb, 0x4, 0x5}}}}) write$FUSE_INIT(r1, &(0x7f0000001200)={0x50, 0x0, r5}, 0x50) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) socket$inet6(0xa, 0x2, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="500000001000ffff2dbd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000063180300280012800900017c00766c616e00000000180002800c0002000400000020000000060001000200000008000500", @ANYRES32=r9, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x14008005}, 0x20008090) socket$nl_generic(0x10, 0x3, 0x10) 92.406081ms ago: executing program 1 (id=690): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020100000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011001f"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz1\x00'}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0xf}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x80}, 0x1, 0x0, 0x300}, 0x40) 0s ago: executing program 1 (id=691): r0 = getpgid(0xffffffffffffffff) timer_create(0x7, &(0x7f0000000000)={0x0, 0xf, 0x0, @tid=r0}, &(0x7f0000000040)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000140), 0x12) sendmsg$inet(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x34044014) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) (async) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) (async) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) (async) setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) write$RDMA_USER_CM_CMD_JOIN_MCAST(r5, &(0x7f0000000400)={0x16, 0x98, 0xfa00, {0x0, 0x4, 0xffffffffffffffff, 0x30, 0x0, @in={0x2, 0x4e20, @loopback}}}, 0xa0) (async) syz_open_dev$sg(&(0x7f0000000100), 0x1000, 0xc0800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) (async) io_uring_setup(0x5053, &(0x7f00000005c0)={0x0, 0xfffffffc, 0x3681, 0x0, 0x23b}) (async) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES32=r5, @ANYRES32=r1], 0x18}}, 0x20008050) (async) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r8 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) (async) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r9, 0x400455c8, 0x1000000000000002) (async) ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000000280)=0xc0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000080)=0x5) kernel console output (not intermixed with test programs): dit: type=1400 audit(1758030181.496:89): avc: denied { mounton } for pid=5856 comm="syz-executor" path="/root/syzkaller.JD0uuz/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 76.356384][ T30] audit: type=1400 audit(1758030181.496:90): avc: denied { mount } for pid=5856 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 76.396834][ T5856] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 76.398991][ T30] audit: type=1400 audit(1758030181.496:91): avc: denied { mounton } for pid=5856 comm="syz-executor" path="/root/syzkaller.JD0uuz/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 76.415541][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.448661][ T30] audit: type=1400 audit(1758030181.506:92): avc: denied { mounton } for pid=5856 comm="syz-executor" path="/root/syzkaller.JD0uuz/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7427 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 76.451547][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.485126][ T30] audit: type=1400 audit(1758030181.506:93): avc: denied { unmount } for pid=5856 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 76.506987][ T30] audit: type=1400 audit(1758030181.536:94): avc: denied { mounton } for pid=5856 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 76.531024][ T30] audit: type=1400 audit(1758030181.536:95): avc: denied { mount } for pid=5856 comm="syz-executor" name="/" dev="gadgetfs" ino=7428 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 76.572189][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.604828][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.609098][ T5863] veth0_macvtap: entered promiscuous mode [ 76.613386][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.648355][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.799791][ T5863] veth1_macvtap: entered promiscuous mode [ 76.850979][ T1152] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.859858][ T1152] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.098937][ T5168] Bluetooth: hci2: command tx timeout [ 77.105700][ T5871] Bluetooth: hci4: command tx timeout [ 77.112811][ T5854] Bluetooth: hci0: command tx timeout [ 77.160490][ T5871] Bluetooth: hci1: command tx timeout [ 77.166749][ T5854] Bluetooth: hci3: command tx timeout [ 77.302095][ T5970] netlink: 'syz.1.2': attribute type 9 has an invalid length. [ 77.314899][ T1152] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.338975][ T1152] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.394151][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.417844][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.434142][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.451634][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.553029][ T1152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.563330][ T49] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.574079][ T1152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.590013][ T49] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.726579][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 77.732459][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 77.774259][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.784029][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.036548][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 78.038931][ T49] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.079887][ T5989] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6'. [ 78.120530][ T49] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.232668][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.304015][ T5995] netlink: 256 bytes leftover after parsing attributes in process `syz.1.8'. [ 78.314808][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.347210][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 78.355595][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 78.364861][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 78.683275][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.725988][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.855266][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.875852][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.180154][ T5854] Bluetooth: hci0: command tx timeout [ 79.185830][ T5854] Bluetooth: hci4: command tx timeout [ 79.193425][ T5854] Bluetooth: hci2: command tx timeout [ 79.519154][ T5871] Bluetooth: hci3: command tx timeout [ 79.524678][ T5871] Bluetooth: hci1: command tx timeout [ 80.056594][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 80.064946][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 80.074733][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 80.083336][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 86.684202][ T48] cfg80211: failed to load regulatory.db [ 90.098758][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 90.098774][ T30] audit: type=1400 audit(1758030195.336:128): avc: denied { read write } for pid=6011 comm="syz.0.9" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 90.175128][ T30] audit: type=1400 audit(1758030195.366:129): avc: denied { open } for pid=6011 comm="syz.0.9" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 90.219306][ T30] audit: type=1400 audit(1758030195.366:130): avc: denied { ioctl } for pid=6011 comm="syz.0.9" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 90.247677][ T30] audit: type=1400 audit(1758030195.436:131): avc: denied { create } for pid=6018 comm="syz.3.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 90.272248][ T30] audit: type=1400 audit(1758030195.436:132): avc: denied { bind } for pid=6018 comm="syz.3.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 90.309172][ T30] audit: type=1400 audit(1758030195.436:133): avc: denied { setopt } for pid=6018 comm="syz.3.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 90.341686][ T6019] netlink: 'syz.3.12': attribute type 3 has an invalid length. [ 90.388355][ T30] audit: type=1400 audit(1758030195.626:134): avc: denied { accept } for pid=6018 comm="syz.3.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 90.416667][ T48] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 90.540193][ T6030] netlink: 'syz.4.13': attribute type 9 has an invalid length. [ 90.709100][ T48] usb 1-1: Using ep0 maxpacket: 8 [ 90.835765][ T30] audit: type=1400 audit(1758030195.646:135): avc: denied { write } for pid=6018 comm="syz.3.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 90.840726][ T6033] comedi comedi4: bad chanlist[0]=0x00200004 chan=4 range length=2 [ 90.868656][ T30] audit: type=1400 audit(1758030195.646:136): avc: denied { read } for pid=6018 comm="syz.3.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 90.902781][ T48] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 90.914451][ T48] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 90.928357][ T48] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 90.939651][ T48] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.956205][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 90.966824][ T30] audit: type=1400 audit(1758030196.206:137): avc: denied { read } for pid=6034 comm="syz.1.15" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 91.029954][ T48] hub 1-1:1.0: bad descriptor, ignoring hub [ 91.035966][ T48] hub 1-1:1.0: probe with driver hub failed with error -5 [ 91.160922][ T6037] netlink: 'syz.1.15': attribute type 10 has an invalid length. [ 91.186614][ T10] usb 3-1: config 7 has an invalid interface number: 44 but max is 2 [ 91.211190][ T10] usb 3-1: config 7 has an invalid interface number: 82 but max is 2 [ 91.238058][ T5854] Bluetooth: hci0: Malformed LE Event: 0x0d [ 91.280519][ T10] usb 3-1: config 7 has an invalid interface number: 244 but max is 2 [ 91.345538][ T10] usb 3-1: config 7 has an invalid interface number: 187 but max is 2 [ 91.356483][ T912] usb 1-1: USB disconnect, device number 2 [ 91.387929][ T10] usb 3-1: config 7 has 4 interfaces, different from the descriptor's value: 3 [ 91.437775][ T10] usb 3-1: config 7 has no interface number 0 [ 91.455662][ T10] usb 3-1: config 7 has no interface number 1 [ 91.469079][ T10] usb 3-1: config 7 has no interface number 2 [ 91.485547][ T10] usb 3-1: config 7 has no interface number 3 [ 91.504474][ T10] usb 3-1: config 7 interface 44 altsetting 16 has an invalid descriptor for endpoint zero, skipping [ 91.531615][ T10] usb 3-1: config 7 interface 44 altsetting 16 has an invalid descriptor for endpoint zero, skipping [ 91.568817][ T10] usb 3-1: config 7 interface 44 altsetting 16 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 91.718111][ T10] usb 3-1: config 7 interface 44 altsetting 16 endpoint 0x4 has an invalid bInterval 67, changing to 10 [ 91.730301][ T10] usb 3-1: config 7 interface 44 altsetting 16 has a duplicate endpoint with address 0x4, skipping [ 92.184556][ T6052] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 92.599958][ T10] usb 3-1: config 7 interface 44 altsetting 16 has a duplicate endpoint with address 0x2, skipping [ 92.660934][ T10] usb 3-1: config 7 interface 82 altsetting 90 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 92.744491][ T10] usb 3-1: config 7 interface 82 altsetting 90 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 92.800992][ T6055] sp0: Synchronizing with TNC [ 92.860698][ T10] usb 3-1: config 7 interface 82 altsetting 90 endpoint 0xB has an invalid bInterval 220, changing to 11 [ 93.158941][ T10] usb 3-1: config 7 interface 82 altsetting 90 has a duplicate endpoint with address 0x1, skipping [ 93.409973][ T10] usb 3-1: config 7 interface 82 altsetting 90 has an invalid descriptor for endpoint zero, skipping [ 93.492224][ T10] usb 3-1: config 7 interface 82 altsetting 90 has an endpoint descriptor with address 0x91, changing to 0x81 [ 93.529680][ T6071] Driver unsupported XDP return value 0 on prog (id 7) dev N/A, expect packet loss! [ 93.536186][ T10] usb 3-1: config 7 interface 82 altsetting 90 has a duplicate endpoint with address 0x81, skipping [ 93.751233][ T10] usb 3-1: config 7 interface 244 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 94.209891][ T10] usb 3-1: config 7 interface 244 altsetting 0 has a duplicate endpoint with address 0x9, skipping [ 94.364056][ T10] usb 3-1: config 7 interface 244 altsetting 0 has a duplicate endpoint with address 0xA, skipping [ 94.462001][ T6083] netlink: 'syz.0.27': attribute type 9 has an invalid length. [ 94.892954][ T10] usb 3-1: config 7 interface 244 altsetting 0 has a duplicate endpoint with address 0xA, skipping [ 95.017561][ T10] usb 3-1: config 7 interface 244 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 95.066695][ T10] usb 3-1: config 7 interface 244 altsetting 0 has 6 endpoint descriptors, different from the interface descriptor's value: 9 [ 95.100679][ T10] usb 3-1: too many endpoints for config 7 interface 187 altsetting 199: 185, using maximum allowed: 30 [ 95.122140][ T10] usb 3-1: config 7 interface 187 altsetting 199 endpoint 0xD has an invalid bInterval 127, changing to 7 [ 95.664505][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 95.664523][ T30] audit: type=1400 audit(1758030200.456:162): avc: denied { create } for pid=6086 comm="syz.3.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 95.676704][ T6099] netlink: 48 bytes leftover after parsing attributes in process `syz.0.32'. [ 95.706291][ T10] usb 3-1: config 7 interface 187 altsetting 199 bulk endpoint 0x6 has invalid maxpacket 64 [ 96.111546][ T10] usb 3-1: config 7 interface 187 altsetting 199 has a duplicate endpoint with address 0xA, skipping [ 96.138517][ T10] usb 3-1: config 7 interface 187 altsetting 199 has 3 endpoint descriptors, different from the interface descriptor's value: 185 [ 96.241876][ T10] usb 3-1: config 7 interface 44 has no altsetting 0 [ 96.255172][ T10] usb 3-1: config 7 interface 82 has no altsetting 0 [ 96.258475][ T30] audit: type=1400 audit(1758030201.486:163): avc: denied { firmware_load } for pid=6093 comm="syz.0.32" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 96.328569][ T10] usb 3-1: config 7 interface 187 has no altsetting 0 [ 96.368567][ T10] usb 3-1: string descriptor 0 read error: -71 [ 96.374893][ T10] usb 3-1: New USB device found, idVendor=14aa, idProduct=0201, bcdDevice=e5.03 [ 96.427826][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.523275][ T6099] syz.0.32 (6099) used greatest stack depth: 17080 bytes left [ 96.560389][ T10] usb 3-1: can't set config #7, error -71 [ 96.698486][ T30] audit: type=1400 audit(1758030201.916:164): avc: denied { create } for pid=6111 comm="syz.0.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 96.732217][ T10] usb 3-1: USB disconnect, device number 2 [ 96.848160][ T30] audit: type=1400 audit(1758030201.926:165): avc: denied { create } for pid=6111 comm="syz.0.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 96.868440][ T30] audit: type=1400 audit(1758030201.926:166): avc: denied { write } for pid=6111 comm="syz.0.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 96.888415][ T30] audit: type=1400 audit(1758030201.926:167): avc: denied { nlmsg_write } for pid=6111 comm="syz.0.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 97.026328][ T30] audit: type=1400 audit(1758030201.956:168): avc: denied { connect } for pid=6111 comm="syz.0.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 98.199858][ T6127] ubi31: attaching mtd0 [ 98.216160][ T6127] ubi31: scanning is finished [ 98.220942][ T6127] ubi31: empty MTD device detected [ 98.239220][ T30] audit: type=1400 audit(1758030203.376:169): avc: denied { append } for pid=6122 comm="syz.4.40" name="ubi_ctrl" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 98.547013][ T30] audit: type=1400 audit(1758030203.406:170): avc: denied { create } for pid=6122 comm="syz.4.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 98.575117][ T30] audit: type=1400 audit(1758030203.416:171): avc: denied { connect } for pid=6122 comm="syz.4.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 98.607506][ T6127] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 98.615227][ T6127] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 98.622631][ T6127] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 98.629698][ T6127] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 98.637280][ T6127] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 98.644139][ T6127] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 98.652279][ T6127] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 993218731 [ 98.663017][ T6127] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 98.673879][ T6131] ubi31: background thread "ubi_bgt31d" started, PID 6131 [ 99.303524][ T6143] netlink: 8 bytes leftover after parsing attributes in process `syz.3.45'. [ 99.312469][ T6143] netlink: 4 bytes leftover after parsing attributes in process `syz.3.45'. [ 99.321254][ T6143] netlink: 'syz.3.45': attribute type 12 has an invalid length. [ 99.329055][ T6143] netlink: 'syz.3.45': attribute type 11 has an invalid length. [ 99.341118][ T6145] Bluetooth: MGMT ver 1.23 [ 100.698444][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 100.698459][ T30] audit: type=1400 audit(1758030205.936:185): avc: denied { create } for pid=6157 comm="syz.1.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 100.748688][ T6161] netlink: 8 bytes leftover after parsing attributes in process `syz.0.48'. [ 100.856676][ T6164] hugetlbfs: syz.0.48 (6164): Using mlock ulimits for SHM_HUGETLB is obsolete [ 100.935388][ T30] audit: type=1400 audit(1758030205.936:186): avc: denied { connect } for pid=6157 comm="syz.1.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 101.201749][ T30] audit: type=1400 audit(1758030205.996:187): avc: denied { write } for pid=6160 comm="syz.0.48" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 101.278577][ T30] audit: type=1400 audit(1758030206.336:188): avc: denied { read } for pid=6160 comm="syz.0.48" path="socket:[9282]" dev="sockfs" ino=9282 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 101.301819][ C0] vkms_vblank_simulate: vblank timer overrun [ 101.461796][ T30] audit: type=1400 audit(1758030206.416:189): avc: denied { read } for pid=6139 comm="syz.2.44" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 101.485260][ C0] vkms_vblank_simulate: vblank timer overrun [ 101.496186][ T24] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 101.582659][ T30] audit: type=1400 audit(1758030206.416:190): avc: denied { open } for pid=6139 comm="syz.2.44" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 101.607826][ T30] audit: type=1400 audit(1758030206.416:191): avc: denied { ioctl } for pid=6139 comm="syz.2.44" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 ioctlcmd=0x9427 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 101.633191][ C0] vkms_vblank_simulate: vblank timer overrun [ 101.644718][ T30] audit: type=1400 audit(1758030206.416:192): avc: denied { mounton } for pid=6139 comm="syz.2.44" path="/proc/24/task" dev="proc" ino=10330 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 101.656211][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 101.668011][ C0] vkms_vblank_simulate: vblank timer overrun [ 102.027602][ T24] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 102.037461][ T24] usb 4-1: config 179 has no interface number 0 [ 102.062122][ T24] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 102.096359][ T24] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 102.146309][ T24] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 102.172185][ T24] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 102.204379][ T24] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 102.241304][ T24] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 102.254284][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.328065][ T6166] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 102.417126][ T912] IPVS: starting estimator thread 0... [ 102.521887][ T30] audit: type=1400 audit(1758030207.756:193): avc: denied { create } for pid=6180 comm="syz.2.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 102.549282][ T6179] IPVS: using max 40 ests per chain, 96000 per kthread [ 102.595546][ T6184] Zero length message leads to an empty skb [ 102.921533][ T30] audit: type=1400 audit(1758030207.786:194): avc: denied { write } for pid=6180 comm="syz.2.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 103.823200][ T24] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input5 [ 104.841031][ T6206] netlink: 28 bytes leftover after parsing attributes in process `syz.4.61'. [ 104.967994][ T6207] netlink: 'syz.0.62': attribute type 9 has an invalid length. [ 105.324884][ T24] usb 4-1: USB disconnect, device number 2 [ 105.330829][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 105.330890][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 105.766158][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 105.766175][ T30] audit: type=1400 audit(1758030210.766:202): avc: denied { read } for pid=6201 comm="syz.4.61" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 105.848526][ T6204] netlink: 24 bytes leftover after parsing attributes in process `syz.1.58'. [ 106.032609][ T30] audit: type=1400 audit(1758030210.766:203): avc: denied { open } for pid=6201 comm="syz.4.61" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 106.658231][ T30] audit: type=1400 audit(1758030211.416:204): avc: denied { read } for pid=6212 comm="syz.2.63" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 106.682153][ T30] audit: type=1400 audit(1758030211.416:205): avc: denied { open } for pid=6212 comm="syz.2.63" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 106.835084][ T6228] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 106.912532][ T976] IPVS: starting estimator thread 0... [ 106.916289][ T30] audit: type=1400 audit(1758030212.146:206): avc: denied { open } for pid=6227 comm="syz.3.68" path="/dev/ptyqa" dev="devtmpfs" ino=129 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 107.046200][ T6231] IPVS: using max 63 ests per chain, 151200 per kthread [ 107.148239][ T30] audit: type=1400 audit(1758030212.196:207): avc: denied { read append } for pid=6227 comm="syz.3.68" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 107.203745][ T30] audit: type=1400 audit(1758030212.196:208): avc: denied { open } for pid=6227 comm="syz.3.68" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 107.363526][ T30] audit: type=1400 audit(1758030212.206:209): avc: denied { create } for pid=6227 comm="syz.3.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 107.363908][ T6244] netlink: 'syz.2.70': attribute type 6 has an invalid length. [ 107.423782][ T30] audit: type=1400 audit(1758030212.206:210): avc: denied { connect } for pid=6227 comm="syz.3.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 107.446923][ T30] audit: type=1400 audit(1758030212.256:211): avc: denied { read } for pid=6227 comm="syz.3.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 107.470560][ T6244] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.70'. [ 107.809335][ T976] libceph: connect (1)[c::]:6789 error -101 [ 107.819267][ T976] libceph: mon0 (1)[c::]:6789 connect error [ 107.841571][ T48] libceph: connect (1)[c::]:6789 error -101 [ 107.850718][ T48] libceph: mon0 (1)[c::]:6789 connect error [ 108.076538][ T6267] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 108.161317][ T48] libceph: connect (1)[c::]:6789 error -101 [ 108.168145][ T48] libceph: mon0 (1)[c::]:6789 connect error [ 108.795121][ T6256] ceph: No mds server is up or the cluster is laggy [ 108.803197][ T48] libceph: connect (1)[c::]:6789 error -101 [ 108.813589][ T48] libceph: mon0 (1)[c::]:6789 connect error [ 109.215309][ T6261] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 109.945415][ T6280] binder: 6279:6280 ioctl c0306201 200000000080 returned -14 [ 110.288687][ T48] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 110.352334][ T6287] netlink: 20 bytes leftover after parsing attributes in process `syz.2.82'. [ 110.531530][ T6293] netlink: 4 bytes leftover after parsing attributes in process `syz.1.83'. [ 110.553561][ T48] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 110.564836][ T6293] vxlan0: entered promiscuous mode [ 110.570474][ T48] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 110.585072][ T48] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.591820][ T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.605022][ T48] usb 4-1: config 0 descriptor?? [ 110.620183][ T48] pwc: Askey VC010 type 2 USB webcam detected. [ 110.625547][ T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.649731][ T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.660901][ T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.449809][ T48] pwc: recv_control_msg error -71 req 02 val 2700 [ 111.482259][ T48] pwc: recv_control_msg error -71 req 02 val 2c00 [ 111.520217][ T6304] FAULT_INJECTION: forcing a failure. [ 111.520217][ T6304] name failslab, interval 1, probability 0, space 0, times 1 [ 111.561865][ T6304] CPU: 0 UID: 0 PID: 6304 Comm: syz.0.88 Not tainted syzkaller #0 PREEMPT(full) [ 111.561893][ T6304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 111.561909][ T6304] Call Trace: [ 111.561916][ T6304] [ 111.561924][ T6304] dump_stack_lvl+0x16c/0x1f0 [ 111.561956][ T6304] should_fail_ex+0x512/0x640 [ 111.561980][ T6304] ? __kmalloc_noprof+0xbf/0x510 [ 111.562002][ T6304] ? l2tp_session_create+0x3a/0xda0 [ 111.562024][ T6304] should_failslab+0xc2/0x120 [ 111.562047][ T6304] __kmalloc_noprof+0xd2/0x510 [ 111.562064][ T6304] ? __pfx_l2tp_v3_session_get+0x10/0x10 [ 111.562087][ T6304] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 111.562115][ T6304] l2tp_session_create+0x3a/0xda0 [ 111.562142][ T6304] pppol2tp_connect+0x1017/0x1ce0 [ 111.562174][ T6304] ? __pfx_pppol2tp_connect+0x10/0x10 [ 111.562200][ T6304] ? __print_lock_name+0xc1/0xe0 [ 111.562224][ T6304] ? selinux_netlbl_socket_connect+0x30/0x40 [ 111.562251][ T6304] ? rcu_is_watching+0x12/0xc0 [ 111.562274][ T6304] ? __local_bh_enable_ip+0xa4/0x120 [ 111.562301][ T6304] ? selinux_netlbl_socket_connect+0x30/0x40 [ 111.562327][ T6304] ? selinux_socket_connect+0x6b/0x80 [ 111.562355][ T6304] ? __pfx_pppol2tp_connect+0x10/0x10 [ 111.562380][ T6304] __sys_connect_file+0x13e/0x1a0 [ 111.562403][ T6304] __sys_connect+0x13b/0x160 [ 111.562422][ T6304] ? __pfx___sys_connect+0x10/0x10 [ 111.562453][ T6304] ? __pfx_ksys_write+0x10/0x10 [ 111.562479][ T6304] __x64_sys_connect+0x72/0xb0 [ 111.562498][ T6304] ? lockdep_hardirqs_on+0x7c/0x110 [ 111.562521][ T6304] do_syscall_64+0xcd/0x4e0 [ 111.562548][ T6304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.562577][ T6304] RIP: 0033:0x7fc77658eba9 [ 111.562593][ T6304] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.562614][ T6304] RSP: 002b:00007fc77746f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 111.562633][ T6304] RAX: ffffffffffffffda RBX: 00007fc7767d5fa0 RCX: 00007fc77658eba9 [ 111.562646][ T6304] RDX: 000000000000003a RSI: 0000200000000080 RDI: 0000000000000004 [ 111.562657][ T6304] RBP: 00007fc77746f090 R08: 0000000000000000 R09: 0000000000000000 [ 111.562669][ T6304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.562680][ T6304] R13: 00007fc7767d6038 R14: 00007fc7767d5fa0 R15: 00007ffdbbc32b28 [ 111.562706][ T6304] [ 111.856517][ T48] pwc: recv_control_msg error -71 req 04 val 1000 [ 111.886187][ T48] pwc: recv_control_msg error -71 req 04 val 1300 [ 111.977693][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 111.977704][ T30] audit: type=1400 audit(1758030217.206:236): avc: denied { read } for pid=6314 comm="syz.1.92" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 112.010100][ T30] audit: type=1400 audit(1758030217.206:237): avc: denied { open } for pid=6314 comm="syz.1.92" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 112.036937][ T30] audit: type=1400 audit(1758030217.206:238): avc: denied { read } for pid=6314 comm="syz.1.92" name="event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 112.064189][ T30] audit: type=1400 audit(1758030217.206:239): avc: denied { open } for pid=6314 comm="syz.1.92" path="/dev/input/event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 112.099037][ T30] audit: type=1400 audit(1758030217.206:240): avc: denied { ioctl } for pid=6314 comm="syz.1.92" path="/dev/input/event2" dev="devtmpfs" ino=922 ioctlcmd=0x457f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 112.126912][ T48] pwc: recv_control_msg error -71 req 04 val 1400 [ 112.152438][ T48] pwc: recv_control_msg error -71 req 02 val 2000 [ 112.159864][ T48] pwc: recv_control_msg error -71 req 02 val 2100 [ 112.169842][ T48] pwc: recv_control_msg error -71 req 04 val 1500 [ 112.177600][ T48] pwc: recv_control_msg error -71 req 02 val 2500 [ 112.185595][ T48] pwc: recv_control_msg error -71 req 02 val 2400 [ 112.193346][ T48] pwc: recv_control_msg error -71 req 02 val 2600 [ 112.200998][ T48] pwc: recv_control_msg error -71 req 02 val 2900 [ 112.208824][ T48] pwc: recv_control_msg error -71 req 02 val 2800 [ 112.263492][ T48] pwc: recv_control_msg error -71 req 04 val 1100 [ 112.270959][ T30] audit: type=1400 audit(1758030217.206:241): avc: denied { ioctl } for pid=6314 comm="syz.1.92" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x5335 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 112.366889][ T48] pwc: recv_control_msg error -71 req 04 val 1200 [ 112.385555][ T48] pwc: Registered as video103. [ 112.493653][ T48] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input6 [ 112.720214][ T24] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 112.750459][ T48] usb 4-1: USB disconnect, device number 3 [ 112.962043][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 112.991004][ T30] audit: type=1400 audit(1758030218.216:242): avc: denied { ioctl } for pid=6336 comm="syz.1.96" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf60 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 113.056651][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 113.273472][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 113.397102][ T30] audit: type=1400 audit(1758030218.226:243): avc: denied { bind } for pid=6336 comm="syz.1.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 113.426215][ T30] audit: type=1400 audit(1758030218.226:244): avc: denied { setopt } for pid=6336 comm="syz.1.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 113.458331][ T24] usb 3-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 113.475304][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.508638][ T24] usb 3-1: Product: syz [ 113.522997][ T24] usb 3-1: Manufacturer: syz [ 113.556524][ T24] usb 3-1: SerialNumber: syz [ 113.593917][ T24] usb 3-1: config 0 descriptor?? [ 113.615873][ T24] gspca_main: STV06xx-2.14.0 probing 046d:08f0 [ 113.632049][ T24] gspca_stv06xx: st6422 sensor detected [ 113.750863][ T30] audit: type=1400 audit(1758030218.986:245): avc: denied { create } for pid=6343 comm="syz.1.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 114.340548][ T6357] netlink: 'syz.3.103': attribute type 10 has an invalid length. [ 114.349365][ T6357] bridge0: port 3(netdevsim0) entered blocking state [ 114.385247][ T6357] bridge0: port 3(netdevsim0) entered disabled state [ 114.433280][ T6357] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 114.461441][ T6357] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 114.470368][ T6359] netlink: 165 bytes leftover after parsing attributes in process `syz.1.102'. [ 114.488755][ T6357] bridge0: port 3(netdevsim0) entered blocking state [ 114.495611][ T6357] bridge0: port 3(netdevsim0) entered forwarding state [ 114.566254][ T5975] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 114.651528][ T6361] netlink: 'syz.3.105': attribute type 6 has an invalid length. [ 114.660463][ T6361] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.105'. [ 114.726947][ T5975] usb 5-1: Using ep0 maxpacket: 32 [ 114.830122][ T5975] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.915354][ T5975] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.928606][ T5975] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 114.939258][ T5975] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.248033][ T5975] usb 5-1: config 0 descriptor?? [ 115.375849][ T5975] hub 5-1:0.0: USB hub found [ 115.561353][ T5975] hub 5-1:0.0: 1 port detected [ 115.937184][ T6380] netlink: 4 bytes leftover after parsing attributes in process `syz.0.108'. [ 116.003698][ T24] STV06xx 3-1:0.0: probe with driver STV06xx failed with error -71 [ 116.050695][ T24] usb 3-1: USB disconnect, device number 3 [ 116.968236][ T5975] hub 5-1:0.0: hub_hub_status failed (err = -32) [ 116.975490][ T5975] hub 5-1:0.0: config failed, can't get hub status (err -32) [ 116.999074][ T5975] usbhid 5-1:0.0: can't add hid device: -32 [ 117.005147][ T6378] netlink: 4 bytes leftover after parsing attributes in process `syz.1.109'. [ 117.019686][ T5975] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 117.419878][ T10] usb 5-1: USB disconnect, device number 2 [ 117.620625][ T6389] netlink: 'syz.3.111': attribute type 2 has an invalid length. [ 117.628565][ T6389] netlink: 'syz.3.111': attribute type 11 has an invalid length. [ 117.636452][ T6389] netlink: 132 bytes leftover after parsing attributes in process `syz.3.111'. [ 117.814239][ T6396] fuse: Bad value for 'user_id' [ 117.829737][ T6378] bridge1: entered promiscuous mode [ 117.845135][ T6396] fuse: Bad value for 'user_id' [ 117.872075][ T6396] netlink: 8 bytes leftover after parsing attributes in process `syz.2.112'. [ 117.880440][ T6378] bridge1: entered allmulticast mode [ 117.903563][ T6396] netlink: 24 bytes leftover after parsing attributes in process `syz.2.112'. [ 118.046496][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 118.046511][ T30] audit: type=1400 audit(1758030223.286:288): avc: denied { watch watch_reads } for pid=6399 comm="syz.3.114" path="/23" dev="tmpfs" ino=133 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 118.240597][ T6400] netlink: 'syz.3.114': attribute type 3 has an invalid length. [ 118.464478][ T30] audit: type=1400 audit(1758030223.696:289): avc: denied { sys_module } for pid=6402 comm="syz.4.115" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 118.640506][ T10] libceph: connect (1)[c::]:6789 error -101 [ 118.735714][ T6417] netlink: 'syz.4.115': attribute type 9 has an invalid length. [ 119.093139][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 119.215063][ T6405] ceph: No mds server is up or the cluster is laggy [ 119.613498][ T6429] binder: 6425:6429 ioctl c0306201 200000000080 returned -14 [ 119.622754][ T6427] trusted_key: encrypted_key: insufficient parameters specified [ 119.666930][ T6427] process 'syz.0.121' launched './file1' with NULL argv: empty string added [ 119.706206][ T30] audit: type=1400 audit(1758030224.936:290): avc: denied { execute_no_trans } for pid=6426 comm="syz.0.121" path="/21/file1" dev="tmpfs" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 119.832043][ T30] audit: type=1400 audit(1758030225.066:291): avc: denied { read } for pid=6434 comm="syz.4.124" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 120.544972][ T30] audit: type=1400 audit(1758030225.066:292): avc: denied { open } for pid=6434 comm="syz.4.124" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 120.596419][ T30] audit: type=1400 audit(1758030225.656:293): avc: denied { ioctl } for pid=6434 comm="syz.4.124" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 120.641387][ T30] audit: type=1400 audit(1758030225.756:294): avc: denied { getopt } for pid=6434 comm="syz.4.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 120.919285][ T6448] netlink: 148 bytes leftover after parsing attributes in process `syz.0.125'. [ 120.929829][ T6448] netlink: 56 bytes leftover after parsing attributes in process `syz.0.125'. [ 120.938992][ T6448] netlink: 'syz.0.125': attribute type 1 has an invalid length. [ 121.503035][ T24] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 121.721416][ T30] audit: type=1400 audit(1758030226.846:295): avc: denied { create } for pid=6443 comm="syz.1.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 121.721469][ T30] audit: type=1400 audit(1758030226.866:296): avc: denied { write } for pid=6443 comm="syz.1.128" path="socket:[9898]" dev="sockfs" ino=9898 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 121.822960][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 121.826234][ T24] usb 5-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 121.959387][ T24] usb 5-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 121.959411][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.959423][ T24] usb 5-1: Product: syz [ 121.959432][ T24] usb 5-1: Manufacturer: syz [ 121.959441][ T24] usb 5-1: SerialNumber: syz [ 121.996552][ T30] audit: type=1400 audit(1758030227.236:297): avc: denied { setopt } for pid=6443 comm="syz.1.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 122.139601][ T5859] libceph: connect (1)[c::]:6789 error -101 [ 122.139749][ T5859] libceph: mon0 (1)[c::]:6789 connect error [ 122.397545][ T5859] libceph: connect (1)[c::]:6789 error -101 [ 122.397662][ T5859] libceph: mon0 (1)[c::]:6789 connect error [ 122.906646][ T5975] libceph: connect (1)[c::]:6789 error -101 [ 122.912787][ T5975] libceph: mon0 (1)[c::]:6789 connect error [ 122.919788][ T24] usb 5-1: reset high-speed USB device number 3 using dummy_hcd [ 122.991672][ T6457] ceph: No mds server is up or the cluster is laggy [ 123.158483][ T6464] netlink: 'syz.1.131': attribute type 9 has an invalid length. [ 123.719233][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 123.719248][ T30] audit: type=1400 audit(1758030228.956:300): avc: denied { listen } for pid=6470 comm="syz.3.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 123.805070][ T24] usb 5-1: device not accepting address 3, error -71 [ 123.888559][ T30] audit: type=1400 audit(1758030228.996:301): avc: denied { getopt } for pid=6470 comm="syz.3.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 124.296008][ T30] audit: type=1400 audit(1758030229.526:302): avc: denied { append } for pid=6487 comm="syz.3.140" name="video4" dev="devtmpfs" ino=938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 124.717906][ T5965] libceph: connect (1)[c::]:6789 error -101 [ 124.725610][ T5965] libceph: mon0 (1)[c::]:6789 connect error [ 124.790943][ T24] usb 5-1: USB disconnect, device number 3 [ 124.859901][ T6499] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 125.009624][ T10] libceph: connect (1)[c::]:6789 error -101 [ 125.015668][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 125.105821][ T6496] ceph: No mds server is up or the cluster is laggy [ 125.118483][ T6505] netlink: 'syz.4.143': attribute type 6 has an invalid length. [ 125.129872][ T30] audit: type=1400 audit(1758030230.306:303): avc: denied { setopt } for pid=6482 comm="syz.1.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 125.154594][ T6505] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.143'. [ 125.258717][ T6500] ceph: No mds server is up or the cluster is laggy [ 125.268205][ T10] libceph: connect (1)[b::]:6789 error -101 [ 125.306252][ T10] libceph: mon0 (1)[b::]:6789 connect error [ 125.346562][ T10] libceph: connect (1)[c::]:6789 error -101 [ 125.355803][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 125.380328][ T6512] ceph: No mds server is up or the cluster is laggy [ 125.659372][ T30] audit: type=1400 audit(1758030230.786:304): avc: denied { getopt } for pid=6516 comm="syz.3.146" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 125.900871][ T30] audit: type=1400 audit(1758030231.136:305): avc: denied { getopt } for pid=6522 comm="syz.3.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 125.976449][ T5975] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 126.138374][ T5975] usb 5-1: Using ep0 maxpacket: 8 [ 126.151673][ T5975] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 126.268457][ T5975] usb 5-1: config 179 has no interface number 0 [ 126.274870][ T5975] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 126.289708][ T5975] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 126.429563][ T6531] netlink: 'syz.3.149': attribute type 9 has an invalid length. [ 126.868233][ T5975] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 127.006189][ T5975] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 127.101938][ T5975] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 127.133460][ T5975] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 127.144096][ T5975] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.168292][ T6519] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 127.220341][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 127.396285][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 127.403642][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.499032][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.519841][ T5859] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input7 [ 127.583478][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 127.596260][ T5975] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 127.654505][ T10] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 127.666501][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.685620][ T10] usb 2-1: config 0 descriptor?? [ 127.746644][ T5975] usb 4-1: Using ep0 maxpacket: 32 [ 127.756283][ T5975] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 127.765574][ T5975] usb 4-1: config 0 has no interface number 0 [ 127.772852][ T5975] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 127.785318][ T5975] usb 4-1: config 0 interface 85 has no altsetting 0 [ 127.799067][ T5975] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 127.809391][ T5975] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.825352][ T5975] usb 4-1: Product: syz [ 127.832006][ T5975] usb 4-1: Manufacturer: syz [ 127.838599][ T5975] usb 4-1: SerialNumber: syz [ 127.866597][ T5975] usb 4-1: config 0 descriptor?? [ 128.043523][ T6549] netlink: 'syz.0.156': attribute type 6 has an invalid length. [ 128.053496][ T6549] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.156'. [ 128.107886][ T6535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.117643][ T6535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.125711][ T30] audit: type=1400 audit(1758030233.346:306): avc: denied { getopt } for pid=6540 comm="syz.3.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 128.297092][ T30] audit: type=1400 audit(1758030233.516:307): avc: denied { read } for pid=6534 comm="syz.1.150" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 128.398441][ T6555] netlink: 36 bytes leftover after parsing attributes in process `syz.3.153'. [ 128.569751][ T30] audit: type=1400 audit(1758030233.516:308): avc: denied { open } for pid=6534 comm="syz.1.150" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 129.796581][ T5965] usb 5-1: USB disconnect, device number 4 [ 129.796583][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 129.796623][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 129.860644][ T6564] binder: 6563:6564 ioctl c0306201 200000000080 returned -14 [ 129.884457][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 129.912772][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 129.962757][ T10] usb 2-1: USB disconnect, device number 2 [ 130.878192][ T5975] appletouch 4-1:0.85: Failed to read mode from device. [ 130.888238][ T5975] appletouch 4-1:0.85: probe with driver appletouch failed with error -5 [ 130.918453][ T5975] usb 4-1: USB disconnect, device number 4 [ 131.156194][ T30] audit: type=1400 audit(1758030236.356:309): avc: denied { create } for pid=6575 comm="syz.3.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 131.237160][ T30] audit: type=1400 audit(1758030236.356:310): avc: denied { setopt } for pid=6575 comm="syz.3.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 131.326495][ T30] audit: type=1400 audit(1758030236.356:311): avc: denied { bind } for pid=6575 comm="syz.3.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 131.346417][ T30] audit: type=1400 audit(1758030236.356:312): avc: denied { name_bind } for pid=6575 comm="syz.3.163" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 131.369046][ T30] audit: type=1400 audit(1758030236.356:313): avc: denied { node_bind } for pid=6575 comm="syz.3.163" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 131.390923][ T30] audit: type=1400 audit(1758030236.356:314): avc: denied { write } for pid=6575 comm="syz.3.163" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 131.396899][ T5975] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 131.413709][ T30] audit: type=1400 audit(1758030236.356:315): avc: denied { shutdown } for pid=6575 comm="syz.3.163" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 131.446512][ T24] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 131.446804][ T30] audit: type=1400 audit(1758030236.356:316): avc: denied { read write } for pid=6575 comm="syz.3.163" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 131.479973][ T30] audit: type=1400 audit(1758030236.356:317): avc: denied { open } for pid=6575 comm="syz.3.163" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 131.503451][ T30] audit: type=1400 audit(1758030236.356:318): avc: denied { ioctl } for pid=6575 comm="syz.3.163" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 131.586222][ T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 131.626261][ T5975] usb 4-1: Using ep0 maxpacket: 16 [ 131.635173][ T6577] netlink: 4 bytes leftover after parsing attributes in process `syz.3.163'. [ 131.644882][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 131.648016][ T6577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.658850][ T24] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 131.672566][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.681685][ T6577] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.705738][ T24] usb 5-1: config 0 descriptor?? [ 131.729373][ T24] pwc: Askey VC010 type 2 USB webcam detected. [ 131.746239][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 131.758216][ T10] usb 1-1: config 0 has an invalid interface number: 122 but max is 0 [ 131.771952][ T10] usb 1-1: config 0 has no interface number 0 [ 131.780985][ T10] usb 1-1: config 0 interface 122 has no altsetting 0 [ 131.794519][ T10] usb 1-1: New USB device found, idVendor=050d, idProduct=0122, bcdDevice=c3.88 [ 131.805350][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.813595][ T10] usb 1-1: Product: syz [ 131.820019][ T10] usb 1-1: Manufacturer: syz [ 131.824673][ T10] usb 1-1: SerialNumber: syz [ 131.837824][ T10] usb 1-1: config 0 descriptor?? [ 131.931435][ T24] pwc: recv_control_msg error -32 req 02 val 2b00 [ 131.975110][ T24] pwc: recv_control_msg error -71 req 02 val 2700 [ 131.992000][ T24] pwc: recv_control_msg error -71 req 02 val 2c00 [ 132.003408][ T24] pwc: recv_control_msg error -71 req 04 val 1000 [ 132.024092][ T24] pwc: recv_control_msg error -71 req 04 val 1300 [ 132.052453][ T24] pwc: recv_control_msg error -71 req 04 val 1400 [ 132.082378][ T10] pegasus 1-1:0.122: probe with driver pegasus failed with error -71 [ 132.093630][ T24] pwc: recv_control_msg error -71 req 02 val 2000 [ 132.100354][ T10] usb 1-1: USB disconnect, device number 3 [ 132.132354][ T24] pwc: recv_control_msg error -71 req 02 val 2100 [ 132.147156][ T24] pwc: recv_control_msg error -71 req 04 val 1500 [ 132.159122][ T24] pwc: recv_control_msg error -71 req 02 val 2500 [ 132.167972][ T24] pwc: recv_control_msg error -71 req 02 val 2400 [ 132.185014][ T24] pwc: recv_control_msg error -71 req 02 val 2600 [ 132.192156][ T24] pwc: recv_control_msg error -71 req 02 val 2900 [ 132.199501][ T24] pwc: recv_control_msg error -71 req 02 val 2800 [ 132.208544][ T24] pwc: recv_control_msg error -71 req 04 val 1100 [ 132.223168][ T24] pwc: recv_control_msg error -71 req 04 val 1200 [ 132.371907][ T24] pwc: Registered as video103. [ 132.380175][ T24] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input9 [ 132.416620][ T24] usb 5-1: USB disconnect, device number 5 [ 132.456314][ T6020] udevd[6020]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 132.803758][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.810789][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.880511][ T6601] netlink: 'syz.2.170': attribute type 6 has an invalid length. [ 132.890218][ T6601] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.170'. [ 132.918689][ T6602] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 133.455757][ T6611] netlink: 'syz.2.172': attribute type 9 has an invalid length. [ 134.566934][ T5975] usb 4-1: unable to get BOS descriptor or descriptor too short [ 134.585336][ T5975] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 134.593680][ T5975] usb 4-1: can't read configurations, error -71 [ 134.696225][ T5859] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 134.711297][ T6619] netlink: 4 bytes leftover after parsing attributes in process `syz.3.175'. [ 134.818939][ T6619] warning: `syz.3.175' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 134.876205][ T5859] usb 5-1: Using ep0 maxpacket: 32 [ 134.881397][ T48] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 134.906580][ T5859] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 134.941687][ T5859] usb 5-1: config 0 has no interface number 0 [ 134.952107][ T5859] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 134.989330][ T5859] usb 5-1: config 0 interface 85 has no altsetting 0 [ 135.040912][ T5859] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 135.060339][ T5859] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.068476][ T48] usb 3-1: Using ep0 maxpacket: 32 [ 135.083856][ T48] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 135.097260][ T5859] usb 5-1: Product: syz [ 135.104546][ T5859] usb 5-1: Manufacturer: syz [ 135.109341][ T48] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 135.120791][ T5859] usb 5-1: SerialNumber: syz [ 135.127721][ T48] usb 3-1: config 0 interface 0 has no altsetting 0 [ 135.134986][ T5859] usb 5-1: config 0 descriptor?? [ 135.145499][ T48] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=dc.8e [ 135.166593][ T48] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.174749][ T48] usb 3-1: Product: syz [ 135.182219][ T48] usb 3-1: Manufacturer: syz [ 135.187357][ T48] usb 3-1: SerialNumber: syz [ 135.200515][ T48] usb 3-1: config 0 descriptor?? [ 135.529836][ T6634] netlink: 36 bytes leftover after parsing attributes in process `syz.4.173'. [ 135.612650][ T48] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 136.017593][ T6617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.042973][ T6617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.131272][ T48] gs_usb 3-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 136.157855][ T48] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -71 [ 136.425832][ T48] usb 3-1: USB disconnect, device number 4 [ 136.497068][ T6652] netlink: 'syz.0.184': attribute type 9 has an invalid length. [ 136.500052][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 136.500069][ T30] audit: type=1400 audit(1758030241.716:324): avc: denied { read } for pid=5203 comm="acpid" name="event8" dev="devtmpfs" ino=2837 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 136.644778][ T5859] appletouch 5-1:0.85: Failed to read mode from device. [ 136.694880][ T5859] appletouch 5-1:0.85: probe with driver appletouch failed with error -5 [ 136.705605][ T30] audit: type=1400 audit(1758030241.716:325): avc: denied { open } for pid=5203 comm="acpid" path="/dev/input/event8" dev="devtmpfs" ino=2837 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 136.739609][ T5859] usb 5-1: USB disconnect, device number 6 [ 136.841267][ T30] audit: type=1400 audit(1758030241.716:326): avc: denied { ioctl } for pid=5203 comm="acpid" path="/dev/input/event8" dev="devtmpfs" ino=2837 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 137.169222][ T6667] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16148 sclass=netlink_route_socket pid=6667 comm=syz.4.189 [ 137.209623][ T6665] netlink: 'syz.3.187': attribute type 9 has an invalid length. [ 137.490143][ T30] audit: type=1400 audit(1758030242.726:327): avc: denied { unmount } for pid=5856 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 137.568087][ T30] audit: type=1400 audit(1758030242.786:328): avc: denied { mount } for pid=6668 comm="syz.4.190" name="/" dev="pstore" ino=4355 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 137.702101][ T6676] netlink: 12 bytes leftover after parsing attributes in process `syz.1.191'. [ 138.003915][ T6677] netlink: 8 bytes leftover after parsing attributes in process `syz.1.191'. [ 138.225059][ T6677] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 138.235214][ T6677] macvlan2: entered allmulticast mode [ 138.241982][ T6677] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 139.026019][ T5859] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 139.189932][ T5859] usb 2-1: New USB device found, idVendor=0c45, idProduct=60a8, bcdDevice=b5.55 [ 139.228907][ T5859] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.250757][ T5859] usb 2-1: Product: syz [ 139.268414][ T912] libceph: connect (1)[c::]:6789 error -101 [ 139.268957][ T5859] usb 2-1: Manufacturer: syz [ 139.278074][ T912] libceph: mon0 (1)[c::]:6789 connect error [ 139.293342][ T5859] usb 2-1: SerialNumber: syz [ 139.310569][ T5859] usb 2-1: config 0 descriptor?? [ 139.502757][ T5859] gspca_main: sonixb-2.14.0 probing 0c45:60a8 [ 139.852324][ T912] libceph: connect (1)[c::]:6789 error -101 [ 139.875718][ T5859] input: sonixb as /devices/platform/dummy_hcd.1/usb2/2-1/input/input11 [ 139.906442][ T912] libceph: mon0 (1)[c::]:6789 connect error [ 139.923050][ T30] audit: type=1400 audit(1758030245.136:329): avc: denied { bind } for pid=6695 comm="syz.2.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 139.975286][ T30] audit: type=1400 audit(1758030245.186:330): avc: denied { write } for pid=6695 comm="syz.2.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 140.002612][ T30] audit: type=1400 audit(1758030245.236:331): avc: denied { ioctl } for pid=6695 comm="syz.2.199" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 140.068098][ T6708] genirq: Flags mismatch irq 4. 00200000 (aio_iiro_16) vs. 00200080 (ttyS0) [ 140.077765][ T6694] ceph: No mds server is up or the cluster is laggy [ 140.416758][ T5859] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 140.587677][ T30] audit: type=1400 audit(1758030245.766:332): avc: denied { create } for pid=6709 comm="syz.3.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 140.875007][ T6718] netlink: 'syz.4.203': attribute type 9 has an invalid length. [ 141.226203][ T5859] usb 1-1: Using ep0 maxpacket: 16 [ 141.243805][ T5859] usb 1-1: config index 0 descriptor too short (expected 16456, got 72) [ 141.252467][ T5859] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 141.290581][ T5859] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 141.311355][ T5859] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 141.328832][ T5859] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 141.340401][ T5859] usb 1-1: config 0 has no interface number 0 [ 141.348636][ T5859] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 141.362687][ T5859] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 141.373675][ T5859] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 141.395606][ T5859] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 141.418734][ T5859] usb 1-1: config 0 interface 125 has no altsetting 0 [ 141.432952][ T5859] usb 1-1: config 0 interface 125 has no altsetting 2 [ 141.481757][ T5859] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 141.556310][ T5859] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.566776][ T5859] usb 1-1: Product: syz [ 141.580662][ T5859] usb 1-1: Manufacturer: syz [ 141.585294][ T5859] usb 1-1: SerialNumber: syz [ 141.632387][ T5859] usb 1-1: config 0 descriptor?? [ 141.668978][ T5859] usb 1-1: selecting invalid altsetting 2 [ 141.700282][ T30] audit: type=1400 audit(1758030246.936:333): avc: denied { connect } for pid=6729 comm="syz.4.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 141.729179][ T30] audit: type=1400 audit(1758030246.956:334): avc: denied { name_connect } for pid=6729 comm="syz.4.206" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 141.785672][ T912] usb 2-1: USB disconnect, device number 3 [ 141.933953][ T30] audit: type=1400 audit(1758030247.166:335): avc: denied { read write } for pid=6735 comm="syz.1.209" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 142.050806][ T30] audit: type=1400 audit(1758030247.166:336): avc: denied { open } for pid=6735 comm="syz.1.209" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 142.113714][ T30] audit: type=1400 audit(1758030247.166:337): avc: denied { ioctl } for pid=6735 comm="syz.1.209" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 142.140461][ T30] audit: type=1400 audit(1758030247.196:338): avc: denied { create } for pid=6727 comm="syz.2.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 142.163642][ T30] audit: type=1400 audit(1758030247.216:339): avc: denied { map } for pid=6735 comm="syz.1.209" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 142.189070][ T30] audit: type=1400 audit(1758030247.216:340): avc: denied { execute } for pid=6735 comm="syz.1.209" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 142.495612][ T6745] netlink: 8 bytes leftover after parsing attributes in process `syz.3.210'. [ 142.504439][ T6745] netlink: 24 bytes leftover after parsing attributes in process `syz.3.210'. [ 142.753046][ T6707] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6707 comm=syz.0.201 [ 142.800352][ T6707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.824442][ T6707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.851717][ T6707] netlink: 'syz.0.201': attribute type 1 has an invalid length. [ 143.541309][ T5859] usb 1-1: USB disconnect, device number 4 [ 143.641592][ T10] libceph: connect (1)[c::]:6789 error -101 [ 143.660727][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 143.842318][ T6764] netlink: 28 bytes leftover after parsing attributes in process `syz.1.214'. [ 143.884308][ T30] audit: type=1400 audit(1758030249.116:341): avc: denied { unlink } for pid=6763 comm="syz.1.214" name="#1" dev="tmpfs" ino=217 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 143.930773][ T30] audit: type=1400 audit(1758030249.116:342): avc: denied { mount } for pid=6763 comm="syz.1.214" name="/" dev="overlay" ino=213 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 143.969640][ T912] libceph: connect (1)[c::]:6789 error -101 [ 143.998189][ T912] libceph: mon0 (1)[c::]:6789 connect error [ 144.117617][ T6766] overlayfs: failed lookup in lower (newroot/38, name='file0', err=-40): overlapping layers [ 144.397580][ T6756] ceph: No mds server is up or the cluster is laggy [ 144.415717][ T6764] overlayfs: failed lookup in lower (newroot/38, name='bus', err=-40): overlapping layers [ 144.958646][ T6774] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 145.847942][ T5859] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 146.056448][ T5859] usb 5-1: Using ep0 maxpacket: 16 [ 146.089266][ T6792] netlink: 8 bytes leftover after parsing attributes in process `syz.1.223'. [ 146.099521][ T6792] netlink: 24 bytes leftover after parsing attributes in process `syz.1.223'. [ 146.115838][ T5859] usb 5-1: config 129 has an invalid interface number: 128 but max is 0 [ 146.181287][ T5859] usb 5-1: config 129 has no interface number 0 [ 146.209491][ T5859] usb 5-1: config 129 interface 128 altsetting 9 endpoint 0x8 has an invalid bInterval 187, changing to 11 [ 146.240613][ T5859] usb 5-1: config 129 interface 128 has no altsetting 0 [ 146.253750][ T5859] usb 5-1: string descriptor 0 read error: -22 [ 146.261020][ T5859] usb 5-1: New USB device found, idVendor=05ac, idProduct=0214, bcdDevice=67.e5 [ 146.271349][ T5859] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.304766][ T5859] appletouch 5-1:129.128: Could not find int-in endpoint [ 146.317846][ T5859] appletouch 5-1:129.128: probe with driver appletouch failed with error -5 [ 146.339397][ T5859] usbhid 5-1:129.128: couldn't find an input interrupt endpoint [ 146.870515][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 146.870530][ T30] audit: type=1326 audit(1758030252.106:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6788 comm="syz.3.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fe13058eba9 code=0x7ffc0000 [ 147.128993][ T30] audit: type=1326 audit(1758030252.246:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6788 comm="syz.3.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe13058eba9 code=0x7ffc0000 [ 147.230471][ T30] audit: type=1326 audit(1758030252.246:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6788 comm="syz.3.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe13058eba9 code=0x7ffc0000 [ 147.352823][ T30] audit: type=1326 audit(1758030252.306:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6788 comm="syz.3.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe13058eba9 code=0x7ffc0000 [ 147.362407][ T912] libceph: connect (1)[c::]:6789 error -101 [ 147.480000][ T30] audit: type=1326 audit(1758030252.306:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6788 comm="syz.3.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe13058eba9 code=0x7ffc0000 [ 147.493533][ T912] libceph: mon0 (1)[c::]:6789 connect error [ 147.533446][ T30] audit: type=1326 audit(1758030252.306:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6788 comm="syz.3.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe13058eba9 code=0x7ffc0000 [ 147.601536][ T30] audit: type=1326 audit(1758030252.456:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6788 comm="syz.3.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe13058d510 code=0x7ffc0000 [ 147.693811][ T30] audit: type=1400 audit(1758030252.456:359): avc: denied { append } for pid=6788 comm="syz.3.222" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 147.787594][ T30] audit: type=1326 audit(1758030252.456:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6788 comm="syz.3.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe13058eba9 code=0x7ffc0000 [ 147.828473][ T912] libceph: connect (1)[c::]:6789 error -101 [ 148.074174][ T6805] ceph: No mds server is up or the cluster is laggy [ 148.096451][ T912] libceph: mon0 (1)[c::]:6789 connect error [ 148.124438][ T30] audit: type=1326 audit(1758030252.456:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6788 comm="syz.3.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe13058eba9 code=0x7ffc0000 [ 148.649886][ T912] usb 5-1: USB disconnect, device number 7 [ 148.705995][ T6817] netlink: 204732 bytes leftover after parsing attributes in process `syz.0.227'. [ 149.480181][ T6831] netlink: 'syz.3.232': attribute type 6 has an invalid length. [ 149.484432][ T6826] netlink: 'syz.0.227': attribute type 10 has an invalid length. [ 149.531035][ T6826] batman_adv: batadv0: Adding interface: team0 [ 149.542484][ T6831] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.232'. [ 149.575968][ T6817] netlink: 'syz.0.227': attribute type 10 has an invalid length. [ 149.593804][ T6826] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.623177][ T6817] netlink: 2 bytes leftover after parsing attributes in process `syz.0.227'. [ 149.634936][ T6826] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 149.670022][ T6817] team0: entered promiscuous mode [ 149.670555][ T6832] netlink: 'syz.4.231': attribute type 6 has an invalid length. [ 149.688941][ T6817] team_slave_0: entered promiscuous mode [ 149.696320][ T6832] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.231'. [ 149.700117][ T6817] team_slave_1: entered promiscuous mode [ 149.793373][ T6817] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.803632][ T6817] batman_adv: batadv0: Interface activated: team0 [ 149.811512][ T6817] batman_adv: batadv0: Interface deactivated: team0 [ 149.819055][ T6817] batman_adv: batadv0: Removing interface: team0 [ 149.827115][ T6838] fuse: Bad value for 'user_id' [ 149.832224][ T6838] fuse: Bad value for 'user_id' [ 149.846277][ T6838] netlink: 8 bytes leftover after parsing attributes in process `syz.1.233'. [ 149.855445][ T6838] netlink: 24 bytes leftover after parsing attributes in process `syz.1.233'. [ 149.989780][ T6817] bridge0: port 3(team0) entered blocking state [ 149.999574][ T6817] bridge0: port 3(team0) entered disabled state [ 150.007284][ T6817] team0: entered allmulticast mode [ 150.012778][ T6817] team_slave_0: entered allmulticast mode [ 150.019186][ T5975] usb 4-1: new low-speed USB device number 7 using dummy_hcd [ 150.026986][ T6817] team_slave_1: entered allmulticast mode [ 150.051806][ T6817] bridge0: port 3(team0) entered blocking state [ 150.058144][ T6817] bridge0: port 3(team0) entered forwarding state [ 150.189518][ T5975] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 150.199849][ T5975] usb 4-1: config 0 has no interface number 0 [ 150.225950][ T5975] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 150.257855][ T5975] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 150.532872][ T5975] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 150.549991][ T5975] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.562353][ T6842] netlink: 8 bytes leftover after parsing attributes in process `syz.4.235'. [ 150.563068][ T5975] usb 4-1: config 0 descriptor?? [ 150.571346][ T6842] netlink: 24 bytes leftover after parsing attributes in process `syz.4.235'. [ 150.615818][ T6837] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 150.639377][ T5975] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 151.862219][ T912] usb 4-1: USB disconnect, device number 7 [ 151.989202][ T10] libceph: connect (1)[c::]:6789 error -101 [ 151.995709][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 152.046821][ T6862] netlink: 3 bytes leftover after parsing attributes in process `syz.2.240'. [ 152.055650][ T6862] netlink: 6 bytes leftover after parsing attributes in process `syz.2.240'. [ 152.135006][ T6867] capability: warning: `syz.2.240' uses deprecated v2 capabilities in a way that may be insecure [ 152.150101][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 152.150113][ T30] audit: type=1400 audit(1758030257.386:363): avc: denied { setopt } for pid=6858 comm="syz.2.240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 152.276707][ T5965] libceph: connect (1)[c::]:6789 error -101 [ 152.287631][ T5965] libceph: mon0 (1)[c::]:6789 connect error [ 152.421252][ T5975] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 152.987245][ T6853] ceph: No mds server is up or the cluster is laggy [ 153.103998][ T5975] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 153.206304][ T5975] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.233797][ T5975] usb 5-1: Product: syz [ 153.252982][ T5975] usb 5-1: Manufacturer: syz [ 153.270623][ T5975] usb 5-1: SerialNumber: syz [ 153.297931][ T5975] usb 5-1: config 0 descriptor?? [ 153.447612][ T5965] libceph: connect (1)[c::]:6789 error -101 [ 153.453730][ T5965] libceph: mon0 (1)[c::]:6789 connect error [ 153.779359][ T30] audit: type=1400 audit(1758030258.996:364): avc: denied { write } for pid=6873 comm="syz.3.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 153.989016][ T5975] airspy 5-1:0.0: usb_control_msg() failed -71 request 0a [ 154.001097][ T5975] airspy 5-1:0.0: Could not detect board [ 154.008875][ T5975] airspy 5-1:0.0: probe with driver airspy failed with error -71 [ 154.539538][ T5975] usb 5-1: USB disconnect, device number 8 [ 154.603044][ T30] audit: type=1400 audit(1758030259.816:365): avc: denied { sqpoll } for pid=6892 comm="syz.0.248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 154.825833][ T30] audit: type=1400 audit(1758030259.816:366): avc: denied { setopt } for pid=6892 comm="syz.0.248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 154.865865][ T6907] input: syz1 as /devices/virtual/input/input12 [ 154.897791][ T6906] netlink: 68 bytes leftover after parsing attributes in process `syz.2.251'. [ 154.903479][ T30] audit: type=1400 audit(1758030260.086:367): avc: denied { write } for pid=6902 comm="syz.0.250" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 154.951336][ T30] audit: type=1400 audit(1758030260.176:368): avc: denied { create } for pid=6903 comm="syz.1.252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 154.970735][ C1] vkms_vblank_simulate: vblank timer overrun [ 154.981173][ T30] audit: type=1400 audit(1758030260.186:369): avc: denied { write } for pid=6903 comm="syz.1.252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 155.001793][ T30] audit: type=1400 audit(1758030260.216:370): avc: denied { read } for pid=6903 comm="syz.1.252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 155.020964][ C1] vkms_vblank_simulate: vblank timer overrun [ 155.146241][ T30] audit: type=1400 audit(1758030260.276:371): avc: denied { connect } for pid=6904 comm="syz.2.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 155.440570][ T30] audit: type=1400 audit(1758030260.676:372): avc: denied { read } for pid=6917 comm="syz.4.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 157.592930][ T6934] vlan2: entered promiscuous mode [ 157.601834][ T6936] netlink: 24 bytes leftover after parsing attributes in process `syz.1.259'. [ 157.611265][ T6934] vlan2: entered allmulticast mode [ 157.618131][ T6934] hsr_slave_1: entered allmulticast mode [ 157.909049][ T6952] comedi comedi4: bad chanlist[0]=0x00200004 chan=4 range length=2 [ 157.919239][ T6948] netlink: 12 bytes leftover after parsing attributes in process `syz.2.264'. [ 158.226739][ T976] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 158.387662][ T912] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 158.621975][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 158.621993][ T30] audit: type=1326 audit(1758030263.706:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6956 comm="syz.1.267" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa35858eba9 code=0x0 [ 158.636970][ T976] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 158.852138][ T976] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.865998][ T976] usb 4-1: Product: syz [ 158.872504][ T976] usb 4-1: Manufacturer: syz [ 158.878828][ T976] usb 4-1: SerialNumber: syz [ 158.893976][ T912] usb 5-1: Using ep0 maxpacket: 16 [ 158.907553][ T912] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.924047][ T912] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.953294][ T912] usb 5-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 158.973988][ T912] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.994484][ T912] usb 5-1: config 0 descriptor?? [ 159.282301][ T6966] netlink: 8 bytes leftover after parsing attributes in process `syz.2.270'. [ 159.291209][ T6966] netlink: 4 bytes leftover after parsing attributes in process `syz.2.270'. [ 159.300741][ T6966] netlink: 'syz.2.270': attribute type 12 has an invalid length. [ 159.308490][ T6966] netlink: 'syz.2.270': attribute type 11 has an invalid length. [ 159.438961][ T912] ntrig 0003:1B96:0008.0001: unknown main item tag 0x0 [ 159.543310][ T912] ntrig 0003:1B96:0008.0001: unknown main item tag 0x0 [ 159.559986][ T912] ntrig 0003:1B96:0008.0001: unknown main item tag 0x0 [ 159.578580][ T912] ntrig 0003:1B96:0008.0001: unknown main item tag 0x0 [ 160.058026][ T912] ntrig 0003:1B96:0008.0001: unknown main item tag 0x0 [ 160.064945][ T912] ntrig 0003:1B96:0008.0001: unknown main item tag 0x0 [ 160.071965][ T912] ntrig 0003:1B96:0008.0001: unknown main item tag 0x0 [ 160.093552][ T912] ntrig 0003:1B96:0008.0001: hidraw0: USB HID v0.00 Device [HID 1b96:0008] on usb-dummy_hcd.4-1/input0 [ 160.111037][ T30] audit: type=1400 audit(1758030265.346:377): avc: denied { ioctl } for pid=6950 comm="syz.4.266" path="socket:[11921]" dev="sockfs" ino=11921 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 160.157329][ T976] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -EPROTO [ 160.184245][ T976] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 160.184857][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 160.223824][ T976] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 160.239287][ T912] usb 5-1: USB disconnect, device number 9 [ 160.316175][ T30] audit: type=1400 audit(1758030265.386:378): avc: denied { ioctl } for pid=6950 comm="syz.4.266" path="socket:[13282]" dev="sockfs" ino=13282 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 160.390186][ T30] audit: type=1400 audit(1758030265.596:379): avc: denied { create } for pid=6975 comm="syz.2.272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 160.429430][ T976] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 160.571496][ T5925] libceph: connect (1)[c::]:6789 error -101 [ 160.587227][ T976] usb 4-1: USB disconnect, device number 8 [ 161.033790][ T5925] libceph: mon0 (1)[c::]:6789 connect error [ 161.061248][ T30] audit: type=1400 audit(1758030265.606:380): avc: denied { ioctl } for pid=6975 comm="syz.2.272" path="socket:[11934]" dev="sockfs" ino=11934 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 161.088535][ T6974] fido_id[6974]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 161.203370][ T30] audit: type=1400 audit(1758030266.376:381): avc: denied { lock } for pid=6988 comm="syz.2.275" path="socket:[11945]" dev="sockfs" ino=11945 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 161.226189][ T6982] ceph: No mds server is up or the cluster is laggy [ 161.397816][ T5925] libceph: connect (1)[c::]:6789 error -101 [ 161.768360][ T5925] libceph: mon0 (1)[c::]:6789 connect error [ 161.821284][ T30] audit: type=1326 audit(1758030266.906:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6991 comm="syz.2.276" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4f41d8eba9 code=0x0 [ 163.226231][ T5975] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 163.668050][ T5975] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 163.693568][ T5975] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 163.721445][ T5975] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 163.731635][ T5975] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 163.740750][ T5975] usb 3-1: SerialNumber: syz [ 163.803005][ T5975] usb 3-1: 0:2 : does not exist [ 164.316244][ T7031] netlink: 165 bytes leftover after parsing attributes in process `syz.2.285'. [ 164.610386][ T30] audit: type=1400 audit(1758030269.546:383): avc: denied { create } for pid=7017 comm="syz.2.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 164.771513][ T30] audit: type=1400 audit(1758030269.546:384): avc: denied { write } for pid=7017 comm="syz.2.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 165.639344][ T30] audit: type=1326 audit(1758030270.856:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7035 comm="syz.1.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa35858eba9 code=0x7ffc0000 [ 165.674049][ T7040] debugfs: '!' already exists in 'ieee80211' [ 165.877800][ T30] audit: type=1326 audit(1758030270.856:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7035 comm="syz.1.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fa35858eba9 code=0x7ffc0000 [ 166.111503][ T30] audit: type=1326 audit(1758030270.856:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7035 comm="syz.1.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa35858eba9 code=0x7ffc0000 [ 166.191687][ T30] audit: type=1326 audit(1758030270.876:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7035 comm="syz.1.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa35858eba9 code=0x7ffc0000 [ 166.209512][ T5975] usb 3-1: USB disconnect, device number 5 [ 166.297673][ T7048] openvswitch: netlink: Missing key (keys=40, expected=80) [ 166.403733][ T30] audit: type=1326 audit(1758030270.876:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7035 comm="syz.1.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa35858eba9 code=0x7ffc0000 [ 166.983240][ T6017] udevd[6017]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 167.093926][ T30] audit: type=1326 audit(1758030270.896:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7035 comm="syz.1.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa35858eba9 code=0x7ffc0000 [ 167.325024][ T30] audit: type=1326 audit(1758030270.896:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7035 comm="syz.1.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa35858eba9 code=0x7ffc0000 [ 167.430427][ T30] audit: type=1326 audit(1758030270.946:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7035 comm="syz.1.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa35858eba9 code=0x7ffc0000 [ 167.642092][ T7062] netlink: 4 bytes leftover after parsing attributes in process `syz.3.294'. [ 167.661444][ T7058] netlink: 44 bytes leftover after parsing attributes in process `syz.2.296'. [ 167.740339][ T7065] netlink: 12 bytes leftover after parsing attributes in process `syz.4.295'. [ 168.543521][ T7062] bond0: (slave bond_slave_1): Releasing backup interface [ 169.864500][ T5975] IPVS: starting estimator thread 0... [ 169.956326][ T7085] IPVS: using max 44 ests per chain, 105600 per kthread [ 170.026378][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 170.026395][ T30] audit: type=1326 audit(1758030275.256:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7091 comm="syz.4.304" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa1f0d8eba9 code=0x0 [ 170.218768][ T7098] netlink: 8 bytes leftover after parsing attributes in process `syz.3.303'. [ 170.227647][ T7098] netlink: 4 bytes leftover after parsing attributes in process `syz.3.303'. [ 170.237240][ T7098] netlink: 'syz.3.303': attribute type 12 has an invalid length. [ 170.244966][ T7098] netlink: 'syz.3.303': attribute type 11 has an invalid length. [ 170.336387][ T5975] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 170.358790][ T7103] syz.2.307 uses obsolete (PF_INET,SOCK_PACKET) [ 170.723013][ T30] audit: type=1400 audit(1758030275.836:409): avc: denied { accept } for pid=7101 comm="syz.2.307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 171.137563][ T5975] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 171.219177][ T5975] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 171.237629][ T5975] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 171.247712][ T5975] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 171.261531][ T5975] usb 5-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 171.270822][ T5975] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.307223][ T5975] usb 5-1: config 0 descriptor?? [ 171.315455][ T5975] gspca_main: spca561-2.14.0 probing abcd:cdee [ 171.952226][ T5975] spca561 5-1:0.0: probe with driver spca561 failed with error -22 [ 172.238845][ T5975] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 172.242141][ T7128] geneve2: entered promiscuous mode [ 172.293877][ T5975] usb 5-1: MIDIStreaming interface descriptor not found [ 172.699030][ T7142] netlink: 20 bytes leftover after parsing attributes in process `syz.3.318'. [ 173.166496][ T976] usb 5-1: USB disconnect, device number 10 [ 173.226223][ T24] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 173.420905][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 173.455093][ T24] usb 4-1: config 2 has an invalid interface number: 34 but max is 2 [ 173.485817][ T24] usb 4-1: config 2 has an invalid interface number: 6 but max is 2 [ 173.504319][ T24] usb 4-1: config 2 contains an unexpected descriptor of type 0x1, skipping [ 173.528060][ T24] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 173.565438][ T30] audit: type=1400 audit(1758030278.776:410): avc: denied { create } for pid=7155 comm="syz.0.324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 173.615466][ T24] usb 4-1: config 2 has 4 interfaces, different from the descriptor's value: 3 [ 173.657552][ T24] usb 4-1: config 2 has no interface number 0 [ 173.667210][ T24] usb 4-1: config 2 has no interface number 3 [ 173.681540][ T24] usb 4-1: config 2 interface 1 altsetting 190 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 173.708302][ T7164] netlink: 168 bytes leftover after parsing attributes in process `syz.0.325'. [ 174.222650][ T24] usb 4-1: config 2 interface 34 altsetting 8 has an invalid endpoint descriptor of length 5, skipping [ 174.277576][ T24] usb 4-1: config 2 interface 34 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 174.346179][ T24] usb 4-1: config 2 interface 6 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 174.513294][ T24] usb 4-1: config 2 interface 1 has no altsetting 0 [ 174.526405][ T24] usb 4-1: config 2 interface 34 has no altsetting 0 [ 174.533130][ T24] usb 4-1: config 2 interface 6 has no altsetting 0 [ 174.561177][ T24] usb 4-1: New USB device found, idVendor=1686, idProduct=00dd, bcdDevice=37.c4 [ 174.574163][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.591683][ T24] usb 4-1: Product: syz [ 174.601151][ T24] usb 4-1: Manufacturer: syz [ 174.719102][ T24] usb 4-1: SerialNumber: syz [ 175.210413][ T24] usb 4-1: selecting invalid altsetting 0 [ 175.360637][ T7180] netlink: 52 bytes leftover after parsing attributes in process `syz.0.330'. [ 175.390708][ T24] hub 4-1:2.6: Invalid hub with more than one config or interface [ 175.432885][ T24] hub 4-1:2.6: probe with driver hub failed with error -22 [ 175.490760][ T24] usb 4-1: USB disconnect, device number 9 [ 175.560709][ T6017] udevd[6017]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:2.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 175.693448][ T7192] netlink: 4 bytes leftover after parsing attributes in process `syz.1.335'. [ 176.994676][ T5975] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 177.467495][ T5975] usb 5-1: Using ep0 maxpacket: 16 [ 177.492600][ T7216] netlink: 24 bytes leftover after parsing attributes in process `syz.2.337'. [ 177.871941][ T5975] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 177.929231][ T5975] usb 5-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 178.143773][ T5975] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.156340][ T5975] usb 5-1: Product: syz [ 178.206789][ T5975] usb 5-1: Manufacturer: syz [ 178.215201][ T5975] usb 5-1: SerialNumber: syz [ 178.229928][ T5975] usb 5-1: config 0 descriptor?? [ 178.252576][ T5975] gspca_main: STV06xx-2.14.0 probing 046d:08f0 [ 178.258997][ T5975] gspca_stv06xx: st6422 sensor detected [ 178.284294][ T30] audit: type=1404 audit(1758030283.516:411): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 178.520786][ T7230] netlink: 'syz.0.343': attribute type 2 has an invalid length. [ 178.532350][ T7230] netlink: 'syz.0.343': attribute type 11 has an invalid length. [ 178.540399][ T7230] netlink: 132 bytes leftover after parsing attributes in process `syz.0.343'. [ 178.670165][ T5975] STV06xx 5-1:0.0: probe with driver STV06xx failed with error -71 [ 178.699637][ T30] audit: type=1400 audit(1758030283.546:412): avc: denied { prog_load } for pid=7229 comm="syz.3.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 178.708210][ T5975] usb 5-1: USB disconnect, device number 11 [ 178.816421][ T30] audit: type=1400 audit(1758030283.766:413): avc: denied { read } for pid=7205 comm="syz.4.340" name="loop8" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 178.842665][ T30] audit: type=1400 audit(1758030283.766:414): avc: denied { ioctl } for pid=7205 comm="syz.4.340" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 178.916213][ T30] audit: type=1400 audit(1758030283.886:415): avc: denied { write } for pid=7205 comm="syz.4.340" name="ip_vs" dev="proc" ino=4026533312 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=0 [ 179.000718][ T30] audit: type=1400 audit(1758030284.006:416): avc: denied { read write } for pid=5856 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 179.076301][ T30] audit: type=1400 audit(1758030284.116:417): avc: denied { read write } for pid=5851 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 179.155080][ T30] audit: type=1400 audit(1758030284.116:418): avc: denied { read write } for pid=7236 comm="syz.1.345" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 179.196215][ T30] audit: type=1400 audit(1758030284.126:419): avc: denied { map_create } for pid=7236 comm="syz.1.345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 179.235951][ T30] audit: type=1400 audit(1758030284.126:420): avc: denied { map_create } for pid=7236 comm="syz.1.345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 179.474250][ T7270] netlink: 8 bytes leftover after parsing attributes in process `syz.1.356'. [ 179.490075][ T7270] netlink: 24 bytes leftover after parsing attributes in process `syz.1.356'. [ 179.939749][ T7276] sit1: entered allmulticast mode [ 182.046125][ T7322] sch_fq: defrate 0 ignored. [ 183.050696][ T7341] FAULT_INJECTION: forcing a failure. [ 183.050696][ T7341] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 183.085340][ T7341] CPU: 0 UID: 0 PID: 7341 Comm: syz.1.383 Not tainted syzkaller #0 PREEMPT(full) [ 183.085366][ T7341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 183.085378][ T7341] Call Trace: [ 183.085384][ T7341] [ 183.085390][ T7341] dump_stack_lvl+0x16c/0x1f0 [ 183.085412][ T7341] should_fail_ex+0x512/0x640 [ 183.085431][ T7341] _copy_from_user+0x2e/0xd0 [ 183.085448][ T7341] kstrtouint_from_user+0xd6/0x1d0 [ 183.085461][ T7341] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 183.085473][ T7341] ? __lock_acquire+0xb97/0x1ce0 [ 183.085499][ T7341] proc_fail_nth_write+0x83/0x220 [ 183.085514][ T7341] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 183.085531][ T7341] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 183.085544][ T7341] vfs_write+0x29d/0x11d0 [ 183.085559][ T7341] ? __pfx___mutex_lock+0x10/0x10 [ 183.085575][ T7341] ? __pfx_vfs_write+0x10/0x10 [ 183.085595][ T7341] ? __fget_files+0x20e/0x3c0 [ 183.085613][ T7341] ksys_write+0x12a/0x250 [ 183.085625][ T7341] ? __pfx_ksys_write+0x10/0x10 [ 183.085641][ T7341] do_syscall_64+0xcd/0x4e0 [ 183.085658][ T7341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.085670][ T7341] RIP: 0033:0x7fa35858d65f [ 183.085680][ T7341] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 183.085692][ T7341] RSP: 002b:00007fa359383030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 183.085703][ T7341] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa35858d65f [ 183.085710][ T7341] RDX: 0000000000000001 RSI: 00007fa3593830a0 RDI: 0000000000000004 [ 183.085717][ T7341] RBP: 00007fa359383090 R08: 0000000000000000 R09: 0000000000000000 [ 183.085724][ T7341] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 183.085731][ T7341] R13: 00007fa3587d6128 R14: 00007fa3587d6090 R15: 00007ffe6ceaeb78 [ 183.085746][ T7341] [ 183.332595][ T30] kauditd_printk_skb: 2629 callbacks suppressed [ 183.332611][ T30] audit: type=1400 audit(1758030288.316:3049): avc: denied { read } for pid=5513 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 183.349074][ T5513] audit: audit_backlog=65 > audit_backlog_limit=64 [ 183.368660][ T5513] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 183.377958][ T5513] audit: backlog limit exceeded [ 183.378956][ T7343] audit: audit_backlog=65 > audit_backlog_limit=64 [ 183.383049][ T5513] audit: audit_backlog=65 > audit_backlog_limit=64 [ 183.406320][ T5513] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 183.411889][ T5855] audit: audit_backlog=65 > audit_backlog_limit=64 [ 183.413973][ T5513] audit: backlog limit exceeded [ 183.426238][ T5513] audit: audit_backlog=65 > audit_backlog_limit=64 [ 186.053257][ T7387] netlink: 4 bytes leftover after parsing attributes in process `syz.4.399'. [ 186.643390][ T7400] netlink: 28 bytes leftover after parsing attributes in process `syz.3.403'. [ 187.126497][ T7408] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 188.201958][ T7419] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 188.339420][ T30] kauditd_printk_skb: 7999 callbacks suppressed [ 188.339437][ T30] audit: type=1400 audit(1758030293.576:10378): avc: denied { read } for pid=5513 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 188.427342][ T5513] audit: audit_backlog=65 > audit_backlog_limit=64 [ 188.434251][ T5513] audit: audit_lost=228 audit_rate_limit=0 audit_backlog_limit=64 [ 188.442327][ T5513] audit: backlog limit exceeded [ 188.447543][ T30] audit: type=1400 audit(1758030293.606:10379): avc: denied { read } for pid=5513 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 188.473723][ T5513] audit: audit_backlog=65 > audit_backlog_limit=64 [ 188.477559][ T30] audit: type=1400 audit(1758030293.606:10380): avc: denied { read } for pid=5513 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 188.510867][ T30] audit: type=1400 audit(1758030293.606:10381): avc: denied { read } for pid=5513 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 188.517638][ T5513] audit: audit_lost=229 audit_rate_limit=0 audit_backlog_limit=64 [ 188.554130][ T30] audit: type=1400 audit(1758030293.606:10382): avc: denied { read } for pid=5513 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 188.910246][ T7427] bond0: entered promiscuous mode [ 188.936483][ T7427] bond_slave_0: entered promiscuous mode [ 188.955703][ T7427] bond_slave_1: entered promiscuous mode [ 189.063481][ T7429] bridge1: entered promiscuous mode [ 189.303011][ T7438] netlink: 8 bytes leftover after parsing attributes in process `syz.0.417'. [ 189.351252][ T7438] netlink: 4 bytes leftover after parsing attributes in process `syz.0.417'. [ 189.378555][ T7438] netlink: 'syz.0.417': attribute type 12 has an invalid length. [ 189.404050][ T7438] netlink: 'syz.0.417': attribute type 11 has an invalid length. [ 191.073534][ T7468] netlink: 4 bytes leftover after parsing attributes in process `syz.0.427'. [ 191.073597][ T7468] team0: left allmulticast mode [ 191.073615][ T7468] team_slave_0: left allmulticast mode [ 191.073631][ T7468] team_slave_1: left allmulticast mode [ 191.075506][ T7468] bridge0: port 3(team0) entered disabled state [ 191.085077][ T7468] bridge_slave_1: left allmulticast mode [ 191.085093][ T7468] bridge_slave_1: left promiscuous mode [ 191.085202][ T7468] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.093689][ T7468] bridge_slave_0: left allmulticast mode [ 191.093710][ T7468] bridge_slave_0: left promiscuous mode [ 191.093905][ T7468] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.721880][ T7480] team0: left promiscuous mode [ 191.721897][ T7480] team_slave_0: left promiscuous mode [ 191.721992][ T7480] team_slave_1: left promiscuous mode [ 191.724838][ T7480] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 192.301528][ T7492] netlink: 4 bytes leftover after parsing attributes in process `syz.4.435'. [ 193.306256][ T7506] mkiss: ax0: crc mode is auto. [ 193.346707][ T30] kauditd_printk_skb: 9114 callbacks suppressed [ 193.346724][ T30] audit: type=1400 audit(1758030298.586:18707): avc: denied { read } for pid=5513 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 193.397462][ T30] audit: type=1400 audit(1758030298.586:18708): avc: denied { read } for pid=5513 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 193.519247][ T30] audit: type=1400 audit(1758030298.586:18709): avc: denied { read } for pid=5513 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 193.519447][ T5513] audit: audit_backlog=65 > audit_backlog_limit=64 [ 193.572908][ T5513] audit: audit_lost=493 audit_rate_limit=0 audit_backlog_limit=64 [ 193.573920][ T30] audit: type=1400 audit(1758030298.586:18710): avc: denied { read } for pid=5513 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 193.609273][ T5513] audit: backlog limit exceeded [ 193.618516][ T5513] audit: audit_backlog=65 > audit_backlog_limit=64 [ 193.625133][ T5513] audit: audit_lost=494 audit_rate_limit=0 audit_backlog_limit=64 [ 193.696973][ T30] audit: type=1400 audit(1758030298.586:18711): avc: denied { read } for pid=5513 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 193.718102][ C1] vkms_vblank_simulate: vblank timer overrun [ 194.213781][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.225251][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.333703][ T7521] sch_fq: defrate 4294967295 ignored. [ 194.514946][ T7530] netlink: 4 bytes leftover after parsing attributes in process `syz.1.447'. [ 194.667512][ T7533] netlink: 'syz.0.449': attribute type 10 has an invalid length. [ 194.772058][ T7542] netlink: 8 bytes leftover after parsing attributes in process `syz.3.451'. [ 194.781052][ T7542] netlink: 24 bytes leftover after parsing attributes in process `syz.3.451'. [ 195.292804][ T10] IPVS: starting estimator thread 0... [ 195.386734][ T7555] IPVS: using max 63 ests per chain, 151200 per kthread [ 195.674953][ T7562] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 196.280389][ T5872] Bluetooth: hci2: command 0x0406 tx timeout [ 196.280433][ T5872] Bluetooth: hci3: command 0x0406 tx timeout [ 196.280471][ T5872] Bluetooth: hci0: command 0x0406 tx timeout [ 196.280501][ T5872] Bluetooth: hci1: command 0x0406 tx timeout [ 196.280561][ T5861] Bluetooth: hci4: command 0x0406 tx timeout [ 198.384257][ T30] kauditd_printk_skb: 6710 callbacks suppressed [ 198.384281][ T30] audit: type=1400 audit(1758030303.616:25004): avc: denied { prog_load } for pid=7604 comm="syz.2.471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 198.386601][ T30] audit: type=1400 audit(1758030303.626:25005): avc: denied { read } for pid=5513 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 198.397655][ T30] audit: type=1400 audit(1758030303.636:25006): avc: denied { read } for pid=5513 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 198.398218][ T30] audit: type=1400 audit(1758030303.636:25007): avc: denied { read } for pid=5513 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 198.406488][ T30] audit: type=1400 audit(1758030303.636:25008): avc: denied { read } for pid=5513 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 198.407264][ T30] audit: type=1400 audit(1758030303.646:25009): avc: denied { read } for pid=5513 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 198.407307][ T30] audit: type=1400 audit(1758030303.646:25010): avc: denied { read } for pid=5513 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 198.411643][ T30] audit: type=1400 audit(1758030303.646:25012): avc: denied { prog_load } for pid=7607 comm="syz.1.472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 198.418373][ T30] audit: type=1400 audit(1758030303.646:25011): avc: denied { read } for pid=5513 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 198.418402][ T30] audit: type=1400 audit(1758030303.656:25013): avc: denied { read } for pid=5513 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 200.482657][ T7634] netlink: 4 bytes leftover after parsing attributes in process `syz.4.481'. [ 200.734620][ T7644] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 201.813833][ T7656] netlink: 8 bytes leftover after parsing attributes in process `syz.3.489'. [ 201.823122][ T7656] netlink: 24 bytes leftover after parsing attributes in process `syz.3.489'. [ 202.281952][ T7670] netlink: 4 bytes leftover after parsing attributes in process `syz.1.495'. [ 203.590261][ T30] kauditd_printk_skb: 8470 callbacks suppressed [ 203.590283][ T30] audit: type=1400 audit(1758030308.576:32926): avc: denied { read } for pid=5513 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 203.621242][ T30] audit: type=1400 audit(1758030308.576:32927): avc: denied { read } for pid=5513 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 203.673426][ T30] audit: type=1400 audit(1758030308.576:32928): avc: denied { read } for pid=5513 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 203.673474][ T30] audit: type=1400 audit(1758030308.576:32929): avc: denied { read } for pid=5513 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 203.673514][ T30] audit: type=1400 audit(1758030308.646:32930): avc: denied { read } for pid=5513 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 203.673553][ T30] audit: type=1400 audit(1758030308.646:32931): avc: denied { read } for pid=5513 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 203.673592][ T30] audit: type=1400 audit(1758030308.646:32933): avc: denied { write } for pid=7685 comm="syz.4.501" name="event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=0 [ 203.673631][ T30] audit: type=1400 audit(1758030308.646:32934): avc: denied { write } for pid=7685 comm="syz.4.501" name="ip6_mr_vif" dev="proc" ino=4026533325 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=0 [ 203.673672][ T30] audit: type=1400 audit(1758030308.656:32935): avc: denied { create } for pid=7685 comm="syz.4.501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 203.677237][ T30] audit: type=1400 audit(1758030308.646:32932): avc: denied { read } for pid=5513 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 204.816749][ T7701] netlink: 4 bytes leftover after parsing attributes in process `syz.0.507'. [ 205.454608][ T7711] netlink: 8 bytes leftover after parsing attributes in process `syz.4.510'. [ 205.533713][ T7712] netlink: 8 bytes leftover after parsing attributes in process `syz.0.509'. [ 205.565679][ T7712] netlink: 24 bytes leftover after parsing attributes in process `syz.0.509'. [ 205.580560][ T7711] netlink: 4 bytes leftover after parsing attributes in process `syz.4.510'. [ 205.590712][ T7711] netlink: 'syz.4.510': attribute type 12 has an invalid length. [ 205.601571][ T7711] netlink: 'syz.4.510': attribute type 11 has an invalid length. [ 206.557184][ T7739] team0: Device ipip0 is of different type [ 207.008476][ T7746] netlink: 8 bytes leftover after parsing attributes in process `syz.2.523'. [ 207.074922][ T7746] netlink: 4 bytes leftover after parsing attributes in process `syz.2.523'. [ 207.088600][ T7746] netlink: 'syz.2.523': attribute type 12 has an invalid length. [ 207.096503][ T7746] netlink: 'syz.2.523': attribute type 11 has an invalid length. [ 208.197587][ T7767] netlink: 8 bytes leftover after parsing attributes in process `syz.1.529'. [ 208.206705][ T7767] netlink: 24 bytes leftover after parsing attributes in process `syz.1.529'. [ 208.597697][ T30] kauditd_printk_skb: 5351 callbacks suppressed [ 208.597719][ T30] audit: type=1400 audit(1758030313.836:37093): avc: denied { read } for pid=5513 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 208.655357][ T5513] audit: audit_backlog=65 > audit_backlog_limit=64 [ 208.660275][ T30] audit: type=1400 audit(1758030313.836:37094): avc: denied { read } for pid=5513 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 208.673760][ T5513] audit: audit_lost=1218 audit_rate_limit=0 audit_backlog_limit=64 [ 208.713543][ T5851] audit: audit_backlog=65 > audit_backlog_limit=64 [ 208.720290][ T30] audit: type=1400 audit(1758030313.836:37095): avc: denied { read } for pid=5513 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 208.728376][ T5851] audit: audit_lost=1219 audit_rate_limit=0 audit_backlog_limit=64 [ 208.751203][ T5513] audit: backlog limit exceeded [ 208.761600][ T5513] audit: audit_backlog=65 > audit_backlog_limit=64 [ 208.774964][ T7772] audit: audit_backlog=65 > audit_backlog_limit=64 [ 209.073645][ T7779] netlink: 8 bytes leftover after parsing attributes in process `syz.1.535'. [ 209.087851][ T7779] netlink: 4 bytes leftover after parsing attributes in process `syz.1.535'. [ 209.120323][ T7779] netlink: 'syz.1.535': attribute type 12 has an invalid length. [ 209.137980][ T7779] netlink: 'syz.1.535': attribute type 11 has an invalid length. [ 210.408193][ T7809] netlink: 8 bytes leftover after parsing attributes in process `syz.4.546'. [ 210.758747][ T7813] __nla_validate_parse: 1 callbacks suppressed [ 210.758765][ T7813] netlink: 8 bytes leftover after parsing attributes in process `syz.3.549'. [ 210.777836][ T7813] netlink: 4 bytes leftover after parsing attributes in process `syz.3.549'. [ 210.791862][ T7813] netlink: 'syz.3.549': attribute type 12 has an invalid length. [ 210.801533][ T7813] netlink: 'syz.3.549': attribute type 11 has an invalid length. [ 213.219371][ T7854] netlink: 8 bytes leftover after parsing attributes in process `syz.4.560'. [ 213.324816][ T7854] netlink: 4 bytes leftover after parsing attributes in process `syz.4.560'. [ 213.441678][ T7854] netlink: 'syz.4.560': attribute type 12 has an invalid length. [ 213.467955][ T7854] netlink: 'syz.4.560': attribute type 11 has an invalid length. [ 214.051066][ T30] kauditd_printk_skb: 5516 callbacks suppressed [ 214.051082][ T30] audit: type=1400 audit(1758030319.286:42580): avc: denied { read } for pid=5513 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 214.086185][ T30] audit: type=1400 audit(1758030319.286:42581): avc: denied { read } for pid=5513 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 214.206894][ T5513] audit: audit_backlog=65 > audit_backlog_limit=64 [ 214.213472][ T5513] audit: audit_lost=1231 audit_rate_limit=0 audit_backlog_limit=64 [ 214.221827][ T30] audit: type=1400 audit(1758030319.286:42582): avc: denied { read } for pid=5513 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 214.239644][ T7865] audit: audit_backlog=65 > audit_backlog_limit=64 [ 214.246567][ T5513] audit: backlog limit exceeded [ 214.263925][ T5513] audit: audit_backlog=65 > audit_backlog_limit=64 [ 214.285226][ T7865] audit: audit_lost=1232 audit_rate_limit=0 audit_backlog_limit=64 [ 214.302060][ T5513] audit: audit_lost=1233 audit_rate_limit=0 audit_backlog_limit=64 [ 214.314351][ T7865] netlink: 8 bytes leftover after parsing attributes in process `syz.1.562'. [ 214.323300][ T7865] netlink: 24 bytes leftover after parsing attributes in process `syz.1.562'. [ 214.429184][ T7860] mmap: syz.2.561 (7860) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 214.775425][ T7880] netlink: 4 bytes leftover after parsing attributes in process `syz.0.570'. [ 214.812071][ T7879] bridge1: entered promiscuous mode [ 216.090921][ T7906] netlink: 8 bytes leftover after parsing attributes in process `syz.3.578'. [ 216.107239][ T7906] netlink: 24 bytes leftover after parsing attributes in process `syz.3.578'. [ 216.539461][ T7916] netlink: 4 bytes leftover after parsing attributes in process `syz.1.582'. [ 217.705740][ T5925] libceph: connect (1)[c::]:6789 error -101 [ 217.711974][ T5925] libceph: mon0 (1)[c::]:6789 connect error [ 217.996531][ T5925] libceph: connect (1)[c::]:6789 error -101 [ 218.015484][ T5925] libceph: mon0 (1)[c::]:6789 connect error [ 218.489660][ T7940] ceph: No mds server is up or the cluster is laggy [ 219.065636][ T30] kauditd_printk_skb: 6670 callbacks suppressed [ 219.065651][ T30] audit: type=1400 audit(1758030324.276:49248): avc: denied { read } for pid=5513 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 219.171132][ T5513] audit: audit_backlog=65 > audit_backlog_limit=64 [ 219.190376][ T5513] audit: audit_lost=1235 audit_rate_limit=0 audit_backlog_limit=64 [ 219.200645][ T30] audit: type=1400 audit(1758030324.276:49249): avc: denied { read } for pid=5513 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 219.223189][ T5513] audit: backlog limit exceeded [ 219.228641][ T5513] audit: audit_backlog=65 > audit_backlog_limit=64 [ 219.235794][ T7972] audit: audit_backlog=65 > audit_backlog_limit=64 [ 219.242933][ T5513] audit: audit_lost=1236 audit_rate_limit=0 audit_backlog_limit=64 [ 219.252627][ T7972] audit: audit_lost=1237 audit_rate_limit=0 audit_backlog_limit=64 [ 219.261005][ T30] audit: type=1400 audit(1758030324.276:49250): avc: denied { read } for pid=5513 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 221.126786][ T8009] netlink: 4 bytes leftover after parsing attributes in process `syz.4.615'. [ 221.400266][ T8017] netlink: 132 bytes leftover after parsing attributes in process `syz.4.619'. [ 221.483930][ T8019] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8019 comm=syz.4.620 [ 222.088680][ T8026] netlink: 4 bytes leftover after parsing attributes in process `syz.4.623'. [ 222.313069][ T8032] netlink: 'syz.4.626': attribute type 4 has an invalid length. [ 222.750728][ T8046] netlink: 'syz.1.632': attribute type 4 has an invalid length. [ 222.802575][ T8049] netlink: 'syz.1.632': attribute type 4 has an invalid length. [ 222.867298][ T8046] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1011 sclass=netlink_route_socket pid=8046 comm=syz.1.632 [ 223.808286][ T8075] netlink: 'syz.0.642': attribute type 4 has an invalid length. [ 223.819768][ T8075] netlink: 'syz.0.642': attribute type 4 has an invalid length. [ 224.066328][ T30] kauditd_printk_skb: 15612 callbacks suppressed [ 224.066349][ T30] audit: type=1400 audit(1758030329.306:63628): avc: denied { read } for pid=5513 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 224.079140][ T5513] audit: audit_backlog=65 > audit_backlog_limit=64 [ 224.101913][ T5513] audit: audit_lost=1649 audit_rate_limit=0 audit_backlog_limit=64 [ 224.101945][ T30] audit: type=1400 audit(1758030329.306:63629): avc: denied { read } for pid=5513 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 224.110115][ T5513] audit: backlog limit exceeded [ 224.137170][ T5513] audit: audit_backlog=65 > audit_backlog_limit=64 [ 224.143733][ T5513] audit: audit_lost=1650 audit_rate_limit=0 audit_backlog_limit=64 [ 224.143900][ T30] audit: type=1400 audit(1758030329.306:63630): avc: denied { read } for pid=5513 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 224.151987][ T5513] audit: backlog limit exceeded [ 224.173476][ T30] audit: type=1400 audit(1758030329.306:63631): avc: denied { read } for pid=5513 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 224.613744][ T8085] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=40468 sclass=netlink_route_socket pid=8085 comm=syz.3.646 [ 225.443893][ T8103] ptm ptm10: ldisc open failed (-12), clearing slot 10 [ 225.599295][ T5859] libceph: connect (1)[c::]:6789 error -101 [ 225.605407][ T5859] libceph: mon0 (1)[c::]:6789 connect error [ 225.621562][ T5859] libceph: connect (1)[c::]:6789 error -101 [ 225.628848][ T5859] libceph: mon0 (1)[c::]:6789 connect error [ 225.886643][ T5975] libceph: connect (1)[c::]:6789 error -101 [ 225.893690][ T5975] libceph: mon0 (1)[c::]:6789 connect error [ 226.402747][ T8111] ceph: No mds server is up or the cluster is laggy [ 226.409788][ T5975] libceph: connect (1)[c::]:6789 error -101 [ 226.415829][ T5975] libceph: mon0 (1)[c::]:6789 connect error [ 226.852865][ T8127] netlink: 87 bytes leftover after parsing attributes in process `syz.4.660'. [ 227.572768][ T976] libceph: connect (1)[c::]:6789 error -101 [ 227.580852][ T976] libceph: mon0 (1)[c::]:6789 connect error [ 227.595353][ T976] libceph: connect (1)[c::]:6789 error -101 [ 227.617911][ T976] libceph: mon0 (1)[c::]:6789 connect error [ 227.897308][ T5975] libceph: connect (1)[c::]:6789 error -101 [ 227.930304][ T5975] libceph: mon0 (1)[c::]:6789 connect error [ 228.030014][ T8163] vlan2: entered promiscuous mode [ 228.042357][ T8163] vlan2: entered allmulticast mode [ 228.051339][ T8163] hsr_slave_1: entered allmulticast mode [ 228.356927][ T8152] ceph: No mds server is up or the cluster is laggy [ 229.080712][ T30] kauditd_printk_skb: 11085 callbacks suppressed [ 229.080728][ T30] audit: type=1400 audit(1758030334.314:74411): avc: denied { read } for pid=5513 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 229.121293][ T30] audit: type=1400 audit(1758030334.314:74412): avc: denied { read } for pid=5513 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 229.146284][ T30] audit: type=1400 audit(1758030334.314:74413): avc: denied { read } for pid=5513 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 229.172126][ T30] audit: type=1400 audit(1758030334.314:74414): avc: denied { read } for pid=5513 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 229.181871][ T5513] audit: audit_backlog=65 > audit_backlog_limit=64 [ 229.197949][ T8186] audit: audit_backlog=65 > audit_backlog_limit=64 [ 229.208791][ T8186] audit: audit_lost=1753 audit_rate_limit=0 audit_backlog_limit=64 [ 229.223984][ T8186] audit: backlog limit exceeded [ 229.245019][ T8186] audit: audit_backlog=65 > audit_backlog_limit=64 [ 229.251785][ T8186] audit: audit_lost=1754 audit_rate_limit=0 audit_backlog_limit=64 [ 229.860772][ T8200] netlink: 8 bytes leftover after parsing attributes in process `syz.2.689'. [ 229.902885][ T8200] netlink: 24 bytes leftover after parsing attributes in process `syz.2.689'. [ 230.160549][ T8206] Oops: general protection fault, probably for non-canonical address 0xdffffc000000005f: 0000 [#1] SMP KASAN NOPTI [ 230.172635][ T8206] KASAN: null-ptr-deref in range [0x00000000000002f8-0x00000000000002ff] [ 230.181030][ T8206] CPU: 0 UID: 0 PID: 8206 Comm: syz.1.691 Not tainted syzkaller #0 PREEMPT(full) [ 230.190233][ T8206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 230.200267][ T8206] RIP: 0010:h5_recv+0x104/0x950 [ 230.205098][ T8206] Code: c1 e8 03 4c 01 f0 48 89 44 24 08 48 8d 83 08 03 00 00 48 89 44 24 30 48 c1 e8 03 48 89 44 24 10 e8 a1 35 40 f9 48 8b 44 24 08 <80> 38 00 0f 85 ae 01 00 00 48 89 ea 48 89 e9 4c 8b bb f8 02 00 00 [ 230.224705][ T8206] RSP: 0018:ffffc90005577c00 EFLAGS: 00010293 [ 230.230754][ T8206] RAX: dffffc000000005f RBX: 0000000000000000 RCX: ffffffff887b675a [ 230.238700][ T8206] RDX: ffff88802eba0000 RSI: ffffffff887b679f RDI: 0000000000000005 [ 230.246647][ T8206] RBP: ffffc90005577d88 R08: 0000000000000005 R09: 0000000000000000 [ 230.254595][ T8206] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000001 [ 230.262550][ T8206] R13: 0000000000000001 R14: dffffc0000000000 R15: ffffffff8cb48720 [ 230.270509][ T8206] FS: 00007fa3593836c0(0000) GS:ffff8881246b2000(0000) knlGS:0000000000000000 [ 230.279421][ T8206] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 230.286005][ T8206] CR2: 0000200000189030 CR3: 0000000078924000 CR4: 00000000003526f0 [ 230.293969][ T8206] Call Trace: [ 230.297236][ T8206] [ 230.300146][ T8206] ? __pfx_h5_recv+0x10/0x10 [ 230.304716][ T8206] hci_uart_tty_receive+0x254/0x7e0 [ 230.309897][ T8206] ? __pfx_hci_uart_tty_receive+0x10/0x10 [ 230.315607][ T8206] tty_ioctl+0x580/0x1680 [ 230.319917][ T8206] ? __pfx_tty_ioctl+0x10/0x10 [ 230.324656][ T8206] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 230.331488][ T8206] ? hook_file_ioctl_common+0x145/0x410 [ 230.337022][ T8206] ? selinux_file_ioctl+0x180/0x270 [ 230.342214][ T8206] ? selinux_file_ioctl+0xb4/0x270 [ 230.347331][ T8206] ? __pfx_tty_ioctl+0x10/0x10 [ 230.352084][ T8206] __x64_sys_ioctl+0x18b/0x210 [ 230.356829][ T8206] do_syscall_64+0xcd/0x4e0 [ 230.361313][ T8206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.367180][ T8206] RIP: 0033:0x7fa35858eba9 [ 230.371567][ T8206] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 230.391175][ T8206] RSP: 002b:00007fa359383038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 230.399564][ T8206] RAX: ffffffffffffffda RBX: 00007fa3587d6090 RCX: 00007fa35858eba9 [ 230.407532][ T8206] RDX: 0000200000000280 RSI: 0000000000005412 RDI: 0000000000000007 [ 230.415480][ T8206] RBP: 00007fa358611e19 R08: 0000000000000000 R09: 0000000000000000 [ 230.423437][ T8206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 230.431398][ T8206] R13: 00007fa3587d6128 R14: 00007fa3587d6090 R15: 00007ffe6ceaeb78 [ 230.439352][ T8206] [ 230.442344][ T8206] Modules linked in: [ 230.446662][ T8206] ---[ end trace 0000000000000000 ]--- [ 230.477237][ T8206] RIP: 0010:h5_recv+0x104/0x950 [ 230.482111][ T8206] Code: c1 e8 03 4c 01 f0 48 89 44 24 08 48 8d 83 08 03 00 00 48 89 44 24 30 48 c1 e8 03 48 89 44 24 10 e8 a1 35 40 f9 48 8b 44 24 08 <80> 38 00 0f 85 ae 01 00 00 48 89 ea 48 89 e9 4c 8b bb f8 02 00 00 [ 230.507092][ T8206] RSP: 0018:ffffc90005577c00 EFLAGS: 00010293 [ 230.508195][ T8205] mkiss: ax0: crc mode is auto. [ 230.521224][ T8206] RAX: dffffc000000005f RBX: 0000000000000000 RCX: ffffffff887b675a [ 230.529345][ T8206] RDX: ffff88802eba0000 RSI: ffffffff887b679f RDI: 0000000000000005 Sep 16 13:45:35 syzkaller kern.alert kernel: [ [ 230.541372][ T8206] RBP: ffffc90005577d88 R08: 0000000000000005 R09: 0000000000000000 230.172635][ T82[ 230.553387][ T8206] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000001 06] KASAN: null-ptr-deref in range [0x00000000000002f8-0x00000000000002ff] [ 230.569986][ T8206] R13: 0000000000000001 R14: dffffc0000000000 R15: ffffffff8cb48720 [ 230.580924][ T8206] FS: 00007fa3593836c0(0000) GS:ffff8881246b2000(0000) knlGS:0000000000000000 [ 230.593956][ T8206] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 230.607019][ T8206] CR2: 000020000021b000 CR3: 0000000078924000 CR4: 00000000003526f0 [ 230.618400][ T8206] Kernel panic - not syncing: Fatal exception [ 230.624693][ T8206] Kernel Offset: disabled [ 230.628999][ T8206] Rebooting in 86400 seconds..