last executing test programs: 11.880826578s ago: executing program 4 (id=742): r0 = socket$key(0xf, 0x3, 0x2) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x0, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/seq/clients\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000200)={0x2020}, 0x2020) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, 0x0, 0x0, 0x0) r6 = syz_io_uring_setup(0x49a, &(0x7f0000000140)={0x0, 0x79b2, 0x3180, 0x1, 0x283}, 0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) io_uring_enter(r6, 0x627, 0x4c1, 0x63, 0x0, 0x0) r7 = timerfd_create(0x0, 0x0) syz_io_uring_setup(0x58f9, &(0x7f0000001a00)={0x0, 0x521f, 0x10100, 0x0, 0x104a}, &(0x7f0000000180)=0x0, &(0x7f0000000240)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r7, 0x0, &(0x7f0000002280)=""/4102, 0x1006, 0x1a}) timerfd_settime(r7, 0x2, &(0x7f00000005c0), 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b0400000004"], 0x18}, 0x1, 0x0, 0x0, 0x2004002c}, 0x20000000) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x20000000) 9.968290544s ago: executing program 1 (id=748): setsockopt$inet_sctp_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f0000000200)={0x7f}, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000180)=0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) sigaltstack(&(0x7f0000000000)={&(0x7f0000000280)=""/4124, 0x80000001, 0x101c}, 0x0) r1 = gettid() r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000500)="d8000000180081054e81f782db4cb904021d0800fe207c05e8fe55a10a0015000200142603600e12080005007f370401a8001600200006000c00027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r4, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}]}, 0x30}}, 0x4000804) (async) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r4, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}]}, 0x30}}, 0x4000804) timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) munlockall() (async) munlockall() 9.948695353s ago: executing program 4 (id=750): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f00000000c0), 0x8, &(0x7f0000000040)={[{@mode={'mode', 0x3d, 0xffff}}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket(0x2b, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, 0x0, 0x0) r4 = syz_io_uring_setup(0x110, &(0x7f0000000480)={0x0, 0xfad6, 0x400, 0x2}, &(0x7f0000000240)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}) io_uring_enter(r4, 0xdb4, 0x2000000, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r4, 0x18, &(0x7f0000000000)={0xfeffffff, r3, 0x3, {0x3b4, 0x6d3}, 0x6}, 0x1) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000001040)) write$UHID_INPUT(r0, &(0x7f0000000000)={0xfc, {"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", 0x1000}}, 0x1006) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001080)=ANY=[@ANYBLOB="34000000190001002abd7000ffdbdf251d01030015000200000000c027a42cd207c4001dd806010000c18ab2c782fa073d060000000800050006050300"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = socket(0x1e, 0x5, 0x0) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x3100, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r8, 0xc0145401, &(0x7f0000000200)={0x0, 0x2, 0x4, 0x1}) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e24, 0x2000013, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}, 0x17) 8.789908082s ago: executing program 1 (id=752): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x7fff, 0x0, 0x3, 0x0, 0x8001, 0xfa11, 0x9}, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/fscaps', 0x0, 0x1a2) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x4, @empty, 0xffffffff}, {0xa, 0x4e23, 0x7, @remote, 0x3}, 0xffffffffffffffff, 0x7}}, 0x48) r4 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x2, 0x5}}, 0x20) socket(0x10, 0x3, 0x0) r5 = socket(0x1e, 0x4, 0x0) recvmmsg$unix(r5, &(0x7f0000003100), 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000001600)={r2, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) 8.599543614s ago: executing program 4 (id=753): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b02", @ANYRES8], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000640)={0x2c, &(0x7f00000003c0)=ANY=[@ANYBLOB="000ded00"], 0x0, 0x0, 0x0, 0x0}) 7.548329977s ago: executing program 0 (id=755): openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1022002, 0x0) r0 = dup(0xffffffffffffffff) openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="30000000400007012bbd700000000000017c00000400c28014000180060006000806000006001700843b0000040002"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000240)={0x1, @raw_data="a425e2f1a54b24f15955565060608d70ff6e425a6c36af37b33facd22dc8a9c7044410d324b03e654156762092a62fea8f13441431ce248bfc73a6726ee61b5191d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d100a05e97ed3dcad452db6e08a991e2c78b057f55deebde6f0b11ce65700c0a1ad7946ff7c355db87566e3e5abb7a37b52876fd9fa194c09273031900"}) chdir(0x0) r6 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r6, 0x42, 0x1ff) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f0000000440)=ANY=[@ANYBLOB="062e00000d000000898807000d1200000000000806"]) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r7, &(0x7f0000000100)={0x29, 0x4, 0x0, {0x5, 0x2, 0x1, 0x0, [0x0]}}, 0x29) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x2000413, &(0x7f0000000380)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x8000}}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 6.077668818s ago: executing program 0 (id=759): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0xffffffffffffffff, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x80000004000000, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0x101, 0x0, 0x2, 0x0, 0x4002004c4, 0x1008, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x8000000b3, 0x8d], 0xeeee8000, 0x14d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.758488317s ago: executing program 1 (id=761): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r3, &(0x7f0000006180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0xffffffffffffeffe, 0xffffffffffffffff, 0x0, 0x0, {0x40, 0x8, 0xe, 0xfffc, 0x0, 0x1, 0x0, 0x0, 0x121, 0x2000, 0x0, r5, r6, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r3, &(0x7f0000000440)={0x50, 0x0, r4, {0x7, 0x29, 0x0, 0x1086cce0, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) r7 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x61d0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r7, 0x541b, &(0x7f0000000100)) syz_emit_ethernet(0x0, 0x0, 0x0) r8 = socket$inet(0x2, 0x5, 0x0) setsockopt$sock_int(r8, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r8, 0x0) recvmmsg(r8, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="202301"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 5.705824155s ago: executing program 2 (id=762): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001740)={0x60, r2, 0x1, 0x1, 0x25dfdc01, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9dd}}, {0x8, 0x6, r1}}}]}}]}, 0x60}, 0x1, 0x400000000000000}, 0x40810) (fail_nth: 1) 5.664503368s ago: executing program 0 (id=763): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x600008d0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000100)={0x1d, r5, 0x0, {}, 0xfd}, 0x18) connect$can_j1939(r4, &(0x7f0000000080)={0x1d, r5, 0x0, {0x0, 0x0, 0x2}, 0x2}, 0xfffffffffffffdc8) sendmmsg(r4, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000000680)="72e78ed8ea182f07e208020b94c5a565b5b75c239f24de2af2254e6801ad10a504c9673fe476206c42f9c293c8f4685e969bb14f8d51f465f9700fe718eff6a8110229780c815ed8bde7744fcaf616ec9ef272db0d2fcbb4cc8e4ad0b0afbfc10e1e360f596953b71c3001e22b97f9fd4acaadf57b7c414cff804d49d6783fd2ac9b8e8e6ba440ef7a996c0a240ec4c8c25149e0cbb654cb449bb8c7ea5567ef6883bcd8bc04c4838d2211ca2687dd1ad29a1bcb8a479536c5d7163fd8530d51fedbb9f0", 0xc4}, {&(0x7f0000000780)="f9d82cd2e772d7c6f108a70819599a6596bb07740de6d7f52390ac4a6ab4d1afeddc05796108b0eb836a97384551c03245e859401bbb52d854edb339880134fd66e3b63a0359d016cc0a914e509eafad001e", 0x52}, {&(0x7f00000002c0)="4c7a59a69f736a0223eb082806d90a0545d8c07547421f564fccb02a59b5643a8ac6847500", 0x25}, {&(0x7f0000000800)="e5014e2bd2e809712aff71c8d6d9e430c0fb011744bf2a03a54319fc28ba5a5b459d62a1e3c871909ef8bc0ab372164efb9d72cdaba898571888a4f9ab33e67d27f16b848e92c4ab8e77f8a4aee2c5ba00f14447168477da7f46cec78ba1ba82afa722f98ef9786a5bc94acec93122d3b8bf00c49ff2f09958bd4efeb0adad7dc5b3b8ee27a79ba1baf07276499ec5aca13e69a14892ecc62ce4163811d461389a43e561bc24e2ca52cc094ed6f69f97675a8c8e4b3967e582e43066b8ce80315d1c312ea8cbbdca08a866d1d65e4236d49c8e7283e10a169cd68242e3565ce176f3b42c594a", 0xe6}, {&(0x7f0000000900)="26fa1d33094c7d4f25dc8ee678ff7e07f8c2514844273470a181f5ca8a5d9f4986bffb1ed03a497aed7b9fbf22d9cee4118e4ab2ef08eb13c9fd0dac0a658fb95c9f3c9b4d99844e6bebcaa391d81694685ffcef29928290f56006959f11f6edb339f387fd274c779800529c7e896cbc90a171b030419e77e76694120d9a637971b9a9d5bb6c6f4e3df2f2aa3db93a78790059273285d9efe8c1e3f036eceee4226a437a2ceffa7c460002c49fe76d4e557e00e1eddfb5273aaa74c55657b4897e2df604c8292c7c35fbad4c128cd133d689e20adaba23248a6c56b5d21782b71c00fcf0ff64b6f734337006fcd80ec8e46257ed2b3410442696679e55c97dee62c78ae9eb6fb67bdb897034cd571c71b6498bc97e74004efe12b99460da072ff37c2de9818a78f4a2e7694e0ba518f221daacaf57593c7e78535e55f925329efadd98dc013fa69bc0ca1ca9d42fb20a13033faf064fbc6f5693f1a4ae961eef55dea73f0e80e14f4120babbfada9bbd72293aaae0e30d4dc6c3d23ba6efb36c2e58774a9561019979ffab543c113fa7926ee2642f16b20cb0dfd6ba1cce58323484b3cb3e81817762b66c8b898e0476891c167661aa16ebe7ca8f95894b75e447fa2de2a6a7dfa76c82c1f83c31d6fb5746b997be4ad8d49f2e8aa6c47ce79a7ea552132cad72e3254f0b49a56c6f3f061bb0a99e7c296aaf225a18a19e93fe3b5bacf5b3d7d54eaec7dffa8b1cf561049bd95f4b230af9603d46941698aae97a041f816915db5bdb8c5df3fc455cec5f5934fc6ab2e89525d090350bd6aec158f3b00bf18d2dd80dead640600fc109213cc0ef38e2b59a4fed2366df6ef0d804303648fc839ee14ce57a6aa32c9d17b2a726eb6642f083d136ea44199923217d6d470be42a5efac96583f51474d3c5fa790b67528174cb9786acb5bacccb9c46cf092ffdb4641df87b8268933262c1923173dd5ec11276d8694c0c9c807cb7b07ca3149eae22afeb3a670d1ff6080586b8ab5d24451fc70d0094cf929fab47b4011b74042e9816c792d9c760fef5619bd8cc8599069d5ba408404235935092aa4996dd9998f9706bb2e7f9ff0eece87d3c3c99d468ff10f9228c35513fa6748ffaa0a28877a03ff50d895821e7cc81725d0ffa3b8c3a66c83142300b7efd79ec5c4a336020a91dc896d68d0e1a9f9224afe0db3f02d2536e74892c0addfd24d1ab26ac5eee5e9124bf22f1befbe0a6228ffab5bcfdd29df4067adb45ab5b9093df90a776df37926b3b85f6e9328c45fc291d9e6420a8d74e27bb7c1a4713cea293550ca6f91c3596b32f80e56cd6de9f867e107fba23bbb1e91f30feb122b89f3970815e40105396922446e6383eeee1ea2783f7abfce873be750efdd262375efe0240be25de98c7b854d1e0d1463db596664b8ab63a49f69e4cf595b83129e54fa30b061a7eff111094c9d0390ad9aec1c0f887b083e13bfb47714575f334e3aa1fe341b40f6b92ba1ac967273afeba48915eec614c406e7fb44ed508824a26c5703ba8ae6f60b5d37be79c7bbd04959d05e8b08a8b594022ae782ca119daedd0a593b31550801b4d6e1449003f02c0ab0b71d069e8bfce6a54388a69e45aab411164ca9859ae2a52f97621a197bbeac7dbfb5a5e745c63fb7091cc98f4e438ac350e2c92f8b5c125681b8cdb50340b63828eef5c946b23b91a0eefd545db0fd6cf7a941e9c70a02c54c35d9cc8d45fc625d6c44fc4e18a", 0x4d9}], 0x5}}], 0x1, 0x10000000) socket$nl_generic(0x10, 0x3, 0x10) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@private1, @in=@local, 0x0, 0x0, 0x4e22, 0x0, 0x2, 0x0, 0x20, 0x1b}, {0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x10, 0x9}, {}, 0x4, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x24d2, 0x33}, 0x0, @in=@loopback, 0x3506, 0x0, 0x2, 0xb7, 0x2, 0xfffffff9}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) 5.463012595s ago: executing program 3 (id=764): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000840)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff3, 0x7}, {}, {0xfff3, 0xfff2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_FLAGS_MASK={0x8, 0x30, 0x5}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x40010) 5.382159705s ago: executing program 2 (id=765): r0 = socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(0xffffffffffffffff, 0x1, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) pread64(r5, &(0x7f00000000c0)=""/30, 0x1e, 0x800000000004) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x2b8, 0xb0000010, 0x0, 0x5c8f0200, 0x250, 0x3a8, 0x3a8, 0x250, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [0x0, 0x0, 0xffffffff], [], 'vlan1\x00', 'veth0_to_team\x00', {0xff}}, 0x0, 0xa8, 0xf0, 0x700, {0x1000000}}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8000206, 'syz1\x00'}}}, {{@uncond, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x87, 0x80, 0x2, 0xfe, 0x7, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @private0, @empty, [0x49fc5045ed3ae8ef, 0xff000000, 0x6675841787364651, 0xff], [0xff, 0xff000000, 0xff000000, 0xff], [0xffffff00, 0xffffff00, 0x8000007f, 0xff], 0x202, 0x8}}]}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0) getsockname$inet6(r6, 0x0, &(0x7f0000000100)) 5.16749509s ago: executing program 3 (id=766): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r0, r1, 0x0, 0x2000fb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000300)=0x3) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x20, 0x3, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x3, 0xff}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x4) 4.690900855s ago: executing program 4 (id=767): r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x2880, 0x0) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001000)='fd/3\x00') read$FUSE(r1, &(0x7f0000001040)={0x2020}, 0x2020) sendmsg$can_raw(r0, &(0x7f0000000240)={&(0x7f00000000c0), 0x10, &(0x7f0000000200)={&(0x7f0000000100)=@can={{0x3, 0x1, 0x1, 0x1}, 0x7, 0x3, 0x0, 0x0, "b448e1a594e941db"}, 0x10}, 0x1, 0x0, 0x0, 0x4008015}, 0x20008001) sigaltstack(&(0x7f0000000480)={&(0x7f0000008940)=""/4137, 0x80000001, 0x1029}, 0x0) sigaltstack(&(0x7f00000000c0)={0x0, 0x2}, &(0x7f0000000200)={0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000280)={0xffffffffffffffff}, 0x13f, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000300)={0x6, 0x118, 0xfa00, {{0x3, 0x7, "7ebf80d27d04cb72be56ab377cf5787c3790c0dc801a8a69dbb111edd70dd539a1fa40388e2d9a6bc7944ab6e5c98a6ac126c5355e65e7aeb7ac6063c1ca5a206bffba673a1b971fd68695e6f7bca7715ea1bcdcef3ef0df8b72c0c2c4d52086ef741090fe20f1c0ca31826b375ab735cf722aaa292c4ab1e3157073d28ba68ad8e618e81dd33b6dd8fc6c8979f3332dfb1cddd337231cb715750fe859727211c1a2215fc3511bebedd91b3220ce7b57dc67855844903d03b2f6d50b0fbb647b1c395df07c1187d233823e8816cb33da85f5fb7f8b8708a893b0cf3d7e1b206fd6e94aeab89a606aa0c3be9bc1f2d38e086087e7a3d6ff078c6882a948ab3d9b", 0xda, 0x4, 0x0, 0x5, 0x6, 0x6, 0x5}, r4}}, 0x120) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0043f933b0c996bc2700000000000000000400", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c00028005002c0001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x8044) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x84, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x20, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @dev}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}]}]}, 0x84}}, 0x0) 4.383775346s ago: executing program 2 (id=768): r0 = syz_io_uring_setup(0x5c2, &(0x7f00000002c0)={0x0, 0xa00c, 0x10, 0x1003, 0x21e}, &(0x7f0000000000)=0x0, &(0x7f0000000340)=0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x228800, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000200)={'aio_iiro_16\x00', [0x7, 0x6, 0x7, 0x7ff, 0x45f, 0x9, 0xfffffff7, 0x7, 0x1b, 0x0, 0x4, 0xffffffff, 0x40, 0x0, 0x4, 0x6, 0x872, 0xb932, 0x8000, 0x7, 0x9839, 0x1, 0x4, 0x0, 0x1, 0x5, 0x4, 0x1, 0x7, 0xfd, 0x3, 0x3ff]}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) r4 = syz_open_dev$cec(&(0x7f0000000340), 0x0, 0x0) ioctl$CEC_DQEVENT(r4, 0xc0506107, 0x0) ioctl$CEC_DQEVENT(r4, 0xc0506107, 0x0) ioctl$IOC_PR_PREEMPT(r4, 0x40046109, &(0x7f0000000040)={0xd0}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, 0x0, 0x34) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x10, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x0, 0x3938700}, 0x1, 0x8}) io_uring_enter(r0, 0x6efc, 0x3900, 0xb, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f00000000c0)={0x1, 0xffffffffffffffff, 0x21, {0x5, 0x1}, 0x9}, 0x1) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) connect$inet(r6, &(0x7f0000000440)={0x2, 0x4e21, @local}, 0x10) r7 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') getdents64(r7, &(0x7f0000000080)=""/147, 0x93) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f0000000100)={'fl512\x00', [0x34, 0x3fdb, 0x9, 0xe4, 0x40, 0x7, 0xff, 0x8, 0x0, 0x800, 0xff9, 0x7, 0x7, 0x5, 0x4, 0x0, 0x1, 0x800, 0x3, 0xd1, 0xfffffe00, 0x8, 0x7, 0x1, 0x3, 0x8, 0x8, 0xb3b, 0x8, 0xb, 0xffff, 0x5]}) 4.202189671s ago: executing program 4 (id=769): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1000000}, 0x50) close(0x3) syz_open_dev$MSR(0x0, 0x800, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0xb, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x5d}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x90) openat$dsp1(0xffffff9c, &(0x7f0000000040), 0x8000, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x3ec0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0xd231c4f959ad4808) syz_open_dev$dri(0x0, 0x1, 0x2200) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000001c0)=""/113, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r0, 0x8002f515, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x18) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'dummy0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.107787481s ago: executing program 3 (id=770): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@assoc={0x18, 0x117, 0x4, 0x10}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x40040}], 0x1, 0x8040) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x1401, 0x400, 0x70bd25, 0x25dfdbff}, 0x10}}, 0x0) recvmsg(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001240)=""/47, 0x2f}], 0x1}, 0x10002) (fail_nth: 1) 3.534247784s ago: executing program 2 (id=771): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) ptrace$getregs(0xe, r2, 0xfffffffffffffff9, &(0x7f0000000300)=""/237) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) lseek(r3, 0x6, 0x0) accept$unix(r3, &(0x7f00000001c0), &(0x7f00000002c0)=0x6e) r4 = socket$unix(0x1, 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x80) acct(&(0x7f0000000180)='./file1\x00') acct(0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r5 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x121000) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r5, 0xc0305710, &(0x7f0000000440)={0x1, 0x7f, 0x3e, 0x1, 0x10001000}) socket$nl_generic(0x10, 0x3, 0x10) 3.283517719s ago: executing program 0 (id=772): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) mkdir(&(0x7f0000000080)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./file1\x00') mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f00000003c0)='./bus\x00', 0x14b) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) pipe(&(0x7f0000000140)) (async) fsopen(&(0x7f0000000080)='autofs\x00', 0x0) (async) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) (async) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) fsmount(r1, 0x0, 0x2) (async) fchdir(r2) (async) mkdir(&(0x7f0000000080)='./bus\x00', 0x0) (async) chdir(&(0x7f0000000140)='./file1\x00') (async) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (async) mkdir(&(0x7f00000003c0)='./bus\x00', 0x14b) (async) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) (async) mount$overlay(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) 3.283381157s ago: executing program 3 (id=773): r0 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff}, [@call={0x85, 0x0, 0x0, 0x11}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000004cc0)={0x14, 0x43, 0x107, 0xfffffffe, 0x25dfdbfc, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) (fail_nth: 1) 2.693370803s ago: executing program 3 (id=774): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x7fff, 0x0, 0x3, 0x0, 0x8001, 0xfa11, 0x9}, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) socket$igmp(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f00000002c0)={0x80000000, 0x0, &(0x7f0000000300)}) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000280)={0x80000000, 0x0, &(0x7f0000000080)}) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000cc0)={0x0, 0x4, 0x0, &(0x7f0000000880)=[{}, {}, {}, {}], 0x3, 0x0, &(0x7f0000000a00)=[{}, {}, {}], 0x1, 0x0, &(0x7f0000000300)=[{0x0, 0x80000000, 0x0, {0x0}}], 0x8, 0x0, &(0x7f0000000b80)=[{}, {}, {}, {}, {}, {}, {}, {}]}) ioctl$MEDIA_IOC_SETUP_LINK(r3, 0xc0347c03, &(0x7f0000000380)={{0x80000000, 0x0, 0xf, [0x4, 0x77df1a8d]}, {0x80000000, r8, 0x2, [0xf5, 0xeb7f]}, 0x0, [0x1]}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b922, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xe, 0xb}, {0x6, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x3, 0x0, {0x0, 0x0, 0x0, r5, {0xc00, 0xf}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) r10 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r10, &(0x7f0000004c00)={0x2a, 0x4, 0x7fff}, 0xc) 2.412454767s ago: executing program 4 (id=775): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x7fff, 0x0, 0x3, 0x0, 0x8001, 0xfa11, 0x9}, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) socket$igmp(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f00000002c0)={0x80000000, 0x0, &(0x7f0000000300)}) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000280)={0x80000000, 0x0, &(0x7f0000000080)}) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000cc0)={0x0, 0x4, 0x0, &(0x7f0000000880)=[{}, {}, {}, {}], 0x3, 0x0, &(0x7f0000000a00)=[{}, {}, {}], 0x1, 0x0, &(0x7f0000000300)=[{0x0, 0x80000000, 0x0, {0x0}}], 0x8, 0x0, &(0x7f0000000b80)=[{}, {}, {}, {}, {}, {}, {}, {}]}) ioctl$MEDIA_IOC_SETUP_LINK(r3, 0xc0347c03, &(0x7f0000000380)={{0x80000000, 0x0, 0xf, [0x4, 0x77df1a8d]}, {0x80000000, r8, 0x2, [0xf5, 0xeb7f]}, 0x0, [0x1]}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b922, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xe, 0xb}, {0x6, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x3, 0x0, {0x0, 0x0, 0x0, r5, {0xc00, 0xf}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) r10 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r10, &(0x7f0000004c00)={0x2a, 0x4, 0x7fff}, 0xc) 2.186004469s ago: executing program 0 (id=776): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='uid_map\x00') exit(0x800) syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') bind$inet(r3, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x1a, &(0x7f00000007c0)=0x42000401, 0x4) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x7, @empty, 0xffffffff}, 0x1c) listen(r3, 0xb5d6) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}, 0x1c) getsockopt$bt_hci(r1, 0x84, 0x1, 0x0, &(0x7f0000000000)) r5 = socket(0x6, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x61d0, 0x0) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, &(0x7f0000000080), &(0x7f00000000c0)=0x8) 1.701719453s ago: executing program 1 (id=777): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000001c0), 0x268000, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xe}}, './file0\x00'}) setsockopt$inet_int(r1, 0x0, 0x5, &(0x7f0000000180)=0x8, 0x4) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, &(0x7f0000000100)={0x1, 0x7c, 0xfffffffffffffffd, 0x1, 0xffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f00000000c0)='fd', 0x0, r3) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f00000005c0)='fd', 0x0, r3) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r5) sendmsg$TIPC_NL_PUBL_GET(r5, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)={0x28, r6, 0x200, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x48810}, 0x20004000) sendmsg$TIPC_NL_BEARER_GET(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000600)={0x11d8, r6, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x11a4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x99a}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "7350a7a2757a408ff7b76573efa9e22bc9368d901272e936c6df4791a1cea2983b83fa"}}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "4b2be57eea5f6af1c5e5b8cb0a0146857cc6928e"}}, @TIPC_NLA_NODE_ID={0xf3, 0x3, "8faacc0efd67b6cbe84f55650a2169498815f56c4fe63862f97162998e11937eb5a8b9395986d51e4d3b1ffb7f16eb0dba2b6f07142d9a6c3f54f74ca2b64f26c3f3a0fafaa70cc471f4f08a0f17b253a6418c3e467e23145e7808714aa88a5e66c3fc7418815cc9542cb3d426a44b9329bf085a66000b995fc3ad37b011a8d1f7dcc34ab62dd17043208d854da9dea77805029dac11b6ef801a80dda061659b89810a099fb7a7a4d7f8d80ba40ad167314643126c77d20e31a2a0f10258d6465163d591778c81000ebfd411638673860108903ca40b1554e6cb9257d21d30cd6ae02e23e4b138ab149b734639d24a"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7f}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}]}, 0x11d8}, 0x1, 0x0, 0x0, 0x8085}, 0x20000001) write$FUSE_NOTIFY_INVAL_INODE(r2, &(0x7f0000000280)={0x28, 0x2, 0x0, {0x5, 0x6, 0x7f}}, 0x28) fchown(r0, 0x0, 0x0) 1.305045947s ago: executing program 1 (id=778): r0 = socket$key(0xf, 0x3, 0x2) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x0, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/seq/clients\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000200)={0x2020}, 0x2020) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r6 = syz_io_uring_setup(0x49a, &(0x7f0000000140)={0x0, 0x79b2, 0x3180, 0x1, 0x283}, 0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) io_uring_enter(r6, 0x627, 0x4c1, 0x63, 0x0, 0x0) r7 = timerfd_create(0x0, 0x0) timerfd_settime(r7, 0x2, &(0x7f00000005c0), 0x0) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b0400000004"], 0x18}, 0x1, 0x0, 0x0, 0x2004002c}, 0x20000000) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x20000000) 1.234265888s ago: executing program 3 (id=779): getdents64(0xffffffffffffffff, &(0x7f0000000000)=""/146, 0x92) open(0x0, 0x1, 0x104) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, 0x2, 0x3, 0x3, 0x0, 0x0, {0x2, 0x0, 0x10}}, 0x14}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbfe, {}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x4001, 0x3, 0x380, 0x1e8, 0xb, 0x148, 0x0, 0x148, 0x2e8, 0x240, 0x240, 0x2e8, 0x215, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x180, 0x1e8, 0x0, {0xff0f000000000000}, [@common=@inet=@multiport={{0x50}, {0x2, 0xb, [0x4e20, 0x4e23, 0x4e22, 0x4e24, 0x4e24, 0x4e24, 0x4e22, 0x4e23, 0x4e21, 0x4e20, 0x3, 0x4e22, 0x4e23, 0xeac, 0x4e23], [0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1]}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "d40b98e613e5c0d53fa5668bfbd8659b9ba9affcbed065733d0012e401764f592fc2c2bfb0e657e39980dd3655cfdfebceab664ab18605949120401237b982613cbdde69fbfbd40e9505ea3909a03f93f0be8cd9870b50e1d8a655f0a2cc7dba129d9af19184e11feeab1ddd11aa07abfef2f0ace242261fac91893e25989bb2", 0x4, 0x8a119efdab096be9}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x3, 0x8, 0x1, '\x00', 'syz0\x00', {0x8}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) sched_setscheduler(0x0, 0x2, 0x0) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x300, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe07, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3}) syz_emit_ethernet(0x52, &(0x7f00000000c0)={@local, @dev, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0xb, 0x4, 0x0, 0x0, 0x40, 0x2, 0x0, 0x1, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@generic={0x7, 0x2}, @timestamp_addr={0x44, 0x14, 0xc, 0x1, 0xf, [{@broadcast, 0xfffffff0}, {@local, 0x8001}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x1, 0x0, 0x40}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40858}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x100, {0x0, 0x0, 0x0, r8, {0xe, 0x1}}}, 0x24}}, 0x4) 1.061061804s ago: executing program 0 (id=780): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000001200)=0xd0, 0x4) r1 = socket$kcm(0x29, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x101}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 1.052079404s ago: executing program 2 (id=781): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)={0x14, r1, 0x30b, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x404c857}, 0x20060000) (fail_nth: 1) 134.591495ms ago: executing program 2 (id=782): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) r0 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x61d0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000100)) syz_emit_ethernet(0x0, 0x0, 0x0) 0s ago: executing program 1 (id=783): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) r0 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x61d0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000100)) (fail_nth: 1) syz_emit_ethernet(0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): =bpf permissive=1 [ 110.853231][ T30] audit: type=1400 audit(1774826880.856:409): avc: denied { write } for pid=6362 comm="syz.0.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 111.391465][ T6376] netlink: 4 bytes leftover after parsing attributes in process `syz.2.86'. [ 112.298883][ T6379] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 112.316633][ T6379] netlink: 'syz.3.87': attribute type 2 has an invalid length. [ 112.325088][ T6379] netlink: 132 bytes leftover after parsing attributes in process `syz.3.87'. [ 112.458180][ T10] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 112.475182][ T10] usb 2-1: MIDIStreaming interface descriptor not found [ 113.093844][ T10] usb 2-1: USB disconnect, device number 3 [ 113.188700][ T5796] udevd[5796]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 113.615779][ T6399] netlink: 20 bytes leftover after parsing attributes in process `syz.0.91'. [ 114.059873][ T6403] usb usb7: usbfs: process 6403 (syz.4.92) did not claim interface 0 before use [ 114.533743][ T6409] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 114.546249][ T6409] netlink: 'syz.3.93': attribute type 2 has an invalid length. [ 114.554020][ T6409] netlink: 132 bytes leftover after parsing attributes in process `syz.3.93'. [ 114.783973][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 114.783986][ T30] audit: type=1400 audit(1774826885.016:443): avc: denied { read } for pid=6411 comm="syz.1.94" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 114.831404][ T30] audit: type=1400 audit(1774826885.016:444): avc: denied { open } for pid=6411 comm="syz.1.94" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 115.268183][ T6419] netlink: 20 bytes leftover after parsing attributes in process `syz.0.95'. [ 115.528612][ T6422] netlink: 212356 bytes leftover after parsing attributes in process `syz.4.96'. [ 116.421708][ T30] audit: type=1400 audit(1774826886.386:445): avc: denied { bind } for pid=6424 comm="syz.2.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 116.712894][ T30] audit: type=1400 audit(1774826886.936:446): avc: denied { mounton } for pid=6430 comm="syz.3.98" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 116.842245][ T30] audit: type=1400 audit(1774826887.026:447): avc: denied { mount } for pid=6430 comm="syz.3.98" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 116.978027][ T6435] netlink: 8 bytes leftover after parsing attributes in process `syz.3.98'. [ 117.200503][ T30] audit: type=1400 audit(1774826887.426:448): avc: denied { bind } for pid=6430 comm="syz.3.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 117.322672][ T30] audit: type=1400 audit(1774826887.536:449): avc: denied { read write } for pid=6437 comm="syz.0.100" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 117.322823][ T30] audit: type=1400 audit(1774826887.536:450): avc: denied { open } for pid=6437 comm="syz.0.100" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 117.322938][ T30] audit: type=1400 audit(1774826887.546:451): avc: denied { ioctl } for pid=6437 comm="syz.0.100" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 117.593043][ T6442] netlink: 4 bytes leftover after parsing attributes in process `syz.0.100'. [ 117.633067][ T30] audit: type=1400 audit(1774826887.856:452): avc: denied { sys_module } for pid=6437 comm="syz.0.100" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 118.283711][ T6452] netlink: 164 bytes leftover after parsing attributes in process `syz.2.102'. [ 119.170266][ T6463] netlink: 4 bytes leftover after parsing attributes in process `syz.2.105'. [ 121.091855][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 121.091872][ T30] audit: type=1400 audit(1774826891.326:455): avc: denied { open } for pid=6476 comm="syz.1.108" path="/dev/ptyq7" dev="devtmpfs" ino=126 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 121.188313][ T6483] netlink: 4 bytes leftover after parsing attributes in process `syz.2.109'. [ 123.396342][ T5811] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 123.651484][ T5811] usb 1-1: Using ep0 maxpacket: 32 [ 123.658416][ T5811] usb 1-1: unable to get BOS descriptor or descriptor too short [ 123.669544][ T5811] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 123.680266][ T5811] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 123.725864][ T5811] usb 1-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 123.744552][ T5811] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.776435][ T5811] usb 1-1: Product: syz [ 123.789194][ T5811] usb 1-1: Manufacturer: syz [ 123.801473][ T5811] usb 1-1: SerialNumber: syz [ 124.542684][ T30] audit: type=1400 audit(1774826894.766:456): avc: denied { create } for pid=6505 comm="syz.3.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 124.562678][ T30] audit: type=1400 audit(1774826894.776:457): avc: denied { bind } for pid=6505 comm="syz.3.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 125.564376][ T5811] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 125.608594][ T5811] usb 1-1: MIDIStreaming interface descriptor not found [ 126.322504][ T5811] usb 1-1: USB disconnect, device number 2 [ 126.395302][ T5796] udevd[5796]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 126.600329][ T1221] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 126.731755][ T6538] C: renamed from team_slave_0 (while UP) [ 126.750509][ T6538] netlink: 164 bytes leftover after parsing attributes in process `syz.4.120'. [ 126.854971][ T1221] usb 3-1: Using ep0 maxpacket: 32 [ 126.862587][ T1221] usb 3-1: unable to get BOS descriptor or descriptor too short [ 126.887271][ T1221] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 126.907566][ T1221] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 126.952846][ T1221] usb 3-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 126.974295][ T1221] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.985893][ T1221] usb 3-1: Product: syz [ 126.990050][ T1221] usb 3-1: Manufacturer: syz [ 126.996057][ T1221] usb 3-1: SerialNumber: syz [ 127.342322][ T30] audit: type=1400 audit(1774826897.566:458): avc: denied { read } for pid=6539 comm="syz.3.122" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 127.389615][ T6542] x_tables: duplicate underflow at hook 3 [ 127.422959][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.429373][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 127.471817][ T30] audit: type=1400 audit(1774826897.576:459): avc: denied { open } for pid=6539 comm="syz.3.122" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 127.501459][ T30] audit: type=1400 audit(1774826897.606:460): avc: denied { ioctl } for pid=6539 comm="syz.3.122" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 127.922018][ T6552] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 127.934603][ T6552] netlink: 'syz.4.123': attribute type 2 has an invalid length. [ 127.950681][ T6552] netlink: 132 bytes leftover after parsing attributes in process `syz.4.123'. [ 128.164959][ T30] audit: type=1400 audit(1774826898.396:461): avc: denied { write } for pid=6554 comm="syz.0.125" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 128.469047][ T6564] netlink: 4 bytes leftover after parsing attributes in process `syz.1.126'. [ 128.469634][ T6564] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.788176][ T1221] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 128.797786][ T1221] usb 3-1: MIDIStreaming interface descriptor not found [ 128.820415][ T6564] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 129.076389][ T1221] usb 3-1: USB disconnect, device number 3 [ 131.335588][ T6597] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 131.344243][ T6597] netlink: 'syz.0.132': attribute type 2 has an invalid length. [ 131.369317][ T6597] netlink: 132 bytes leftover after parsing attributes in process `syz.0.132'. [ 131.499866][ T30] audit: type=1400 audit(1774826901.716:462): avc: denied { write } for pid=6595 comm="syz.1.133" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 132.462100][ T6609] netlink: 4 bytes leftover after parsing attributes in process `syz.3.135'. [ 134.312481][ T30] audit: type=1400 audit(1774826904.276:463): avc: denied { read write } for pid=6626 comm="syz.1.140" name="vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 134.362456][ T30] audit: type=1400 audit(1774826904.276:464): avc: denied { open } for pid=6626 comm="syz.1.140" path="/dev/vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 134.399425][ T30] audit: type=1400 audit(1774826904.276:465): avc: denied { create } for pid=6626 comm="syz.1.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 134.512992][ T30] audit: type=1400 audit(1774826904.276:466): avc: denied { ioctl } for pid=6626 comm="syz.1.140" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 136.318233][ T6657] usb usb7: usbfs: process 6657 (syz.3.145) did not claim interface 0 before use [ 137.071924][ T6666] netlink: 20 bytes leftover after parsing attributes in process `syz.4.147'. [ 137.236054][ T6667] usb usb7: usbfs: process 6667 (syz.1.146) did not claim interface 0 before use [ 138.173540][ T6672] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 138.184211][ T6672] netlink: 'syz.0.149': attribute type 2 has an invalid length. [ 138.408779][ T6672] netlink: 132 bytes leftover after parsing attributes in process `syz.0.149'. [ 138.472501][ T6685] netlink: 4 bytes leftover after parsing attributes in process `syz.2.150'. [ 139.840380][ T6703] netlink: 4 bytes leftover after parsing attributes in process `syz.0.153'. [ 140.120525][ T6707] usb usb7: usbfs: process 6707 (syz.2.154) did not claim interface 0 before use [ 140.482263][ T6711] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 140.772958][ T6718] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 140.784543][ T6718] netlink: 'syz.3.157': attribute type 2 has an invalid length. [ 140.941262][ T6718] netlink: 132 bytes leftover after parsing attributes in process `syz.3.157'. [ 141.946921][ T6732] netlink: 4 bytes leftover after parsing attributes in process `syz.2.158'. [ 144.386898][ T6773] x_tables: duplicate underflow at hook 3 [ 145.074240][ T6775] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 145.097188][ T6775] netlink: 'syz.4.168': attribute type 2 has an invalid length. [ 145.193648][ T6775] netlink: 132 bytes leftover after parsing attributes in process `syz.4.168'. [ 145.807670][ T6784] netlink: 4 bytes leftover after parsing attributes in process `syz.0.169'. [ 146.285587][ T6796] netlink: 4 bytes leftover after parsing attributes in process `syz.4.171'. [ 146.888840][ T6808] netlink: 4 bytes leftover after parsing attributes in process `syz.2.174'. [ 147.218866][ T6800] netlink: 'syz.1.172': attribute type 2 has an invalid length. [ 147.226720][ T6800] netlink: 132 bytes leftover after parsing attributes in process `syz.1.172'. [ 148.717449][ T6831] netlink: 32 bytes leftover after parsing attributes in process `syz.0.177'. [ 148.726502][ T6831] netlink: 32 bytes leftover after parsing attributes in process `syz.0.177'. [ 149.459144][ T6838] netlink: 4 bytes leftover after parsing attributes in process `syz.1.179'. [ 150.997941][ T6853] QAT: failed to copy from user cfg_data. [ 151.280749][ T30] audit: type=1400 audit(1774826921.506:467): avc: denied { create } for pid=6852 comm="syz.3.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 151.281326][ T5810] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 151.551943][ T5810] usb 1-1: Using ep0 maxpacket: 32 [ 151.597784][ T5810] usb 1-1: unable to get BOS descriptor or descriptor too short [ 151.615709][ T5810] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 151.644625][ T5810] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 151.651241][ T5817] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 151.714253][ T5810] usb 1-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 151.738919][ T5810] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.752000][ T5810] usb 1-1: Product: syz [ 151.756307][ T5810] usb 1-1: Manufacturer: syz [ 151.760971][ T5810] usb 1-1: SerialNumber: syz [ 151.876295][ T5817] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 151.899296][ T5817] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 151.925901][ T5817] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 151.947355][ T5817] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.956877][ T5817] usb 3-1: Product: syz [ 151.961365][ T5817] usb 3-1: Manufacturer: syz [ 151.965970][ T5817] usb 3-1: SerialNumber: syz [ 152.004612][ T5817] usb 3-1: config 0 descriptor?? [ 152.010298][ T6857] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 152.020302][ T6857] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 152.231965][ T6857] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 152.239546][ T6857] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 152.664894][ T5817] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 152.735827][ T6869] netlink: 8 bytes leftover after parsing attributes in process `syz.1.187'. [ 153.165603][ T5817] dm9601 3-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 153.259342][ T30] audit: type=1326 audit(1774826923.066:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6866 comm="syz.1.187" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f34c199c799 code=0x0 [ 153.314164][ T5810] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 153.341852][ T5810] usb 1-1: MIDIStreaming interface descriptor not found [ 153.376862][ T5817] usb 3-1: USB disconnect, device number 4 [ 153.436025][ T5810] usb 1-1: USB disconnect, device number 3 [ 153.572890][ T5796] udevd[5796]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 153.950632][ T6881] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 154.591234][ T5817] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 154.991333][ T5817] usb 5-1: Using ep0 maxpacket: 32 [ 154.998172][ T5817] usb 5-1: unable to get BOS descriptor or descriptor too short [ 155.016920][ T5817] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 155.049075][ T5817] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 155.088457][ T5817] usb 5-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 155.106955][ T5817] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.128816][ T5817] usb 5-1: Product: syz [ 155.137077][ T5817] usb 5-1: Manufacturer: syz [ 155.147266][ T5817] usb 5-1: SerialNumber: syz [ 155.662059][ T6901] netlink: 32 bytes leftover after parsing attributes in process `syz.3.193'. [ 155.671015][ T6901] netlink: 32 bytes leftover after parsing attributes in process `syz.3.193'. [ 157.522205][ T5817] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 157.530336][ T5817] usb 5-1: MIDIStreaming interface descriptor not found [ 157.921619][ T6917] netlink: 4 bytes leftover after parsing attributes in process `syz.4.197'. [ 158.177785][ T5817] usb 5-1: USB disconnect, device number 4 [ 158.222737][ T5796] udevd[5796]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 158.227958][ T5825] udevd[5825]: setting owner of /dev/snd/midiC3D0 to uid=0, gid=29 failed: No such file or directory [ 158.832069][ T10] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 159.068838][ T6927] netlink: 212356 bytes leftover after parsing attributes in process `syz.3.199'. [ 159.102129][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 159.109225][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 159.121608][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 159.134970][ T10] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 159.255350][ T10] usb 3-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 159.264560][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.272770][ T10] usb 3-1: Product: syz [ 159.277971][ T10] usb 3-1: Manufacturer: syz [ 159.282801][ T10] usb 3-1: SerialNumber: syz [ 159.539539][ T6930] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 159.549272][ T6930] block device autoloading is deprecated and will be removed. [ 159.648431][ T6929] md: md2 stopped. [ 160.252815][ T6940] usb usb7: usbfs: process 6940 (syz.0.201) did not claim interface 0 before use [ 160.681167][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 160.852463][ T30] audit: type=1400 audit(1774826931.006:469): avc: denied { create } for pid=6942 comm="syz.3.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 161.016360][ T6949] QAT: failed to copy from user cfg_data. [ 161.760253][ T10] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 161.767426][ T10] usb 3-1: MIDIStreaming interface descriptor not found [ 161.917408][ T10] usb 3-1: USB disconnect, device number 5 [ 163.224012][ T6977] netlink: 212356 bytes leftover after parsing attributes in process `syz.3.209'. [ 163.544670][ T6983] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 163.562611][ T6983] block device autoloading is deprecated and will be removed. [ 164.448109][ T6993] usb usb7: usbfs: process 6993 (syz.4.212) did not claim interface 0 before use [ 164.567347][ T6995] netlink: 4 bytes leftover after parsing attributes in process `syz.1.210'. [ 166.911288][ T5810] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 167.201262][ T5810] usb 5-1: Using ep0 maxpacket: 32 [ 167.222801][ T5810] usb 5-1: unable to get BOS descriptor or descriptor too short [ 167.257674][ T5810] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 167.286849][ T5810] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 167.461519][ T7036] x_tables: duplicate underflow at hook 3 [ 167.498703][ T5810] usb 5-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 167.508491][ T5810] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.518543][ T5810] usb 5-1: Product: syz [ 167.539600][ T5810] usb 5-1: Manufacturer: syz [ 167.960795][ T5810] usb 5-1: SerialNumber: syz [ 168.232954][ T7046] netlink: 212356 bytes leftover after parsing attributes in process `syz.2.221'. [ 168.369229][ T7046] md: md2 stopped. [ 169.071946][ T7060] netlink: 4 bytes leftover after parsing attributes in process `syz.2.224'. [ 169.348222][ T7062] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 169.403955][ T5810] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 169.411397][ T5810] usb 5-1: MIDIStreaming interface descriptor not found [ 169.642006][ T7070] x_tables: duplicate underflow at hook 3 [ 169.834893][ T5810] usb 5-1: USB disconnect, device number 5 [ 169.979227][ T5796] udevd[5796]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 170.351363][ T5810] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 170.513453][ T5810] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 170.524199][ T5810] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 170.536499][ T5810] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 170.549830][ T5810] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.558707][ T5810] usb 5-1: Product: syz [ 170.689427][ T5810] usb 5-1: Manufacturer: syz [ 170.694210][ T5810] usb 5-1: SerialNumber: syz [ 170.709425][ T5810] usb 5-1: config 0 descriptor?? [ 170.716751][ T7069] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 170.725891][ T7069] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 170.769388][ T7082] netlink: 8 bytes leftover after parsing attributes in process `syz.0.227'. [ 170.778370][ T7082] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 170.800392][ T7082] netlink: 76 bytes leftover after parsing attributes in process `syz.0.227'. [ 170.909366][ T30] audit: type=1326 audit(1774826941.096:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7075 comm="syz.0.227" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f23b579c799 code=0x0 [ 171.677564][ T7069] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 171.691407][ T7069] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 171.840714][ T7087] netlink: 32 bytes leftover after parsing attributes in process `syz.1.229'. [ 171.851234][ T7087] netlink: 32 bytes leftover after parsing attributes in process `syz.1.229'. [ 172.106090][ T5810] Error reading MAC address [ 172.124493][ T5810] usb 5-1: USB disconnect, device number 6 [ 172.181232][ T5811] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 172.411344][ T7108] netlink: 32 bytes leftover after parsing attributes in process `syz.3.234'. [ 172.421250][ T7108] netlink: 32 bytes leftover after parsing attributes in process `syz.3.234'. [ 172.579324][ T5811] usb 3-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.7f [ 172.588597][ T5811] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.605895][ T5811] usb 3-1: config 0 descriptor?? [ 172.681153][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 173.186987][ T30] audit: type=1400 audit(1774826943.396:471): avc: denied { mount } for pid=7094 comm="syz.2.231" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 174.094464][ T7124] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 174.113179][ T7122] netlink: 'syz.1.235': attribute type 2 has an invalid length. [ 174.127657][ T7122] netlink: 132 bytes leftover after parsing attributes in process `syz.1.235'. [ 174.984161][ T5811] usb 3-1: string descriptor 0 read error: -71 [ 174.994334][ T5811] ldusb 3-1:0.0: Interrupt in endpoint not found [ 175.023450][ T30] audit: type=1400 audit(1774826945.256:472): avc: denied { unmount } for pid=5807 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 175.048757][ T5811] usb 3-1: USB disconnect, device number 6 [ 176.289851][ T7148] usb usb7: usbfs: process 7148 (syz.1.240) did not claim interface 0 before use [ 176.449043][ T7155] netlink: 4 bytes leftover after parsing attributes in process `syz.0.241'. [ 178.987626][ T30] audit: type=1400 audit(1774826949.216:473): avc: denied { read write } for pid=5816 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 179.202392][ T30] audit: type=1400 audit(1774826949.246:474): avc: denied { open } for pid=5808 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 179.258887][ T30] audit: type=1400 audit(1774826949.246:475): avc: denied { ioctl } for pid=5808 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 179.401602][ T30] audit: type=1400 audit(1774826949.266:476): avc: denied { allowed } for pid=7175 comm="syz.1.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 179.559375][ T30] audit: type=1400 audit(1774826949.306:477): avc: denied { name_bind } for pid=7175 comm="syz.1.246" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 179.710094][ T30] audit: type=1400 audit(1774826949.546:478): avc: denied { create } for pid=7182 comm="syz.0.247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 179.806362][ T30] audit: type=1400 audit(1774826949.576:479): avc: denied { prog_load } for pid=7180 comm="syz.4.248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 179.869887][ T30] audit: type=1400 audit(1774826949.576:480): avc: denied { bpf } for pid=7180 comm="syz.4.248" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 179.958626][ T30] audit: type=1400 audit(1774826949.576:481): avc: denied { perfmon } for pid=7180 comm="syz.4.248" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 180.099887][ T30] audit: type=1400 audit(1774826949.726:482): avc: denied { create } for pid=7182 comm="syz.0.247" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 180.215471][ T7192] netlink: 4 bytes leftover after parsing attributes in process `syz.2.249'. [ 180.440080][ T7201] netlink: 'syz.3.250': attribute type 2 has an invalid length. [ 180.447958][ T7201] netlink: 132 bytes leftover after parsing attributes in process `syz.3.250'. [ 181.184706][ T7210] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 182.177855][ T7230] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 182.369369][ T7232] netlink: 44 bytes leftover after parsing attributes in process `syz.2.256'. [ 183.336915][ T7240] usb usb7: usbfs: process 7240 (syz.3.258) did not claim interface 0 before use [ 183.416965][ T7241] netlink: 8 bytes leftover after parsing attributes in process `syz.0.257'. [ 184.202378][ T7248] x_tables: duplicate underflow at hook 3 [ 184.432169][ T7252] netlink: 212356 bytes leftover after parsing attributes in process `syz.2.261'. [ 184.469470][ T30] kauditd_printk_skb: 44 callbacks suppressed [ 184.469482][ T30] audit: type=1400 audit(1774826954.696:527): avc: denied { read write } for pid=7251 comm="syz.2.261" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 184.557435][ T7253] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 184.599111][ T30] audit: type=1400 audit(1774826954.696:528): avc: denied { open } for pid=7251 comm="syz.2.261" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 184.629193][ T7253] block device autoloading is deprecated and will be removed. [ 184.690589][ T30] audit: type=1400 audit(1774826954.696:529): avc: denied { mounton } for pid=7251 comm="syz.2.261" path="/56/file0" dev="tmpfs" ino=312 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 184.799139][ T30] audit: type=1400 audit(1774826954.726:530): avc: denied { mount } for pid=7251 comm="syz.2.261" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 185.067479][ T30] audit: type=1400 audit(1774826954.786:531): avc: denied { read } for pid=7251 comm="syz.2.261" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 185.148689][ T30] audit: type=1400 audit(1774826954.786:532): avc: denied { open } for pid=7251 comm="syz.2.261" path="/56/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 185.268648][ T30] audit: type=1400 audit(1774826954.916:533): avc: denied { unmount } for pid=5807 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 185.340081][ T30] audit: type=1400 audit(1774826955.166:534): avc: denied { setopt } for pid=7254 comm="syz.2.262" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 185.610722][ T30] audit: type=1400 audit(1774826955.326:535): avc: denied { create } for pid=7254 comm="syz.2.262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 185.879527][ T30] audit: type=1400 audit(1774826955.326:536): avc: denied { bind } for pid=7254 comm="syz.2.262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 186.156286][ T7269] netlink: 4 bytes leftover after parsing attributes in process `syz.4.264'. [ 186.809817][ T7275] netlink: 4 bytes leftover after parsing attributes in process `syz.2.266'. [ 187.915379][ T7293] netlink: 4 bytes leftover after parsing attributes in process `syz.1.269'. [ 188.074865][ T7292] netlink: 4 bytes leftover after parsing attributes in process `syz.4.268'. [ 188.837864][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 188.845553][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 189.637313][ T7319] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.273'. [ 189.912686][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 189.912697][ T30] audit: type=1400 audit(1774826959.936:548): avc: denied { accept } for pid=7315 comm="syz.2.274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 189.982220][ T30] audit: type=1400 audit(1774826959.936:549): avc: denied { setopt } for pid=7315 comm="syz.2.274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 190.336433][ T7331] md: md2 stopped. [ 190.869851][ T30] audit: type=1400 audit(1774826960.416:550): avc: denied { write } for pid=7315 comm="syz.2.274" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 190.869911][ T30] audit: type=1400 audit(1774826960.416:551): avc: denied { open } for pid=7315 comm="syz.2.274" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 190.869948][ T30] audit: type=1400 audit(1774826960.516:552): avc: denied { create } for pid=7320 comm="syz.3.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 190.869979][ T30] audit: type=1400 audit(1774826960.516:553): avc: denied { connect } for pid=7320 comm="syz.3.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 190.870009][ T30] audit: type=1400 audit(1774826960.516:554): avc: denied { name_connect } for pid=7320 comm="syz.3.275" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 190.870038][ T30] audit: type=1400 audit(1774826960.536:555): avc: denied { listen } for pid=7320 comm="syz.3.275" lport=58538 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 190.870070][ T30] audit: type=1400 audit(1774826960.536:556): avc: denied { accept } for pid=7320 comm="syz.3.275" lport=58538 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 190.870100][ T30] audit: type=1400 audit(1774826960.536:557): avc: denied { write } for pid=7320 comm="syz.3.275" lport=58538 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 190.949544][ T5813] Bluetooth: hci3: command 0x0406 tx timeout [ 190.949563][ T5823] Bluetooth: hci4: command 0x0406 tx timeout [ 190.949585][ T5813] Bluetooth: hci2: command 0x0406 tx timeout [ 190.949607][ T5813] Bluetooth: hci0: command 0x0406 tx timeout [ 190.949628][ T5823] Bluetooth: hci1: command 0x0406 tx timeout [ 191.307646][ T7335] netlink: 8 bytes leftover after parsing attributes in process `syz.0.276'. [ 191.595088][ T7341] usb usb7: usbfs: process 7341 (syz.4.278) did not claim interface 0 before use [ 191.651224][ T5881] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 191.846410][ T5881] usb 2-1: no configurations [ 191.846425][ T5881] usb 2-1: can't read configurations, error -22 [ 191.971192][ T5881] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 192.131697][ T5881] usb 2-1: no configurations [ 192.136755][ T5881] usb 2-1: can't read configurations, error -22 [ 192.152027][ T5881] usb usb2-port1: attempt power cycle [ 192.528980][ T5881] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 192.626469][ T5881] usb 2-1: no configurations [ 192.631225][ T5881] usb 2-1: can't read configurations, error -22 [ 192.648436][ T7348] x_tables: duplicate underflow at hook 3 [ 192.761372][ T5881] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 192.796640][ T5881] usb 2-1: no configurations [ 192.801447][ T5881] usb 2-1: can't read configurations, error -22 [ 192.808549][ T5881] usb usb2-port1: unable to enumerate USB device [ 193.094074][ T7359] netlink: 8 bytes leftover after parsing attributes in process `syz.3.282'. [ 193.204520][ T7361] netlink: 4 bytes leftover after parsing attributes in process `syz.2.283'. [ 194.751074][ T7383] netlink: 4 bytes leftover after parsing attributes in process `syz.1.287'. [ 195.094155][ T5881] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 195.421317][ T5881] usb 3-1: Using ep0 maxpacket: 32 [ 195.428471][ T5881] usb 3-1: unable to get BOS descriptor or descriptor too short [ 195.437575][ T5881] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 195.449468][ T5881] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 195.501782][ T5881] usb 3-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 195.511105][ T5881] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.541599][ T5881] usb 3-1: Product: syz [ 195.563589][ T5881] usb 3-1: Manufacturer: syz [ 195.586522][ T5881] usb 3-1: SerialNumber: syz [ 195.893347][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 195.893366][ T30] audit: type=1400 audit(1774826966.076:564): avc: denied { read write } for pid=7386 comm="syz.3.288" name="video1" dev="devtmpfs" ino=933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 196.130478][ T30] audit: type=1400 audit(1774826966.076:565): avc: denied { open } for pid=7386 comm="syz.3.288" path="/dev/video1" dev="devtmpfs" ino=933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 196.219607][ T30] audit: type=1400 audit(1774826966.086:566): avc: denied { ioctl } for pid=7386 comm="syz.3.288" path="/dev/video1" dev="devtmpfs" ino=933 ioctlcmd=0x5605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 197.047801][ T7403] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 197.209704][ T5881] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 197.217005][ T5881] usb 3-1: MIDIStreaming interface descriptor not found [ 197.404717][ T5881] usb 3-1: USB disconnect, device number 7 [ 199.252833][ T7428] netlink: 32 bytes leftover after parsing attributes in process `syz.2.294'. [ 199.269077][ T7428] netlink: 32 bytes leftover after parsing attributes in process `syz.2.294'. [ 201.071519][ T7437] netlink: 4 bytes leftover after parsing attributes in process `syz.1.296'. [ 201.949993][ T30] audit: type=1400 audit(1774826971.656:567): avc: denied { bind } for pid=7442 comm="syz.4.301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 202.621083][ T7465] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.302'. [ 203.124064][ T7470] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 203.133628][ T7470] block device autoloading is deprecated and will be removed. [ 203.211031][ T7469] md: md2 stopped. [ 203.748677][ T30] audit: type=1400 audit(1774826973.976:568): avc: denied { setopt } for pid=7477 comm="syz.1.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 203.955458][ T30] audit: type=1400 audit(1774826974.186:569): avc: denied { create } for pid=7483 comm="syz.4.307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 204.020407][ T30] audit: type=1400 audit(1774826974.206:570): avc: denied { write } for pid=7473 comm="syz.0.304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 204.070321][ T30] audit: type=1400 audit(1774826974.206:571): avc: denied { read } for pid=7473 comm="syz.0.304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 204.144366][ T7486] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 204.187913][ T7486] block device autoloading is deprecated and will be removed. [ 204.197858][ T30] audit: type=1400 audit(1774826974.216:572): avc: denied { read write } for pid=7483 comm="syz.4.307" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 204.197903][ T30] audit: type=1400 audit(1774826974.216:573): avc: denied { open } for pid=7483 comm="syz.4.307" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 204.197938][ T30] audit: type=1400 audit(1774826974.216:574): avc: denied { mounton } for pid=7483 comm="syz.4.307" path="/55/file0" dev="tmpfs" ino=310 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 204.197977][ T30] audit: type=1400 audit(1774826974.216:575): avc: denied { mount } for pid=7483 comm="syz.4.307" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 204.198006][ T30] audit: type=1400 audit(1774826974.286:576): avc: denied { read } for pid=7483 comm="syz.4.307" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 207.300616][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 207.300633][ T30] audit: type=1400 audit(1774826977.526:601): avc: denied { read write } for pid=7508 comm="syz.0.313" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 207.334636][ T30] audit: type=1400 audit(1774826977.566:602): avc: denied { open } for pid=7508 comm="syz.0.313" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 208.154498][ T30] audit: type=1400 audit(1774826978.306:603): avc: denied { create } for pid=7513 comm="syz.4.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 208.228981][ T30] audit: type=1400 audit(1774826978.316:604): avc: denied { setopt } for pid=7513 comm="syz.4.314" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 208.271216][ T30] audit: type=1400 audit(1774826978.456:605): avc: denied { create } for pid=7513 comm="syz.4.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 208.358791][ T30] audit: type=1400 audit(1774826978.456:606): avc: denied { bind } for pid=7513 comm="syz.4.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 208.791396][ T7522] netlink: 4 bytes leftover after parsing attributes in process `syz.0.315'. [ 209.441528][ T30] audit: type=1400 audit(1774826979.626:607): avc: denied { read } for pid=7523 comm="syz.2.316" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 209.467733][ T30] audit: type=1400 audit(1774826979.626:608): avc: denied { open } for pid=7523 comm="syz.2.316" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 209.491870][ T30] audit: type=1400 audit(1774826979.626:609): avc: denied { ioctl } for pid=7523 comm="syz.2.316" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 209.643830][ T30] audit: type=1400 audit(1774826979.746:610): avc: denied { create } for pid=7523 comm="syz.2.316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 210.429674][ T7537] netlink: 4 bytes leftover after parsing attributes in process `syz.1.318'. [ 211.435662][ T7536] netlink: 8 bytes leftover after parsing attributes in process `syz.3.317'. [ 212.362408][ T7557] x_tables: duplicate underflow at hook 3 [ 212.380219][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 212.380236][ T30] audit: type=1400 audit(1774826982.606:623): avc: denied { write } for pid=7550 comm="syz.0.320" name="igmp" dev="proc" ino=4026532862 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 212.834264][ T7568] netlink: 4 bytes leftover after parsing attributes in process `syz.3.323'. [ 213.120723][ T7568] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 213.168912][ T7568] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 213.252394][ T30] audit: type=1400 audit(1774826983.476:624): avc: denied { read } for pid=7569 comm="syz.2.324" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 213.395741][ T30] audit: type=1400 audit(1774826983.476:625): avc: denied { open } for pid=7569 comm="syz.2.324" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 213.420733][ T30] audit: type=1400 audit(1774826983.476:626): avc: denied { ioctl } for pid=7569 comm="syz.2.324" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 213.565189][ T30] audit: type=1400 audit(1774826983.796:627): avc: denied { write } for pid=7569 comm="syz.2.324" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 214.165351][ T30] audit: type=1400 audit(1774826984.396:628): avc: denied { mounton } for pid=7578 comm="syz.2.326" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 214.261039][ T7585] netlink: 8 bytes leftover after parsing attributes in process `syz.2.326'. [ 214.281326][ T30] audit: type=1400 audit(1774826984.506:629): avc: denied { bind } for pid=7578 comm="syz.2.326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 215.324885][ T7593] netlink: 8 bytes leftover after parsing attributes in process `syz.4.328'. [ 217.617904][ T30] audit: type=1400 audit(1774826987.846:630): avc: denied { bind } for pid=7615 comm="syz.2.333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 217.640065][ T30] audit: type=1400 audit(1774826987.866:631): avc: denied { read write } for pid=7615 comm="syz.2.333" name="video1" dev="devtmpfs" ino=933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 217.713761][ T7621] netlink: 32 bytes leftover after parsing attributes in process `syz.2.333'. [ 217.722786][ T7621] netlink: 32 bytes leftover after parsing attributes in process `syz.2.333'. [ 217.810562][ T30] audit: type=1400 audit(1774826987.896:632): avc: denied { open } for pid=7615 comm="syz.2.333" path="/dev/video1" dev="devtmpfs" ino=933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 217.869145][ T7620] netlink: 32 bytes leftover after parsing attributes in process `syz.4.334'. [ 217.888133][ T7620] netlink: 32 bytes leftover after parsing attributes in process `syz.4.334'. [ 217.899481][ T30] audit: type=1400 audit(1774826987.896:633): avc: denied { ioctl } for pid=7615 comm="syz.2.333" path="/dev/video1" dev="devtmpfs" ino=933 ioctlcmd=0x5605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 217.932389][ T30] audit: type=1400 audit(1774826987.966:634): avc: denied { read } for pid=7615 comm="syz.2.333" name="system" dev="devtmpfs" ino=700 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 217.958360][ T30] audit: type=1400 audit(1774826987.966:635): avc: denied { open } for pid=7615 comm="syz.2.333" path="/dev/dma_heap/system" dev="devtmpfs" ino=700 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 218.006942][ T30] audit: type=1400 audit(1774826987.966:636): avc: denied { ioctl } for pid=7615 comm="syz.2.333" path="/dev/dma_heap/system" dev="devtmpfs" ino=700 ioctlcmd=0x4800 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 218.060408][ T7626] netlink: 8 bytes leftover after parsing attributes in process `syz.0.335'. [ 218.115170][ T7626] netlink: 28 bytes leftover after parsing attributes in process `syz.0.335'. [ 218.214631][ T30] audit: type=1400 audit(1774826988.346:637): avc: denied { write } for pid=7623 comm="syz.0.335" name="swradio0" dev="devtmpfs" ino=956 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 218.246230][ T30] audit: type=1326 audit(1774826988.476:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7623 comm="syz.0.335" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f23b579c799 code=0x0 [ 219.448661][ T30] audit: type=1400 audit(1774826989.286:639): avc: denied { read write } for pid=7632 comm="syz.3.337" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 219.504869][ T7638] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.338'. [ 219.581200][ T5914] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 219.887305][ T7640] md: md2 stopped. [ 220.181216][ T5914] usb 4-1: Using ep0 maxpacket: 32 [ 220.189903][ T5914] usb 4-1: unable to get BOS descriptor or descriptor too short [ 220.199995][ T5914] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 220.210618][ T5914] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 220.225535][ T5914] usb 4-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 220.237558][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.245628][ T5914] usb 4-1: Product: syz [ 220.250580][ T5914] usb 4-1: Manufacturer: syz [ 220.255365][ T5914] usb 4-1: SerialNumber: syz [ 220.283380][ T7643] netlink: 212356 bytes leftover after parsing attributes in process `syz.4.340'. [ 221.460270][ T7655] netlink: 8 bytes leftover after parsing attributes in process `syz.2.341'. [ 221.491967][ T7657] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.342'. [ 221.885076][ T7660] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 221.885180][ T7660] block device autoloading is deprecated and will be removed. [ 221.962516][ T7659] md: md2 stopped. [ 222.259601][ T7664] netlink: 8 bytes leftover after parsing attributes in process `syz.0.343'. [ 222.279697][ T7664] netlink: 28 bytes leftover after parsing attributes in process `syz.0.343'. [ 222.389251][ T5914] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 222.409050][ T5914] usb 4-1: MIDIStreaming interface descriptor not found [ 222.618206][ T5914] usb 4-1: USB disconnect, device number 3 [ 222.715749][ T7672] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 222.771731][ T7672] block device autoloading is deprecated and will be removed. [ 222.812022][ T5824] udevd[5824]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 223.352017][ T5914] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 223.518877][ T5914] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 223.531253][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.561577][ T5914] usb 4-1: Product: syz [ 223.565776][ T5914] usb 4-1: Manufacturer: syz [ 223.570382][ T5914] usb 4-1: SerialNumber: syz [ 223.594298][ T5914] usb 4-1: config 0 descriptor?? [ 224.502346][ T5914] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 224.553216][ T7693] netlink: 4 bytes leftover after parsing attributes in process `syz.0.349'. [ 225.508581][ T7706] netlink: 20 bytes leftover after parsing attributes in process `syz.1.351'. [ 225.606662][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 225.606682][ T30] audit: type=1400 audit(1774826995.726:650): avc: denied { write } for pid=7698 comm="syz.1.351" lport=248 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 225.867393][ T30] audit: type=1400 audit(1774826996.056:651): avc: denied { shutdown } for pid=7696 comm="syz.0.350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 226.146667][ T5914] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 226.158394][ T5914] usb 4-1: USB disconnect, device number 4 [ 226.859297][ T7716] netlink: 212356 bytes leftover after parsing attributes in process `syz.3.354'. [ 226.880280][ T7717] usb usb7: usbfs: process 7717 (syz.2.353) did not claim interface 0 before use [ 226.905129][ T30] audit: type=1400 audit(1774826997.106:652): avc: denied { write } for pid=7711 comm="syz.2.353" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 228.417217][ T7725] netlink: 4 bytes leftover after parsing attributes in process `syz.0.355'. [ 229.298012][ T7742] netlink: 8 bytes leftover after parsing attributes in process `syz.1.357'. [ 229.351293][ T24] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 229.882848][ T24] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 229.893983][ T24] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 229.910015][ T24] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 229.920179][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.929968][ T24] usb 5-1: Product: syz [ 229.935288][ T24] usb 5-1: Manufacturer: syz [ 229.940706][ T24] usb 5-1: SerialNumber: syz [ 229.955263][ T24] usb 5-1: config 0 descriptor?? [ 229.961884][ T7734] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 229.995894][ T7734] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 230.155244][ T7749] netlink: 8 bytes leftover after parsing attributes in process `syz.3.360'. [ 230.331558][ T7734] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 230.331632][ T7734] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 230.834280][ T24] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 231.135572][ T24] dm9601 5-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 231.140303][ T24] usb 5-1: USB disconnect, device number 7 [ 231.300321][ T30] audit: type=1400 audit(1774827001.486:653): avc: denied { write } for pid=7757 comm="syz.1.362" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 232.831179][ T30] audit: type=1400 audit(1774827003.046:654): avc: denied { write } for pid=7763 comm="syz.4.363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 232.954014][ T7778] netlink: 212356 bytes leftover after parsing attributes in process `syz.1.365'. [ 232.983223][ T30] audit: type=1400 audit(1774827003.136:655): avc: denied { read } for pid=7763 comm="syz.4.363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 233.238245][ T30] audit: type=1400 audit(1774827003.456:656): avc: denied { map_read map_write } for pid=7780 comm="syz.2.366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 233.296036][ T7786] usb usb7: usbfs: process 7786 (syz.2.366) did not claim interface 0 before use [ 233.496705][ T30] audit: type=1400 audit(1774827003.706:657): avc: denied { open } for pid=7784 comm="syz.0.367" path="/dev/ptyq5" dev="devtmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 234.568666][ T7800] netlink: 212396 bytes leftover after parsing attributes in process `syz.1.369'. [ 235.140570][ T7812] md: md2 stopped. [ 235.643178][ T30] audit: type=1400 audit(1774827005.876:658): avc: denied { create } for pid=7804 comm="syz.2.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 235.684267][ T7807] netlink: 68 bytes leftover after parsing attributes in process `syz.2.371'. [ 235.763610][ T30] audit: type=1400 audit(1774827005.896:659): avc: denied { setopt } for pid=7804 comm="syz.2.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 235.821175][ T30] audit: type=1400 audit(1774827005.916:660): avc: denied { sqpoll } for pid=7804 comm="syz.2.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 235.856020][ T7826] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 235.860661][ T30] audit: type=1400 audit(1774827005.916:661): avc: denied { write } for pid=7804 comm="syz.2.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 235.933212][ T30] audit: type=1400 audit(1774827005.916:662): avc: denied { nlmsg_write } for pid=7804 comm="syz.2.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 235.992490][ T7807] netlink: 'syz.2.371': attribute type 29 has an invalid length. [ 235.992550][ T5810] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 236.000791][ T7821] netlink: 'syz.2.371': attribute type 29 has an invalid length. [ 236.246652][ T5810] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 236.261256][ T5810] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 236.459368][ T5810] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 236.753847][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 236.753878][ T30] audit: type=1400 audit(1774827006.656:667): avc: denied { create } for pid=7828 comm="syz.4.376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 236.904085][ T5810] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.975416][ T5810] usb 2-1: Product: syz [ 236.980498][ T5810] usb 2-1: Manufacturer: syz [ 236.985460][ T5810] usb 2-1: SerialNumber: syz [ 237.041330][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 237.059804][ T5810] usb 2-1: config 0 descriptor?? [ 237.065777][ T7824] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 237.075705][ T7824] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 237.286456][ T7841] netlink: 4 bytes leftover after parsing attributes in process `syz.2.378'. [ 237.305850][ T7824] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 237.392037][ T7824] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 237.821685][ T30] audit: type=1400 audit(1774827008.046:668): avc: denied { create } for pid=7843 comm="syz.3.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 238.675510][ T7853] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 238.704767][ T30] audit: type=1400 audit(1774827008.876:669): avc: denied { execute } for pid=7843 comm="syz.3.380" name="file2" dev="tmpfs" ino=391 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 238.711144][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 238.737680][ T30] audit: type=1400 audit(1774827008.886:670): avc: denied { execute_no_trans } for pid=7843 comm="syz.3.380" path="/70/file2" dev="tmpfs" ino=391 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 239.259964][ T7866] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 239.299442][ T7866] block device autoloading is deprecated and will be removed. [ 239.535227][ T7870] netlink: 212396 bytes leftover after parsing attributes in process `syz.3.385'. [ 240.563897][ T5810] Error reading MAC address [ 240.583518][ T5810] usb 2-1: USB disconnect, device number 8 [ 240.622749][ T5825] udevd[5825]: setting mode of /dev/bus/usb/002/008 to 020664 failed: No such file or directory [ 240.623018][ T5825] udevd[5825]: setting owner of /dev/bus/usb/002/008 to uid=0, gid=0 failed: No such file or directory [ 242.237326][ T7885] netlink: 4 bytes leftover after parsing attributes in process `syz.1.386'. [ 243.544477][ T7909] x_tables: duplicate underflow at hook 3 [ 245.103688][ T7933] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.397'. [ 245.192025][ T1221] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 246.247849][ T1221] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 246.290855][ T1221] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 246.759071][ T1221] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 246.768542][ T1221] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.783787][ T1221] usb 5-1: Product: syz [ 246.787980][ T1221] usb 5-1: Manufacturer: syz [ 246.797447][ T1221] usb 5-1: SerialNumber: syz [ 246.808758][ T1221] usb 5-1: config 0 descriptor?? [ 246.818929][ T7931] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 246.826495][ T7931] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 246.831198][ T24] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 246.991273][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 247.081400][ T30] audit: type=1400 audit(1774827017.256:671): avc: denied { setopt } for pid=7948 comm="syz.1.400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 247.150388][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 247.159058][ T7931] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 247.192043][ T7931] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 247.219975][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 247.239792][ T30] audit: type=1400 audit(1774827017.436:672): avc: denied { write } for pid=7948 comm="syz.1.400" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 247.239858][ T24] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 247.312841][ T24] usb 4-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 247.331204][ T30] audit: type=1400 audit(1774827017.436:673): avc: denied { open } for pid=7948 comm="syz.1.400" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 247.333210][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.556808][ T24] usb 4-1: Product: syz [ 247.564694][ T24] usb 4-1: Manufacturer: syz [ 247.575511][ T24] usb 4-1: SerialNumber: syz [ 247.624534][ T7959] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.402'. [ 247.684730][ T1221] Error reading MAC address [ 248.042572][ T7962] md: md2 stopped. [ 248.476123][ T5914] usb 5-1: USB disconnect, device number 8 [ 248.965718][ T24] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 248.965757][ T24] usb 4-1: MIDIStreaming interface descriptor not found [ 249.006170][ T24] usb 4-1: USB disconnect, device number 5 [ 249.288045][ T7978] netlink: 8 bytes leftover after parsing attributes in process `syz.2.403'. [ 249.531352][ T7985] netlink: 4 bytes leftover after parsing attributes in process `syz.4.406'. [ 250.559567][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 250.559630][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 251.371239][ T5811] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 251.537155][ T5811] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 251.553715][ T5811] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 251.563236][ T5811] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.577707][ T5811] usb 2-1: Product: syz [ 251.585772][ T5811] usb 2-1: Manufacturer: syz [ 251.774793][ T5811] usb 2-1: SerialNumber: syz [ 251.808308][ T5811] usb 2-1: config 0 descriptor?? [ 252.830516][ T8024] netlink: 8 bytes leftover after parsing attributes in process `syz.4.415'. [ 253.715530][ T8037] fuse: Bad value for 'fd' [ 254.439098][ T793] usb 2-1: USB disconnect, device number 9 [ 254.840794][ T8054] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.423'. [ 256.466900][ T8060] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 256.478665][ T8060] block device autoloading is deprecated and will be removed. [ 256.527191][ T8062] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.424'. [ 256.909617][ T8064] md: md2 stopped. [ 257.026090][ T8059] x_tables: duplicate underflow at hook 3 [ 257.586437][ T8081] netlink: 4 bytes leftover after parsing attributes in process `syz.0.427'. [ 258.619474][ T8087] netlink: 4 bytes leftover after parsing attributes in process `syz.1.428'. [ 259.210274][ T8089] fuse: Bad value for 'fd' [ 259.497314][ T8094] usb usb7: usbfs: process 8094 (syz.4.430) did not claim interface 0 before use [ 261.577165][ T8113] QAT: failed to copy from user cfg_data. [ 261.590761][ T30] audit: type=1400 audit(1774827031.816:674): avc: denied { prog_run } for pid=8112 comm="syz.3.436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 261.630575][ T30] audit: type=1400 audit(1774827031.856:675): avc: denied { setopt } for pid=8112 comm="syz.3.436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 261.770894][ T30] audit: type=1400 audit(1774827031.996:676): avc: denied { create } for pid=8111 comm="syz.1.435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 263.701664][ T5914] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 263.930409][ T5914] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 263.948501][ T5914] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 263.953607][ T8135] fuse: Bad value for 'fd' [ 263.970420][ T5914] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 263.981834][ T5914] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.989939][ T5914] usb 5-1: Product: syz [ 263.995680][ T5914] usb 5-1: Manufacturer: syz [ 264.000341][ T5914] usb 5-1: SerialNumber: syz [ 264.012628][ T5914] usb 5-1: config 0 descriptor?? [ 264.018609][ T8132] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 264.027861][ T8132] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 264.249021][ T8132] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 264.281995][ T8132] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 264.503373][ T8142] netlink: 4 bytes leftover after parsing attributes in process `syz.0.442'. [ 264.909676][ T5914] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 265.215672][ T5914] dm9601 5-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 265.264260][ T5914] usb 5-1: USB disconnect, device number 9 [ 268.911228][ T793] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 269.103286][ T793] usb 2-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.7f [ 269.120076][ T793] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.152144][ T793] usb 2-1: config 0 descriptor?? [ 269.441122][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 269.516598][ T8196] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 270.105372][ T30] audit: type=1400 audit(1774827039.816:677): avc: denied { mount } for pid=8173 comm="syz.1.449" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 270.353145][ T30] audit: type=1400 audit(1774827040.466:678): avc: denied { read } for pid=8201 comm="syz.4.456" name="event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 270.464431][ T8204] netlink: 4 bytes leftover after parsing attributes in process `syz.4.456'. [ 271.697144][ T30] audit: type=1400 audit(1774827041.926:679): avc: denied { unmount } for pid=5803 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 271.723423][ T793] usb 2-1: string descriptor 0 read error: -71 [ 271.736551][ T793] ldusb 2-1:0.0: Interrupt in endpoint not found [ 271.751928][ T793] usb 2-1: USB disconnect, device number 10 [ 273.399360][ T8224] x_tables: duplicate underflow at hook 3 [ 274.165821][ T8236] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 274.787199][ T8253] netlink: 4 bytes leftover after parsing attributes in process `syz.3.465'. [ 275.695005][ T30] audit: type=1400 audit(1774827045.636:680): avc: denied { create } for pid=8256 comm="syz.1.467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 276.321225][ T1221] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 276.931283][ T1221] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 276.969971][ T1221] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 276.983758][ T1221] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 276.994821][ T1221] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.009001][ T1221] usb 1-1: Product: syz [ 277.036679][ T1221] usb 1-1: Manufacturer: syz [ 277.050019][ T1221] usb 1-1: SerialNumber: syz [ 277.076755][ T1221] usb 1-1: config 0 descriptor?? [ 277.088859][ T8262] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 277.097098][ T8262] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 277.217470][ T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 277.819988][ T8262] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 277.837479][ T8262] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 277.891274][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 277.907207][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 277.928590][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 278.007581][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 278.022675][ T9] usb 3-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 278.034079][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.042626][ T9] usb 3-1: Product: syz [ 278.046793][ T9] usb 3-1: Manufacturer: syz [ 278.054605][ T9] usb 3-1: SerialNumber: syz [ 278.411529][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 278.579053][ T1221] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 278.729284][ T8289] netlink: 32 bytes leftover after parsing attributes in process `syz.4.473'. [ 278.738264][ T8289] netlink: 32 bytes leftover after parsing attributes in process `syz.4.473'. [ 278.778274][ T1221] dm9601 1-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 278.797439][ T1221] usb 1-1: USB disconnect, device number 4 [ 279.097705][ T8296] x_tables: duplicate underflow at hook 3 [ 279.625910][ T9] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 279.642331][ T9] usb 3-1: MIDIStreaming interface descriptor not found [ 279.929181][ T8307] netlink: 20 bytes leftover after parsing attributes in process `syz.2.477'. [ 279.978574][ T9] usb 3-1: USB disconnect, device number 8 [ 280.353417][ T8313] netlink: 8 bytes leftover after parsing attributes in process `syz.1.476'. [ 280.504628][ T5794] udevd[5794]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 282.391383][ T30] audit: type=1400 audit(1774827052.236:681): avc: denied { ioctl } for pid=8328 comm="syz.1.484" path="/dev/input/event0" dev="devtmpfs" ino=918 ioctlcmd=0x450a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 285.172384][ T8370] netlink: 4 bytes leftover after parsing attributes in process `syz.3.490'. [ 286.621263][ T5881] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 286.883881][ T5881] usb 4-1: Using ep0 maxpacket: 32 [ 286.893635][ T5881] usb 4-1: unable to get BOS descriptor or descriptor too short [ 287.040262][ T5881] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 287.073389][ T5881] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 287.204482][ T5881] usb 4-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 287.217826][ T5881] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.257748][ T5881] usb 4-1: Product: syz [ 287.281304][ T5881] usb 4-1: Manufacturer: syz [ 287.302837][ T5881] usb 4-1: SerialNumber: syz [ 287.726376][ T8387] x_tables: duplicate underflow at hook 3 [ 289.652974][ T5881] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 289.655952][ T8412] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.498'. [ 289.660008][ T5881] usb 4-1: MIDIStreaming interface descriptor not found [ 290.150478][ T8415] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 290.160085][ T8415] block device autoloading is deprecated and will be removed. [ 290.237278][ T8414] md: md2 stopped. [ 290.628221][ T5881] usb 4-1: USB disconnect, device number 6 [ 290.922957][ T8427] netlink: 212356 bytes leftover after parsing attributes in process `syz.0.501'. [ 291.246998][ T8435] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 291.289179][ T8435] block device autoloading is deprecated and will be removed. [ 291.308371][ T8437] netlink: 4 bytes leftover after parsing attributes in process `syz.1.503'. [ 291.463661][ T8431] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 291.903663][ T8442] QAT: failed to copy from user cfg_data. [ 293.454307][ T8465] netlink: 4 bytes leftover after parsing attributes in process `syz.0.508'. [ 294.261173][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 294.332970][ T8473] netlink: 4 bytes leftover after parsing attributes in process `syz.1.510'. [ 294.913252][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 295.053677][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 295.075858][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 295.101203][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 295.133760][ T9] usb 4-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 295.163566][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.216064][ T9] usb 4-1: Product: syz [ 295.220262][ T9] usb 4-1: Manufacturer: syz [ 295.256586][ T9] usb 4-1: SerialNumber: syz [ 295.503743][ T8484] netlink: 212356 bytes leftover after parsing attributes in process `syz.0.514'. [ 295.524222][ T8485] netlink: 20 bytes leftover after parsing attributes in process `syz.4.513'. [ 295.651755][ T8484] md: md2 stopped. [ 296.563615][ T9] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 296.583183][ T9] usb 4-1: MIDIStreaming interface descriptor not found [ 296.885416][ T9] usb 4-1: USB disconnect, device number 7 [ 297.066533][ T5794] udevd[5794]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 297.813483][ T8511] netlink: 4 bytes leftover after parsing attributes in process `syz.4.519'. [ 298.800002][ T8527] netlink: 32 bytes leftover after parsing attributes in process `syz.4.522'. [ 299.132321][ T8527] netlink: 32 bytes leftover after parsing attributes in process `syz.4.522'. [ 300.145932][ T8544] netlink: 4 bytes leftover after parsing attributes in process `syz.2.525'. [ 300.688234][ T30] audit: type=1400 audit(1774827070.906:682): avc: denied { mounton } for pid=8547 comm="syz.1.526" path="/99/file0" dev="tmpfs" ino=542 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 301.042394][ T8556] netlink: 20 bytes leftover after parsing attributes in process `syz.2.528'. [ 301.416225][ T8560] netlink: 32 bytes leftover after parsing attributes in process `syz.4.529'. [ 301.425250][ T8560] netlink: 32 bytes leftover after parsing attributes in process `syz.4.529'. [ 302.509853][ T8574] netlink: 20 bytes leftover after parsing attributes in process `syz.0.531'. [ 302.528447][ T8575] netlink: 4 bytes leftover after parsing attributes in process `syz.2.532'. [ 304.948679][ T8604] netlink: 4 bytes leftover after parsing attributes in process `syz.1.538'. [ 307.158131][ T8625] netlink: 212356 bytes leftover after parsing attributes in process `syz.3.543'. [ 307.926338][ T8631] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 307.935886][ T8631] block device autoloading is deprecated and will be removed. [ 308.710604][ T1221] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 308.949835][ T1221] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 309.023489][ T1221] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 309.049452][ T1221] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 309.058698][ T1221] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.066875][ T1221] usb 4-1: Product: syz [ 309.071267][ T1221] usb 4-1: Manufacturer: syz [ 309.075931][ T1221] usb 4-1: SerialNumber: syz [ 309.187911][ T1221] usb 4-1: config 0 descriptor?? [ 309.197625][ T8637] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 309.251634][ T8637] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 309.858362][ T8637] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 309.882386][ T8637] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 309.989103][ T8659] netlink: 20 bytes leftover after parsing attributes in process `syz.2.551'. [ 310.548082][ T1221] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 310.622730][ T1221] dm9601 4-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 310.658180][ T1221] usb 4-1: USB disconnect, device number 8 [ 311.051683][ T8674] netlink: 32 bytes leftover after parsing attributes in process `syz.1.553'. [ 311.060623][ T8674] netlink: 32 bytes leftover after parsing attributes in process `syz.1.553'. [ 311.230235][ T8676] usb usb7: usbfs: process 8676 (syz.2.554) did not claim interface 0 before use [ 311.718754][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 311.726075][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 311.781321][ T10] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 312.262536][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 312.281229][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 312.291049][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 312.307326][ T10] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 312.316914][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.326360][ T10] usb 4-1: Product: syz [ 312.330800][ T10] usb 4-1: Manufacturer: syz [ 312.454183][ T8689] netlink: 4 bytes leftover after parsing attributes in process `syz.0.558'. [ 312.799295][ T10] usb 4-1: SerialNumber: syz [ 312.822308][ T10] usb 4-1: config 0 descriptor?? [ 312.852660][ T8684] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 312.873467][ T10] dm9601 4-1:0.0: probe with driver dm9601 failed with error -22 [ 314.300929][ T8713] netlink: 4 bytes leftover after parsing attributes in process `syz.2.562'. [ 314.568630][ T5811] usb 4-1: USB disconnect, device number 9 [ 314.613614][ T8712] netlink: 20 bytes leftover after parsing attributes in process `syz.0.561'. [ 314.773171][ T8723] netlink: 32 bytes leftover after parsing attributes in process `syz.3.565'. [ 314.782235][ T8723] netlink: 32 bytes leftover after parsing attributes in process `syz.3.565'. [ 315.608715][ T8731] md: md2 stopped. [ 316.493865][ T8743] netlink: 4 bytes leftover after parsing attributes in process `syz.3.570'. [ 317.106816][ T8755] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 317.116519][ T8755] block device autoloading is deprecated and will be removed. [ 317.203131][ T8754] md: md2 stopped. [ 319.438584][ T8785] netlink: 8 bytes leftover after parsing attributes in process `syz.1.580'. [ 319.813765][ T8789] netlink: 32 bytes leftover after parsing attributes in process `syz.3.581'. [ 319.813796][ T8789] netlink: 32 bytes leftover after parsing attributes in process `syz.3.581'. [ 320.662716][ T5881] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 320.814076][ T5881] usb 1-1: Using ep0 maxpacket: 32 [ 320.815626][ T5881] usb 1-1: unable to get BOS descriptor or descriptor too short [ 320.816396][ T5881] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 320.816420][ T5881] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 320.818177][ T5881] usb 1-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 320.818193][ T5881] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.818204][ T5881] usb 1-1: Product: syz [ 320.818213][ T5881] usb 1-1: Manufacturer: syz [ 320.818222][ T5881] usb 1-1: SerialNumber: syz [ 321.359433][ T8801] netlink: 32 bytes leftover after parsing attributes in process `syz.2.583'. [ 321.359464][ T8801] netlink: 32 bytes leftover after parsing attributes in process `syz.2.583'. [ 322.191309][ T10] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 322.344774][ T10] usb 4-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.7f [ 322.354157][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.500114][ T8807] x_tables: duplicate underflow at hook 3 [ 322.611716][ T8814] netlink: 32 bytes leftover after parsing attributes in process `syz.1.588'. [ 322.620708][ T8814] netlink: 32 bytes leftover after parsing attributes in process `syz.1.588'. [ 322.752187][ T5881] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 322.844204][ T5881] usb 1-1: MIDIStreaming interface descriptor not found [ 322.880341][ T10] usb 4-1: config 0 descriptor?? [ 323.067720][ T5881] usb 1-1: USB disconnect, device number 5 [ 324.904436][ T8829] netlink: 20 bytes leftover after parsing attributes in process `syz.2.591'. [ 324.970640][ T10] usb 4-1: string descriptor 0 read error: -71 [ 324.989352][ T10] ldusb 4-1:0.0: Interrupt in endpoint not found [ 325.036274][ T10] usb 4-1: USB disconnect, device number 10 [ 325.557718][ T5881] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 325.672387][ T10] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 325.722327][ T5881] usb 2-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.7f [ 325.731547][ T5881] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.741393][ T5881] usb 2-1: config 0 descriptor?? [ 325.832958][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 325.842880][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 325.855016][ T10] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 325.864434][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.872804][ T10] usb 4-1: Product: syz [ 325.877442][ T10] usb 4-1: Manufacturer: syz [ 325.883356][ T10] usb 4-1: SerialNumber: syz [ 325.895688][ T10] usb 4-1: config 0 descriptor?? [ 325.903232][ T8832] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 325.970836][ T8832] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 326.764233][ T8832] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 326.789618][ T8832] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 326.884368][ T8843] netlink: 212356 bytes leftover after parsing attributes in process `syz.0.595'. [ 327.468568][ T8846] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 327.478137][ T8846] block device autoloading is deprecated and will be removed. [ 327.592500][ T10] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 327.716727][ T10] dm9601 4-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 327.751835][ T10] usb 4-1: USB disconnect, device number 11 [ 328.050383][ T8853] netlink: 4 bytes leftover after parsing attributes in process `syz.0.597'. [ 328.121101][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 328.199788][ T5881] usb 2-1: string descriptor 0 read error: -71 [ 328.229860][ T5881] ldusb 2-1:0.0: Interrupt in endpoint not found [ 328.239163][ T5881] usb 2-1: USB disconnect, device number 11 [ 330.185117][ T8873] md: md2 stopped. [ 330.494596][ T8884] netlink: 20 bytes leftover after parsing attributes in process `syz.2.602'. [ 331.058804][ T8891] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 331.096626][ T8891] block device autoloading is deprecated and will be removed. [ 331.722445][ T8896] md: md2 stopped. [ 332.337573][ T793] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 332.582872][ T793] usb 4-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.7f [ 332.604449][ T793] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.633833][ T793] usb 4-1: config 0 descriptor?? [ 333.077771][ T8920] QAT: failed to copy from user cfg_data. [ 335.536584][ T793] usb 4-1: string descriptor 0 read error: -71 [ 335.543359][ T793] ldusb 4-1:0.0: Interrupt in endpoint not found [ 335.572306][ T793] usb 4-1: USB disconnect, device number 12 [ 335.899164][ T8948] x_tables: duplicate underflow at hook 3 [ 338.410744][ T8987] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 338.420848][ T8987] block device autoloading is deprecated and will be removed. [ 339.261148][ T793] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 339.423117][ T793] usb 1-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.7f [ 339.432961][ T793] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.449768][ T8993] md: md2 stopped. [ 339.458072][ T793] usb 1-1: config 0 descriptor?? [ 339.661162][ T5810] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 340.704443][ T5810] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 340.714386][ T5810] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 340.727716][ T5810] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 341.072835][ T5810] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.082428][ T5810] usb 4-1: Product: syz [ 341.086696][ T5810] usb 4-1: Manufacturer: syz [ 341.109521][ T5810] usb 4-1: SerialNumber: syz [ 341.120287][ T5810] usb 4-1: config 0 descriptor?? [ 341.146882][ T8991] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 341.173009][ T8991] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 341.405412][ T8991] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 341.420255][ T9008] netlink: 20 bytes leftover after parsing attributes in process `syz.2.632'. [ 341.432790][ T8991] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 341.850636][ T5810] Error reading MAC address [ 342.099973][ T793] usb 1-1: string descriptor 0 read error: -71 [ 342.112471][ T793] ldusb 1-1:0.0: Interrupt in endpoint not found [ 342.212996][ T5914] usb 4-1: USB disconnect, device number 13 [ 342.226406][ T793] usb 1-1: USB disconnect, device number 6 [ 344.921436][ T9028] netlink: 4 bytes leftover after parsing attributes in process `syz.2.637'. [ 346.207439][ T9032] netlink: 212356 bytes leftover after parsing attributes in process `syz.4.639'. [ 346.678979][ T9036] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 346.688628][ T9036] block device autoloading is deprecated and will be removed. [ 347.916070][ T9049] usb usb7: usbfs: process 9049 (syz.4.642) did not claim interface 0 before use [ 348.277195][ T9056] netlink: 20 bytes leftover after parsing attributes in process `syz.3.644'. [ 348.802611][ T9060] netlink: 212356 bytes leftover after parsing attributes in process `syz.4.646'. [ 349.092560][ T9060] md: md2 stopped. [ 349.198108][ T9066] netlink: 20 bytes leftover after parsing attributes in process `syz.1.647'. [ 349.527792][ T9068] netlink: 8 bytes leftover after parsing attributes in process `syz.4.648'. [ 350.449198][ T9079] QAT: failed to copy from user cfg_data. [ 355.134473][ T9137] netlink: 4 bytes leftover after parsing attributes in process `syz.2.663'. [ 358.458348][ T9176] netlink: 4 bytes leftover after parsing attributes in process `syz.3.671'. [ 359.742775][ T5874] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 359.966063][ T9190] netlink: 32 bytes leftover after parsing attributes in process `syz.0.675'. [ 359.975243][ T9190] netlink: 32 bytes leftover after parsing attributes in process `syz.0.675'. [ 360.065326][ T5874] usb 3-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.7f [ 360.084430][ T5874] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.097249][ T5874] usb 3-1: config 0 descriptor?? [ 360.101368][ T9194] netlink: 212356 bytes leftover after parsing attributes in process `syz.4.676'. [ 361.198392][ T9199] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 361.208020][ T9199] block device autoloading is deprecated and will be removed. [ 362.385207][ T9213] netlink: 32 bytes leftover after parsing attributes in process `syz.3.679'. [ 362.394268][ T9213] netlink: 32 bytes leftover after parsing attributes in process `syz.3.679'. [ 362.851276][ T5874] usb 3-1: string descriptor 0 read error: -71 [ 362.857511][ T5874] ldusb 3-1:0.0: Interrupt in endpoint not found [ 362.870866][ T5874] usb 3-1: USB disconnect, device number 9 [ 363.359235][ T9224] netlink: 20 bytes leftover after parsing attributes in process `syz.0.683'. [ 363.961134][ T24] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 364.147308][ T9232] netlink: 32 bytes leftover after parsing attributes in process `syz.4.684'. [ 364.163580][ T9232] netlink: 32 bytes leftover after parsing attributes in process `syz.4.684'. [ 364.290284][ T24] usb 3-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.7f [ 364.337633][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.872281][ T24] usb 3-1: config 0 descriptor?? [ 366.378710][ T9254] netlink: 20 bytes leftover after parsing attributes in process `syz.0.687'. [ 366.666427][ T9256] x_tables: duplicate underflow at hook 3 [ 366.963329][ T24] usb 3-1: string descriptor 0 read error: -71 [ 366.980716][ T24] ldusb 3-1:0.0: Interrupt in endpoint not found [ 367.215187][ T5817] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 367.463705][ T24] usb 3-1: USB disconnect, device number 10 [ 367.473912][ T5817] usb 5-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.7f [ 367.473947][ T5817] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.542718][ T5817] usb 5-1: config 0 descriptor?? [ 367.570352][ T9268] netlink: 4 bytes leftover after parsing attributes in process `syz.2.690'. [ 368.623037][ T9277] x_tables: duplicate underflow at hook 3 [ 368.771843][ T24] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 368.901531][ T1221] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 368.943572][ T24] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 368.953589][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 368.970812][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 368.984597][ T24] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 368.994226][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.002587][ T24] usb 1-1: Product: syz [ 369.007003][ T24] usb 1-1: Manufacturer: syz [ 369.011795][ T24] usb 1-1: SerialNumber: syz [ 369.029816][ T24] usb 1-1: config 0 descriptor?? [ 369.041845][ T9275] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 369.058350][ T24] dm9601 1-1:0.0: probe with driver dm9601 failed with error -22 [ 369.126813][ T1221] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 369.136773][ T1221] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 369.155943][ T1221] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 369.177090][ T1221] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.213488][ T1221] usb 4-1: Product: syz [ 369.228740][ T1221] usb 4-1: Manufacturer: syz [ 369.478765][ T1221] usb 4-1: SerialNumber: syz [ 369.494659][ T1221] usb 4-1: config 0 descriptor?? [ 369.504046][ T9279] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 369.514023][ T1221] dm9601 4-1:0.0: probe with driver dm9601 failed with error -22 [ 369.708154][ T9282] netlink: 212356 bytes leftover after parsing attributes in process `syz.1.694'. [ 369.860608][ T5817] usb 5-1: string descriptor 0 read error: -71 [ 369.873984][ T5817] ldusb 5-1:0.0: Interrupt in endpoint not found [ 369.889292][ T5817] usb 5-1: USB disconnect, device number 10 [ 370.133843][ T9288] md: md2 stopped. [ 370.709385][ T9293] QAT: failed to copy from user cfg_data. [ 371.422989][ T5810] usb 1-1: USB disconnect, device number 7 [ 371.581407][ T9306] netlink: 20 bytes leftover after parsing attributes in process `syz.4.698'. [ 372.065002][ T5810] usb 4-1: USB disconnect, device number 14 [ 372.653348][ T9320] x_tables: duplicate underflow at hook 3 [ 372.771610][ T9324] netlink: 212356 bytes leftover after parsing attributes in process `syz.1.704'. [ 372.866369][ T9326] netlink: 20 bytes leftover after parsing attributes in process `syz.0.703'. [ 373.213531][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 373.220454][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 373.874675][ T9329] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 373.885430][ T9329] block device autoloading is deprecated and will be removed. [ 374.325764][ T30] audit: type=1400 audit(1774827144.556:683): avc: denied { create } for pid=9334 comm="syz.4.709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 374.549627][ T9344] netlink: 4 bytes leftover after parsing attributes in process `syz.1.707'. [ 374.864466][ T30] audit: type=1400 audit(1774827144.556:684): avc: denied { read } for pid=9334 comm="syz.4.709" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 374.890569][ T30] audit: type=1400 audit(1774827144.556:685): avc: denied { open } for pid=9334 comm="syz.4.709" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 374.896179][ T1221] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 375.238109][ T30] audit: type=1400 audit(1774827145.076:686): avc: denied { mount } for pid=9334 comm="syz.4.709" name="/" dev="hugetlbfs" ino=29413 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 375.367563][ T30] audit: type=1400 audit(1774827145.096:687): avc: denied { append } for pid=9334 comm="syz.4.709" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 375.392130][ T30] audit: type=1400 audit(1774827145.156:688): avc: denied { read write } for pid=9334 comm="syz.4.709" name="vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 375.464982][ T1221] usb 1-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.7f [ 375.474127][ T1221] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.504351][ T1221] usb 1-1: config 0 descriptor?? [ 375.558719][ T30] audit: type=1400 audit(1774827145.156:689): avc: denied { open } for pid=9334 comm="syz.4.709" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 375.627332][ T30] audit: type=1400 audit(1774827145.216:690): avc: denied { bind } for pid=9334 comm="syz.4.709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 375.876795][ T9366] netlink: 4 bytes leftover after parsing attributes in process `syz.3.710'. [ 376.481668][ T24] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 376.853580][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 376.877182][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 376.973537][ T24] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 376.986887][ T24] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 376.990480][ T9374] netlink: 20 bytes leftover after parsing attributes in process `syz.2.713'. [ 377.031476][ T24] usb 5-1: Manufacturer: syz [ 377.046159][ T24] usb 5-1: config 0 descriptor?? [ 377.291464][ T9377] QAT: failed to copy from user cfg_data. [ 377.476120][ T1221] usb 1-1: string descriptor 0 read error: -71 [ 377.625927][ T1221] ldusb 1-1:0.0: Interrupt in endpoint not found [ 377.641847][ T1221] usb 1-1: USB disconnect, device number 8 [ 377.941541][ T9368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.960543][ T9388] netlink: 8 bytes leftover after parsing attributes in process `syz.2.717'. [ 377.970336][ T9368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.993185][ T24] input: syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0001/input/input5 [ 378.015323][ T30] audit: type=1400 audit(1774827148.246:691): avc: denied { read } for pid=5163 comm="acpid" name="mouse1" dev="devtmpfs" ino=3059 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 378.052591][ T30] audit: type=1400 audit(1774827148.246:692): avc: denied { open } for pid=5163 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=3059 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 378.096199][ T24] input: syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0001/input/input6 [ 378.113430][ T50] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 378.134236][ T24] input: syz Touch Strip as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0001/input/input7 [ 378.156359][ T24] input: syz Dial as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0001/input/input8 [ 378.172895][ T5810] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 378.188578][ T9368] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=48 sclass=netlink_tcpdiag_socket pid=9368 comm=syz.4.712 [ 378.210193][ T24] uclogic 0003:256C:006D.0001: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.4-1/input0 [ 378.246671][ T24] usb 5-1: USB disconnect, device number 11 [ 378.357866][ T5810] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 378.395474][ T5810] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 378.420053][ T5810] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 378.469282][ T5810] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.497632][ T5810] usb 1-1: Product: syz [ 378.504423][ T5810] usb 1-1: Manufacturer: syz [ 378.509355][ T5810] usb 1-1: SerialNumber: syz [ 378.529182][ T5810] usb 1-1: config 0 descriptor?? [ 378.546901][ T9386] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 378.547803][ T9394] fido_id[9394]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 378.563702][ T5810] dm9601 1-1:0.0: probe with driver dm9601 failed with error -22 [ 378.942900][ T9415] netlink: 4 bytes leftover after parsing attributes in process `syz.2.722'. [ 378.972054][ T9417] FAULT_INJECTION: forcing a failure. [ 378.972054][ T9417] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 379.137118][ T9417] CPU: 1 UID: 0 PID: 9417 Comm: syz.4.725 Tainted: G L syzkaller #0 PREEMPT(full) [ 379.137147][ T9417] Tainted: [L]=SOFTLOCKUP [ 379.137153][ T9417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 379.137164][ T9417] Call Trace: [ 379.137169][ T9417] [ 379.137176][ T9417] dump_stack_lvl+0x100/0x190 [ 379.137210][ T9417] should_fail_ex.cold+0x5/0xa [ 379.137234][ T9417] _copy_from_user+0x2e/0xd0 [ 379.137254][ T9417] copy_msghdr_from_user+0x9f/0x4f0 [ 379.137275][ T9417] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 379.137299][ T9417] ? __pfx__kstrtoull+0x10/0x10 [ 379.137327][ T9417] ___sys_sendmsg+0x106/0x1e0 [ 379.137346][ T9417] ? __pfx____sys_sendmsg+0x10/0x10 [ 379.137376][ T9417] ? find_held_lock+0x2b/0x80 [ 379.137413][ T9417] __sys_sendmmsg+0x205/0x430 [ 379.137440][ T9417] ? __pfx___sys_sendmmsg+0x10/0x10 [ 379.137471][ T9417] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 379.137508][ T9417] ? fput+0x79/0x100 [ 379.137529][ T9417] ? ksys_write+0x1ac/0x250 [ 379.137545][ T9417] ? __pfx_ksys_write+0x10/0x10 [ 379.137566][ T9417] __x64_sys_sendmmsg+0x9c/0x100 [ 379.137590][ T9417] ? lockdep_hardirqs_on+0x78/0x100 [ 379.137616][ T9417] do_syscall_64+0x106/0xf80 [ 379.137642][ T9417] ? clear_bhb_loop+0x40/0x90 [ 379.137665][ T9417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.137683][ T9417] RIP: 0033:0x7fc6e199c799 [ 379.137701][ T9417] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 379.137717][ T9417] RSP: 002b:00007fc6dfbf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 379.137734][ T9417] RAX: ffffffffffffffda RBX: 00007fc6e1c15fa0 RCX: 00007fc6e199c799 [ 379.137745][ T9417] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 379.137756][ T9417] RBP: 00007fc6dfbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 379.137765][ T9417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 379.137774][ T9417] R13: 00007fc6e1c16038 R14: 00007fc6e1c15fa0 R15: 00007fff9a947b98 [ 379.137793][ T9417] [ 379.855364][ T5810] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 380.493762][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 380.493777][ T30] audit: type=1400 audit(1774827150.726:696): avc: denied { setopt } for pid=9441 comm="syz.2.730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 380.552534][ T5810] usb 5-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.7f [ 380.561677][ T5810] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.574576][ T5810] usb 5-1: config 0 descriptor?? [ 380.646575][ T9448] netlink: 20 bytes leftover after parsing attributes in process `syz.1.731'. [ 380.887666][ T10] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 380.950271][ T793] usb 1-1: USB disconnect, device number 9 [ 381.894463][ T9454] netlink: zone id is out of range [ 381.899718][ T9454] netlink: zone id is out of range [ 381.904885][ T9454] netlink: zone id is out of range [ 381.910007][ T9454] netlink: zone id is out of range [ 381.915172][ T9454] netlink: zone id is out of range [ 381.945227][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 381.956591][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 382.315004][ T30] audit: type=1400 audit(1774827152.276:697): avc: denied { kexec_image_load } for pid=9449 comm="syz.3.733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 382.336164][ T10] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 382.352594][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.375237][ T10] usb 3-1: Product: syz [ 382.387726][ T10] usb 3-1: Manufacturer: syz [ 382.411176][ T10] usb 3-1: SerialNumber: syz [ 382.419146][ T10] usb 3-1: config 0 descriptor?? [ 382.426576][ T9446] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 382.444578][ T9457] netlink: 32 bytes leftover after parsing attributes in process `syz.0.734'. [ 382.455257][ T9446] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 382.521082][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 382.524693][ T9457] netlink: 32 bytes leftover after parsing attributes in process `syz.0.734'. [ 382.675360][ T9446] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 382.684014][ T9446] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 382.742141][ T30] audit: type=1400 audit(1774827152.976:698): avc: denied { create } for pid=9461 comm="syz.3.736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 382.744012][ T9462] netlink: 28 bytes leftover after parsing attributes in process `syz.3.736'. [ 382.826604][ T30] audit: type=1400 audit(1774827152.976:699): avc: denied { connect } for pid=9461 comm="syz.3.736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 383.025724][ T30] audit: type=1400 audit(1774827152.976:700): avc: denied { getopt } for pid=9461 comm="syz.3.736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 383.072938][ T30] audit: type=1400 audit(1774827153.206:701): avc: denied { create } for pid=9465 comm="syz.3.738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 383.127019][ T9472] nfs: Unknown parameter 'losk' [ 383.283677][ T30] audit: type=1400 audit(1774827153.206:702): avc: denied { connect } for pid=9465 comm="syz.3.738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 383.308610][ T30] audit: type=1400 audit(1774827153.436:703): avc: denied { setopt } for pid=9463 comm="syz.0.737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 383.663702][ T5810] usb 5-1: string descriptor 0 read error: -71 [ 383.693879][ T5810] ldusb 5-1:0.0: Interrupt in endpoint not found [ 383.705917][ T5810] usb 5-1: USB disconnect, device number 12 [ 383.899231][ T10] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 383.932656][ T30] audit: type=1400 audit(1774827153.446:704): avc: denied { create } for pid=9463 comm="syz.0.737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 384.008634][ T30] audit: type=1400 audit(1774827153.446:705): avc: denied { write } for pid=9463 comm="syz.0.737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 384.051333][ T10] dm9601 3-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 384.070211][ T9480] netlink: 212356 bytes leftover after parsing attributes in process `syz.3.740'. [ 384.117748][ T10] usb 3-1: USB disconnect, device number 11 [ 384.504536][ T9490] md: md2 stopped. [ 385.637716][ T5914] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 385.738949][ T9506] netlink: 'syz.1.748': attribute type 21 has an invalid length. [ 385.759709][ T9506] netlink: 'syz.1.748': attribute type 6 has an invalid length. [ 385.767660][ T9506] netlink: 132 bytes leftover after parsing attributes in process `syz.1.748'. [ 386.055707][ T9514] netlink: 8 bytes leftover after parsing attributes in process `syz.4.750'. [ 386.156125][ T5914] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 386.156154][ T5914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.156172][ T5914] usb 3-1: Product: syz [ 386.156187][ T5914] usb 3-1: Manufacturer: syz [ 386.156202][ T5914] usb 3-1: SerialNumber: syz [ 386.195450][ T5914] usb 3-1: config 0 descriptor?? [ 386.635558][ T5914] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 387.451868][ T5810] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 387.721777][ T30] audit: type=1400 audit(1774827157.816:706): avc: denied { create } for pid=9527 comm="syz.0.754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 387.771422][ T5810] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 387.791517][ T5810] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 387.826866][ T5810] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 387.896689][ T5810] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.917598][ T30] audit: type=1400 audit(1774827158.146:707): avc: denied { connect } for pid=9527 comm="syz.0.754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 387.917836][ T5810] usb 5-1: Product: syz [ 387.950612][ T30] audit: type=1400 audit(1774827158.176:708): avc: denied { accept } for pid=9527 comm="syz.0.754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 387.970195][ T30] audit: type=1400 audit(1774827158.176:709): avc: denied { read } for pid=9527 comm="syz.0.754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 388.138571][ T5810] usb 5-1: Manufacturer: syz [ 388.158262][ T5914] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 388.257071][ T5914] usb 3-1: USB disconnect, device number 12 [ 388.257716][ T5810] usb 5-1: SerialNumber: syz [ 388.292200][ T5810] usb 5-1: config 0 descriptor?? [ 388.369744][ T9541] openvswitch: netlink: Missing key (keys=800040, expected=2000) [ 388.783222][ T9525] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 388.790405][ T9525] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 389.190026][ T9525] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 389.197328][ T9525] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 389.370827][ T9549] netlink: 'syz.2.757': attribute type 3 has an invalid length. [ 389.386282][ T9549] netlink: 132 bytes leftover after parsing attributes in process `syz.2.757'. [ 389.478873][ T9552] FAULT_INJECTION: forcing a failure. [ 389.478873][ T9552] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 389.585641][ T9552] CPU: 0 UID: 0 PID: 9552 Comm: syz.2.758 Tainted: G L syzkaller #0 PREEMPT(full) [ 389.585670][ T9552] Tainted: [L]=SOFTLOCKUP [ 389.585676][ T9552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 389.585685][ T9552] Call Trace: [ 389.585690][ T9552] [ 389.585697][ T9552] dump_stack_lvl+0x100/0x190 [ 389.585731][ T9552] should_fail_ex.cold+0x5/0xa [ 389.585754][ T9552] _copy_from_user+0x2e/0xd0 [ 389.585774][ T9552] alg_setsockopt+0x88f/0xe90 [ 389.585801][ T9552] ? __pfx_alg_setsockopt+0x10/0x10 [ 389.585828][ T9552] ? selinux_socket_setsockopt+0x6a/0x80 [ 389.585851][ T9552] ? __pfx_alg_setsockopt+0x10/0x10 [ 389.585875][ T9552] do_sock_setsockopt+0xf3/0x1d0 [ 389.585904][ T9552] __sys_setsockopt+0x195/0x220 [ 389.585930][ T9552] __x64_sys_setsockopt+0xbd/0x160 [ 389.585946][ T9552] ? do_syscall_64+0x95/0xf80 [ 389.585963][ T9552] ? lockdep_hardirqs_on+0x78/0x100 [ 389.585979][ T9552] do_syscall_64+0x106/0xf80 [ 389.585994][ T9552] ? clear_bhb_loop+0x40/0x90 [ 389.586007][ T9552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.586018][ T9552] RIP: 0033:0x7f72e179c799 [ 389.586027][ T9552] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 389.586043][ T9552] RSP: 002b:00007f72e270b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 389.586054][ T9552] RAX: ffffffffffffffda RBX: 00007f72e1a15fa0 RCX: 00007f72e179c799 [ 389.586061][ T9552] RDX: 0000000000000001 RSI: 0000000000000117 RDI: 0000000000000003 [ 389.586067][ T9552] RBP: 00007f72e270b090 R08: 0000000000000000 R09: 0000000000000000 [ 389.586073][ T9552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 389.586079][ T9552] R13: 00007f72e1a16038 R14: 00007f72e1a15fa0 R15: 00007ffe65d22ff8 [ 389.586093][ T9552] [ 389.901714][ T5810] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 389.946544][ T9563] FAULT_INJECTION: forcing a failure. [ 389.946544][ T9563] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 389.978672][ T9563] CPU: 1 UID: 0 PID: 9563 Comm: syz.2.762 Tainted: G L syzkaller #0 PREEMPT(full) [ 389.978701][ T9563] Tainted: [L]=SOFTLOCKUP [ 389.978707][ T9563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 389.978717][ T9563] Call Trace: [ 389.978723][ T9563] [ 389.978730][ T9563] dump_stack_lvl+0x100/0x190 [ 389.978764][ T9563] should_fail_ex.cold+0x5/0xa [ 389.978792][ T9563] _copy_from_user+0x2e/0xd0 [ 389.978813][ T9563] copy_msghdr_from_user+0x9f/0x4f0 [ 389.978835][ T9563] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 389.978866][ T9563] ___sys_sendmsg+0x106/0x1e0 [ 389.978886][ T9563] ? __pfx____sys_sendmsg+0x10/0x10 [ 389.978932][ T9563] __sys_sendmsg+0x170/0x220 [ 389.978957][ T9563] ? __pfx___sys_sendmsg+0x10/0x10 [ 389.978996][ T9563] do_syscall_64+0x106/0xf80 [ 389.979022][ T9563] ? clear_bhb_loop+0x40/0x90 [ 389.979042][ T9563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.979060][ T9563] RIP: 0033:0x7f72e179c799 [ 389.979075][ T9563] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 389.979092][ T9563] RSP: 002b:00007f72e270b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 389.979109][ T9563] RAX: ffffffffffffffda RBX: 00007f72e1a15fa0 RCX: 00007f72e179c799 [ 389.979121][ T9563] RDX: 0000000000040810 RSI: 0000200000000200 RDI: 0000000000000003 [ 389.979131][ T9563] RBP: 00007f72e270b090 R08: 0000000000000000 R09: 0000000000000000 [ 389.979141][ T9563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 389.979151][ T9563] R13: 00007f72e1a16038 R14: 00007f72e1a15fa0 R15: 00007ffe65d22ff8 [ 389.979174][ T9563] [ 390.173513][ T5810] dm9601 5-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 390.197674][ T5810] usb 5-1: USB disconnect, device number 13 [ 390.303078][ T5817] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 390.526353][ T5817] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 390.900849][ T30] audit: type=1400 audit(1774827161.106:710): avc: denied { ioctl } for pid=9564 comm="syz.0.763" path="socket:[30900]" dev="sockfs" ino=30900 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 390.930653][ T5817] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.960742][ T5817] usb 2-1: config 0 descriptor?? [ 390.979824][ T30] audit: type=1400 audit(1774827161.106:711): avc: denied { bind } for pid=9564 comm="syz.0.763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 391.442849][ T30] audit: type=1400 audit(1774827161.116:712): avc: denied { write } for pid=9564 comm="syz.0.763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 391.673073][ T30] audit: type=1400 audit(1774827161.226:713): avc: denied { ioctl } for pid=9577 comm="syz.3.766" path="/dev/ptyqa" dev="devtmpfs" ino=129 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 391.792143][ T9632] FAULT_INJECTION: forcing a failure. [ 391.792143][ T9632] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 391.873365][ T30] audit: type=1400 audit(1774827161.526:714): avc: denied { read } for pid=9579 comm="syz.4.767" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 391.921173][ T9632] CPU: 1 UID: 0 PID: 9632 Comm: syz.3.770 Tainted: G L syzkaller #0 PREEMPT(full) [ 391.921205][ T9632] Tainted: [L]=SOFTLOCKUP [ 391.921211][ T9632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 391.921221][ T9632] Call Trace: [ 391.921227][ T9632] [ 391.921234][ T9632] dump_stack_lvl+0x100/0x190 [ 391.921268][ T9632] should_fail_ex.cold+0x5/0xa [ 391.921295][ T9632] _copy_from_user+0x2e/0xd0 [ 391.921315][ T9632] copy_msghdr_from_user+0x9f/0x4f0 [ 391.921335][ T9632] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 391.921359][ T9632] ? __lock_acquire+0x4a5/0x2630 [ 391.921380][ T9632] ___sys_recvmsg+0xdd/0x1a0 [ 391.921400][ T9632] ? __pfx____sys_recvmsg+0x10/0x10 [ 391.921439][ T9632] __sys_recvmsg+0x16d/0x220 [ 391.921466][ T9632] ? __pfx___sys_recvmsg+0x10/0x10 [ 391.921506][ T9632] do_syscall_64+0x106/0xf80 [ 391.921532][ T9632] ? clear_bhb_loop+0x40/0x90 [ 391.921554][ T9632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.921572][ T9632] RIP: 0033:0x7fc23a39c799 [ 391.921587][ T9632] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 391.921604][ T9632] RSP: 002b:00007fc23b24b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 391.921621][ T9632] RAX: ffffffffffffffda RBX: 00007fc23a615fa0 RCX: 00007fc23a39c799 [ 391.921632][ T9632] RDX: 0000000000010002 RSI: 0000200000001600 RDI: 0000000000000004 [ 391.921642][ T9632] RBP: 00007fc23b24b090 R08: 0000000000000000 R09: 0000000000000000 [ 391.921653][ T9632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 391.921662][ T9632] R13: 00007fc23a616038 R14: 00007fc23a615fa0 R15: 00007fff37adbdb8 [ 391.921686][ T9632] [ 392.179621][ T30] audit: type=1400 audit(1774827161.526:715): avc: denied { open } for pid=9579 comm="syz.4.767" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 392.396102][ T5817] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 392.439029][ T9638] FAULT_INJECTION: forcing a failure. [ 392.439029][ T9638] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 392.511549][ T9641] overlay: filesystem on ./bus not supported [ 392.525817][ T10] Process accounting resumed [ 392.557122][ T9638] CPU: 0 UID: 0 PID: 9638 Comm: syz.3.773 Tainted: G L syzkaller #0 PREEMPT(full) [ 392.557149][ T9638] Tainted: [L]=SOFTLOCKUP [ 392.557155][ T9638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 392.557164][ T9638] Call Trace: [ 392.557169][ T9638] [ 392.557176][ T9638] dump_stack_lvl+0x100/0x190 [ 392.557206][ T9638] should_fail_ex.cold+0x5/0xa [ 392.557229][ T9638] _copy_from_user+0x2e/0xd0 [ 392.557247][ T9638] copy_msghdr_from_user+0x9f/0x4f0 [ 392.557267][ T9638] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 392.557293][ T9638] ___sys_sendmsg+0x106/0x1e0 [ 392.557312][ T9638] ? __pfx____sys_sendmsg+0x10/0x10 [ 392.557358][ T9638] __sys_sendmsg+0x170/0x220 [ 392.557383][ T9638] ? __pfx___sys_sendmsg+0x10/0x10 [ 392.557423][ T9638] do_syscall_64+0x106/0xf80 [ 392.557447][ T9638] ? clear_bhb_loop+0x40/0x90 [ 392.557469][ T9638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.557487][ T9638] RIP: 0033:0x7fc23a39c799 [ 392.557502][ T9638] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 392.557519][ T9638] RSP: 002b:00007fc23b24b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 392.557536][ T9638] RAX: ffffffffffffffda RBX: 00007fc23a615fa0 RCX: 00007fc23a39c799 [ 392.557548][ T9638] RDX: 000000000000c000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 392.557558][ T9638] RBP: 00007fc23b24b090 R08: 0000000000000000 R09: 0000000000000000 [ 392.557568][ T9638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 392.557577][ T9638] R13: 00007fc23a616038 R14: 00007fc23a615fa0 R15: 00007fff37adbdb8 [ 392.557601][ T9638] [ 392.975951][ T5817] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 392.982815][ T5817] [drm] Initialized udl on minor 2 [ 393.106578][ T5817] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 393.136608][ T5817] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 393.146209][ T5914] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 393.165243][ T5817] usb 2-1: USB disconnect, device number 12 [ 393.172271][ T5914] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 393.191456][ T5914] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 393.904814][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 393.904828][ T30] audit: type=1400 audit(1774827164.136:723): avc: denied { name_bind } for pid=9657 comm="syz.0.776" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 393.945208][ T30] audit: type=1400 audit(1774827164.136:724): avc: denied { node_bind } for pid=9657 comm="syz.0.776" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 394.144475][ T9667] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9667 comm=syz.1.777 [ 394.178484][ T30] audit: type=1400 audit(1774827164.136:725): avc: denied { getopt } for pid=9657 comm="syz.0.776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 394.755906][ T9676] FAULT_INJECTION: forcing a failure. [ 394.755906][ T9676] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 394.772388][ T9676] CPU: 1 UID: 0 PID: 9676 Comm: syz.2.781 Tainted: G L syzkaller #0 PREEMPT(full) [ 394.772417][ T9676] Tainted: [L]=SOFTLOCKUP [ 394.772423][ T9676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 394.772433][ T9676] Call Trace: [ 394.772439][ T9676] [ 394.772445][ T9676] dump_stack_lvl+0x100/0x190 [ 394.772479][ T9676] should_fail_ex.cold+0x5/0xa [ 394.772502][ T9676] _copy_from_user+0x2e/0xd0 [ 394.772523][ T9676] copy_msghdr_from_user+0x9f/0x4f0 [ 394.772545][ T9676] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 394.772576][ T9676] ___sys_sendmsg+0x106/0x1e0 [ 394.772597][ T9676] ? __pfx____sys_sendmsg+0x10/0x10 [ 394.772650][ T9676] __sys_sendmsg+0x170/0x220 [ 394.772675][ T9676] ? __pfx___sys_sendmsg+0x10/0x10 [ 394.772713][ T9676] do_syscall_64+0x106/0xf80 [ 394.772739][ T9676] ? clear_bhb_loop+0x40/0x90 [ 394.772760][ T9676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.772776][ T9676] RIP: 0033:0x7f72e179c799 [ 394.772791][ T9676] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 394.772805][ T9676] RSP: 002b:00007f72e270b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 394.772823][ T9676] RAX: ffffffffffffffda RBX: 00007f72e1a15fa0 RCX: 00007f72e179c799 [ 394.772834][ T9676] RDX: 0000000020060000 RSI: 0000200000000640 RDI: 0000000000000004 [ 394.772845][ T9676] RBP: 00007f72e270b090 R08: 0000000000000000 R09: 0000000000000000 [ 394.772855][ T9676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 394.772865][ T9676] R13: 00007f72e1a16038 R14: 00007f72e1a15fa0 R15: 00007ffe65d22ff8 [ 394.772887][ T9676] [ 394.778779][ T30] audit: type=1400 audit(1774827165.006:726): avc: denied { create } for pid=9677 comm="syz.0.780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 395.200885][ T9681] netlink: 4 bytes leftover after parsing attributes in process `syz.3.779'. [ 395.786620][ T30] audit: type=1400 audit(1774827165.966:727): avc: denied { ioctl } for pid=9685 comm="syz.2.782" path="socket:[31039]" dev="sockfs" ino=31039 ioctlcmd=0x61d0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 396.371187][ T9692] ------------[ cut here ]------------ [ 396.377188][ T9692] ODEBUG: init active (active state 0) object: ffff88805138cf38 object type: timer_list hint: lec_arp_check_expire+0x0/0x9e0 [ 396.390502][ T9692] WARNING: lib/debugobjects.c:629 at debug_print_object+0x18e/0x2a0, CPU#1: syz.1.783/9692 [ 396.400537][ T9692] Modules linked in: [ 396.402029][ T30] audit: type=1400 audit(1774827166.636:728): avc: denied { read } for pid=5473 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 396.404613][ T9692] CPU: 1 UID: 0 PID: 9692 Comm: syz.1.783 Tainted: G L syzkaller #0 PREEMPT(full) [ 396.436528][ T9692] Tainted: [L]=SOFTLOCKUP [ 396.441850][ T9692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 396.451951][ T9692] RIP: 0010:debug_print_object+0x19b/0x2a0 [ 396.457766][ T9692] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d f2 33 e5 0b 41 56 48 8b 14 dd e0 2a 1b 8c 4c 89 e6 <67> 48 0f b9 3a 58 83 05 ac f0 da 0b 01 48 83 c4 18 5b 5d 41 5c 41 [ 396.477399][ T9692] RSP: 0018:ffffc90005027848 EFLAGS: 00010246 [ 396.483916][ T9692] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 396.492465][ T9692] RDX: ffffffff8c1b2a20 RSI: ffffffff8c1b2600 RDI: ffffffff90e43a40 [ 396.500439][ T9692] RBP: 0000000000000001 R08: ffff88805138cf38 R09: ffffffff8bb2bba0 [ 396.503160][ T30] audit: type=1400 audit(1774827166.726:729): avc: denied { search } for pid=5473 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 396.508543][ T9692] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8c1b2600 [ 396.537663][ T9692] R13: ffffffff8bb2bbe0 R14: ffffffff8ac05ed0 R15: ffffc90005027908 [ 396.545662][ T9692] FS: 00007f34c28ea6c0(0000) GS:ffff88812443c000(0000) knlGS:0000000000000000 [ 396.554620][ T9692] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 396.561234][ T9692] CR2: 0000200000404030 CR3: 000000005a394000 CR4: 00000000003526f0 [ 396.569201][ T9692] Call Trace: [ 396.572487][ T9692] [ 396.575409][ T9692] ? __pfx_lec_arp_check_expire+0x10/0x10 [ 396.581461][ T9692] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 396.587256][ T9692] __debug_object_init+0x229/0x3d0 [ 396.592522][ T9692] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 396.598308][ T9692] ? __pfx___debug_object_init+0x10/0x10 [ 396.603945][ T9692] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 396.609725][ T9692] timer_init_key+0x35/0x340 [ 396.614368][ T9692] lane_ioctl+0x8f8/0x2600 [ 396.618763][ T9692] ? __pfx_br2684_ioctl+0x10/0x10 [ 396.623785][ T9692] ? __pfx_clip_ioctl+0x10/0x10 [ 396.628615][ T9692] ? __pfx_lane_ioctl+0x10/0x10 [ 396.633469][ T9692] ? atmtcp_ioctl+0x251/0xdb0 [ 396.638139][ T9692] ? __pfx_atmtcp_ioctl+0x10/0x10 [ 396.643151][ T9692] ? do_vcc_ioctl+0x53/0x890 [ 396.647715][ T9692] do_vcc_ioctl+0x493/0x890 [ 396.652205][ T9692] svc_ioctl+0x335/0x730 [ 396.656421][ T9692] ? __pfx_svc_ioctl+0x10/0x10 [ 396.661174][ T9692] ? find_held_lock+0x2b/0x80 [ 396.665837][ T9692] ? futex_wake+0x1ad/0x530 [ 396.670327][ T9692] sock_do_ioctl+0x118/0x280 [ 396.675035][ T9692] ? __pfx_sock_do_ioctl+0x10/0x10 [ 396.680137][ T9692] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 396.685374][ T9692] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 396.692398][ T9692] sock_ioctl+0x599/0x6b0 [ 396.696708][ T9692] ? __pfx_sock_ioctl+0x10/0x10 [ 396.701564][ T9692] ? hook_file_ioctl_common+0x146/0x410 [ 396.707088][ T9692] ? selinux_file_ioctl+0x139/0x290 [ 396.712273][ T9692] ? selinux_file_ioctl+0xb4/0x290 [ 396.717373][ T9692] ? __pfx_sock_ioctl+0x10/0x10 [ 396.722214][ T9692] __x64_sys_ioctl+0x18e/0x210 [ 396.726958][ T9692] do_syscall_64+0x106/0xf80 [ 396.731550][ T9692] ? clear_bhb_loop+0x40/0x90 [ 396.736203][ T9692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.742084][ T9692] RIP: 0033:0x7f34c199c799 [ 396.746471][ T9692] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 396.766075][ T9692] RSP: 002b:00007f34c28ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 396.774471][ T9692] RAX: ffffffffffffffda RBX: 00007f34c1c15fa0 RCX: 00007f34c199c799 [ 396.782437][ T9692] RDX: 0000000000000000 RSI: 00000000000061d0 RDI: 0000000000000004 [ 396.790598][ T9692] RBP: 00007f34c1a32c99 R08: 0000000000000000 R09: 0000000000000000 [ 396.798708][ T9692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 396.806681][ T9692] R13: 00007f34c1c16038 R14: 00007f34c1c15fa0 R15: 00007ffdd9a46bf8 [ 396.814648][ T9692] [ 396.817642][ T9692] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 396.824898][ T9692] CPU: 1 UID: 0 PID: 9692 Comm: syz.1.783 Tainted: G L syzkaller #0 PREEMPT(full) [ 396.835628][ T9692] Tainted: [L]=SOFTLOCKUP [ 396.839926][ T9692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 396.849956][ T9692] Call Trace: [ 396.853216][ T9692] [ 396.856127][ T9692] dump_stack_lvl+0x100/0x190 [ 396.860796][ T9692] vpanic+0x552/0x970 [ 396.864756][ T9692] ? __pfx_vpanic+0x10/0x10 [ 396.869243][ T9692] panic+0xd1/0xe0 [ 396.872942][ T9692] ? __pfx_panic+0x10/0x10 [ 396.877342][ T9692] ? check_panic_on_warn+0x1f/0x90 [ 396.882435][ T9692] check_panic_on_warn.cold+0x19/0x34 [ 396.887789][ T9692] ? debug_print_object+0x18e/0x2a0 [ 396.892974][ T9692] __warn.cold+0x191/0x348 [ 396.897375][ T9692] __report_bug+0x296/0x3d0 [ 396.901862][ T9692] ? debug_print_object+0x18e/0x2a0 [ 396.907048][ T9692] ? __pfx___report_bug+0x10/0x10 [ 396.912066][ T9692] report_bug_entry+0xe1/0x290 [ 396.916816][ T9692] ? debug_print_object+0x19b/0x2a0 [ 396.921999][ T9692] handle_bug+0x1cd/0x2a0 [ 396.926309][ T9692] exc_invalid_op+0x17/0x50 [ 396.930791][ T9692] asm_exc_invalid_op+0x1a/0x20 [ 396.935618][ T9692] RIP: 0010:debug_print_object+0x19b/0x2a0 [ 396.941410][ T9692] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d f2 33 e5 0b 41 56 48 8b 14 dd e0 2a 1b 8c 4c 89 e6 <67> 48 0f b9 3a 58 83 05 ac f0 da 0b 01 48 83 c4 18 5b 5d 41 5c 41 [ 396.960998][ T9692] RSP: 0018:ffffc90005027848 EFLAGS: 00010246 [ 396.967045][ T9692] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 396.974992][ T9692] RDX: ffffffff8c1b2a20 RSI: ffffffff8c1b2600 RDI: ffffffff90e43a40 [ 396.982940][ T9692] RBP: 0000000000000001 R08: ffff88805138cf38 R09: ffffffff8bb2bba0 [ 396.990889][ T9692] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8c1b2600 [ 396.998843][ T9692] R13: ffffffff8bb2bbe0 R14: ffffffff8ac05ed0 R15: ffffc90005027908 [ 397.006793][ T9692] ? __pfx_lec_arp_check_expire+0x10/0x10 [ 397.012504][ T9692] ? __pfx_lec_arp_check_expire+0x10/0x10 [ 397.018200][ T9692] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 397.023994][ T9692] __debug_object_init+0x229/0x3d0 [ 397.029090][ T9692] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 397.034880][ T9692] ? __pfx___debug_object_init+0x10/0x10 [ 397.040511][ T9692] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 397.046298][ T9692] timer_init_key+0x35/0x340 [ 397.050877][ T9692] lane_ioctl+0x8f8/0x2600 [ 397.055275][ T9692] ? __pfx_br2684_ioctl+0x10/0x10 [ 397.060287][ T9692] ? __pfx_clip_ioctl+0x10/0x10 [ 397.065121][ T9692] ? __pfx_lane_ioctl+0x10/0x10 [ 397.069951][ T9692] ? atmtcp_ioctl+0x251/0xdb0 [ 397.074609][ T9692] ? __pfx_atmtcp_ioctl+0x10/0x10 [ 397.079621][ T9692] ? do_vcc_ioctl+0x53/0x890 [ 397.084190][ T9692] do_vcc_ioctl+0x493/0x890 [ 397.088675][ T9692] svc_ioctl+0x335/0x730 [ 397.092900][ T9692] ? __pfx_svc_ioctl+0x10/0x10 [ 397.097642][ T9692] ? find_held_lock+0x2b/0x80 [ 397.102311][ T9692] ? futex_wake+0x1ad/0x530 [ 397.106798][ T9692] sock_do_ioctl+0x118/0x280 [ 397.111365][ T9692] ? __pfx_sock_do_ioctl+0x10/0x10 [ 397.116461][ T9692] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 397.121474][ T9692] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 397.128310][ T9692] sock_ioctl+0x599/0x6b0 [ 397.132619][ T9692] ? __pfx_sock_ioctl+0x10/0x10 [ 397.137450][ T9692] ? hook_file_ioctl_common+0x146/0x410 [ 397.142978][ T9692] ? selinux_file_ioctl+0x139/0x290 [ 397.148161][ T9692] ? selinux_file_ioctl+0xb4/0x290 [ 397.153256][ T9692] ? __pfx_sock_ioctl+0x10/0x10 [ 397.158087][ T9692] __x64_sys_ioctl+0x18e/0x210 [ 397.162836][ T9692] do_syscall_64+0x106/0xf80 [ 397.167411][ T9692] ? clear_bhb_loop+0x40/0x90 [ 397.172069][ T9692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.177942][ T9692] RIP: 0033:0x7f34c199c799 [ 397.182337][ T9692] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 397.201923][ T9692] RSP: 002b:00007f34c28ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 397.210313][ T9692] RAX: ffffffffffffffda RBX: 00007f34c1c15fa0 RCX: 00007f34c199c799 [ 397.218262][ T9692] RDX: 0000000000000000 RSI: 00000000000061d0 RDI: 0000000000000004 [ 397.226212][ T9692] RBP: 00007f34c1a32c99 R08: 0000000000000000 R09: 0000000000000000 [ 397.234159][ T9692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 397.242105][ T9692] R13: 00007f34c1c16038 R14: 00007f34c1c15fa0 R15: 00007ffdd9a46bf8 [ 397.250068][ T9692] [ 397.253342][ T9692] Kernel Offset: disabled [ 397.257639][ T9692] Rebooting in 86400 seconds..