last executing test programs: 10.331328437s ago: executing program 1 (id=498): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) r1 = socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x1}}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0xfff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0xff, 0x0, 0x3, 0xfffffffe, 0x3}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x100}) ioctl$sock_proto_private(r3, 0x89ee, &(0x7f0000000080)="51aa0f6b7ad79179465238f192d7098ac10159d5d8cb7a5e07b78f4bdc28c6d2c1ce7fd7a057ad51faf032f2b1") ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x4b67, &(0x7f0000000180)) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) 9.220087984s ago: executing program 2 (id=502): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be20000d072f5b89c3043c47c896ce0bc8731fa595b6b4d45ef26dcca5582054d54d53cd2b685b431c70ea948259c4c869b4fc8db714e4b94bdae214fa68a051d4dca7d2647bec1fc89398d2b9000f224891060017c4700de60beac671e8e8f00cb03588aa6007e71f871ab5c2ff88afc6002084e5b52710aeee835cf0d78e45f70983826fb8579c1fb47d2c59005cff414ed55b0d18a9d446935fb332bb593ee341ab59016f81860324b800c00000000000092d9c5fe34ccb80a61ffcb3363073fd8962823ee45f5d7394e9510f4ac6c702cfabe8a9c55c8dafcdb110036e14c1035cafdfef6a358cbfadb3579a285580a3c080d4e0a48d7bdc38a0437c8c1b3aa408a0000000000002248950b000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32, @ANYRES32=r4], 0x10) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {0x0, 0xd}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x1, 0x1], 0x0, [0x8, 0x6, 0x3c, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x401]}}]}}, @TCA_STAB={0x4}]}, 0x90}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x110}}, 0x0) 8.776736188s ago: executing program 2 (id=503): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) fchdir(r0) r4 = openat$cgroup_freezer_state(r0, &(0x7f00000002c0), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) read$msr(0xffffffffffffffff, &(0x7f0000002700)=""/102392, 0x18ff8) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, 0x0, &(0x7f0000000100)) socket$nl_netfilter(0x10, 0x3, 0xc) write$cgroup_freezer_state(r4, &(0x7f00000000c0)='FROZEN\x00', 0x7) sendfile(r4, r4, 0x0, 0x8000002) socket$nl_generic(0x10, 0x3, 0x10) 7.732771509s ago: executing program 2 (id=506): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f00000006c0), &(0x7f00000002c0)=r0}, 0x20) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0x1a, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000001ac0)={0xffffffffffffffff, 0x4, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d, 0x1c, "12a0020bbe82b398b1c4369d03740250cfaac596b1b3d741dd17c1ac0d38ef2a565ef1e8336300", "a9103939c787a1a26aa43f80026d1f3c4da06963dd89d130e06f528539f3685eec1ff0374c72a964a02447a75df8a69ea917deb7ba193b7e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0x1]}}) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x6, 0x4cb, 0x92c, 0xb5, 0x2, 0x9, 0x6, 0xfffffffb, 0x3}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0xf0) 7.415410156s ago: executing program 1 (id=508): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) r2 = syz_io_uring_setup(0xbd9, &(0x7f0000000640)={0x0, 0xe826, 0x800, 0x1, 0x3c3}, &(0x7f0000000dc0)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) (async) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) (async) sendmsg$can_raw(r0, &(0x7f0000000000)={&(0x7f0000000580)={0x1d, r1}, 0x10, &(0x7f00000003c0)={&(0x7f0000000140)=@canfd={{0x1, 0x1, 0x0, 0x1}, 0x35, 0x0, 0x0, 0x0, "fa77068e9ba7f60291c0c2883b46271c1679c3c0cf5101a328bb3fbd261e7eba5594caf70eec1c694f644e13312db4bda5b524b6e151c1deaf3e9edb7a56adcb"}, 0x48}, 0x2, 0x0, 0x0, 0x20008004}, 0x1004c808) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x0) getdents64(r5, 0xfffffffffffffffe, 0x26) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r5, 0xc0984124, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 7.325360466s ago: executing program 1 (id=509): pipe(&(0x7f0000000040)={0xffffffffffffffff}) socket$packet(0x11, 0x25f2d2024e55700b, 0x300) openat$urandom(0xffffffffffffff9c, 0x0, 0x482, 0x0) io_submit(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r3, &(0x7f0000000480)=""/193, 0xc1, 0xfffffffffffffffc, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000007580)={0x0, 0x0, &(0x7f0000007540)={0x0, 0x44}}, 0x48040) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000280)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$kvm(0xffffffffffffff9c, 0x0, 0x28840, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sched_setscheduler(0x0, 0x2, 0x0) syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) prlimit64(0x0, 0x2, &(0x7f0000000140)={0xe, 0x80000000000008b}, 0x0) epoll_create1(0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x5, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) 7.31713984s ago: executing program 2 (id=510): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f00000005c0)={'syztnl0\x00', 0x0, 0x40, 0x20, 0x2, 0x1, {{0x64, 0x4, 0x2, 0x3, 0x190, 0x64, 0x0, 0xa, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x38, 0x3, [{0x6, 0xd, "72b3b1bdf9090229e6fb10"}, {0x6, 0x7, "08026e8095"}, {0x6, 0x5, "42ceba"}, {0x1, 0x4, "b1a3"}, {0x6, 0x4, "ce16"}, {0x6, 0x11, "5a4189e6c1fe1892059534ac43c13e"}]}, @cipso={0x86, 0x27, 0xffffffffffffffff, [{0x7, 0xb, "d4691ca3fb5c7bb8bf"}, {0x1, 0x10, "8f94324ebd1f2b9edfb97934325d"}, {0x5, 0x6, "bcda6e94"}]}, @timestamp_prespec={0x44, 0x44, 0x6, 0x3, 0x8, [{@broadcast, 0x7}, {@private=0xa010102}, {@multicast2}, {@dev={0xac, 0x14, 0x14, 0x25}, 0x2eff}, {@multicast2, 0x7}, {@broadcast}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@empty, 0x10000}]}, @cipso={0x86, 0x52, 0xffffffffffffffff, [{0x0, 0x6, "c57ca3d6"}, {0x6, 0xf, "a4e5b967433c010b1c6713f2af"}, {0x0, 0xb, "7ab3df22fc8e89e9d7"}, {0x2, 0xd, "0ed1305b1cc83bfa67b7f7"}, {0x6, 0x6, "778b7bb1"}, {0x7, 0x10, "63ed624415c191b8de5330dc90c8"}, {0x0, 0x9, "9ab9f0e4b3bed3"}]}, @cipso={0x86, 0x7c, 0x0, [{0x1, 0xb, "891c7e0c815781cb83"}, {0x5, 0x12, "33f9b2601a07208be36e007566b185fc"}, {0x7, 0xb, "0ffc5793332eb3d73f"}, {0x5, 0xb, "e8a87e38b267c640bd"}, {0x2, 0x10, "9fc2cf2e8c382e57b12301858e6c"}, {0x6, 0x12, "87371338a353e307c40d835facd91f7e"}, {0x1, 0xf, "7e12732eea591fa6f3db30d4cc"}, {0x0, 0x5, "ce5185"}, {0x1, 0x6, "06b0a1c7"}, {0x2, 0x7, "d0a9855ba0"}]}, @timestamp={0x44, 0x8, 0x39, 0x0, 0x5, [0xa379]}, @noop, @noop]}}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x0, 0x24, 0x100, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x7, 0x1}, {0xc, 0xfff1}, {0x8, 0xd}}, [@qdisc_kind_options=@q_ingress, @TCA_STAB={0x0, 0x8, 0x0, 0x1, [{{0x0, 0x1, {0x7, 0xc, 0x3, 0x2, 0x2, 0x9, 0x7fff}}, {0x0, 0x2, [0xfff9]}}, {{0x0, 0x1, {0x8, 0x1, 0x3, 0xfffffff8, 0x1, 0x1ff, 0x6}}, {0x0, 0x2, [0x2540, 0x9, 0x101, 0x9c]}}, {{0x0, 0x1, {0x7, 0xd5, 0x101, 0x81, 0x2, 0x4, 0xb}}, {0x0, 0x2, [0x2, 0xa, 0xbdb0, 0x0, 0x1]}}, {{0x0, 0x1, {0xa, 0xfd, 0x2, 0x1, 0x2, 0x3, 0x6}}, {0x0, 0x2, [0xb7, 0xb7, 0x0, 0x5, 0x5]}}]}]}, 0x50}}, 0x2000e994) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) r4 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_buf(r4, 0x29, 0x1f, 0x0, &(0x7f0000000140)) sendmsg$WG_CMD_SET_DEVICE(r3, 0x0, 0x40000) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c0001800600060065580000080002"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r5, 0x400448c9, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x11) syz_emit_ethernet(0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f00000001c0)) 7.255611229s ago: executing program 0 (id=511): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x1f, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x9}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e22, @loopback}}, 0x0, 0x0, 0x48, 0x0, "f6a7346a1ca3caf66200f0e70b995efa20d5ddc09c0bc0c88e00bdea5e6998967d569964c8b68dae57dea91c0e3ef03a96483bcaaa5ab222d1993083e8e3619fbbff30da0288a8b78a3f921c40fdc06a"}, 0xd8) gettid() sendmmsg$inet(r0, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)="c5d2dc3df405df68c9deaa5aa2", 0xd}, {&(0x7f0000000540)="f56c1003c0a0f4d6eff2713b46698e120a4a3300d2c0e67726a5f82f9e7a1c79f6d5e9d61aa39feca0a7e9ec2ab31f093ccf36a2e4fbf80d4cfde4a0182a27743ea387cc2ec69cabbcb7d13edcea76b3dc53efa8af1dee135dead20d8277871c611d81b34f6e5029849aed6e97110c1cd3a6ece7c3fa3dcf6785c01e737fa6343ec99069d25a2eb3e9ee709be9860b5e6c", 0x91}, {&(0x7f0000000600)="4d66b05d07e530467b7e662652f34913024a1177a80c2ed2b610b185478a", 0x1e}, {&(0x7f0000000640)="fa94c4361456a7a8e2bb1fc83f9b7ecc997163d7963a368a01ca099ef6abd8e8d4065f8f51b2ba0b1729c04943fa151b066b3189f2b9743759c2ea6a37bff44010fa13603c25af1a50155d687680b108f55c543d2b0e836e67fa98fa5e323af5ebbd2ae43db6366bb10d32e5e4aaa949f27739b4e764d4ed875e4b20ef0b8fa1f2944e76d8ba7525f32a1002aad7fae3eea2e225bdf6cd5a78e5fba060ee48de4e61d14ef1d620855bb94c8922b6a70ab65582c97c250d2aa2764e00d30951c27ef1516a47a500aaa9527602dd98f8f32c9447b0fc46d9673d96dccf", 0xdc}, {&(0x7f0000000740)}], 0x5}}, {{&(0x7f0000000800)={0x2, 0x4e24, @empty}, 0x10, &(0x7f00000008c0)=[{&(0x7f0000000840)="1f3ed08a1ea06780855ce67e8b6369c88c2308f2d57f31262871c02ba9c9fb94cedfaf28091957186f7871c395f2aae06a5f39b44d31d56c0c7dc6fe2c14b95ae24e3a97e32b307ba32bea0c3fe18fa15d411b9aa37cb15df12dbe55573d48a7e3d9c47a563ed927ef9ae679978ef42ba91154fced13dcce", 0x78}], 0x1, &(0x7f0000000900)=[@ip_ttl={{0x14, 0x0, 0x2, 0xb}}], 0x18}}, {{&(0x7f0000000940)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10, &(0x7f0000000d80)=[{&(0x7f0000000980)="9319a25f51eb69f6d3d7ad731f442e7d4800efe3dfe7cbffc3576cc0d017999a4809db68b064afe8d32451c3bf2d1d8a146dc396bc228968f12d7c27c1abc487471c6c23e9aa23f4616b91f95334d0b4c9b38e46397f7df3eb3ae045949c5e048eb2d58057c2004f864cc7d87eb2f3adfa03b429ae75010ee38b7c29a297a018ef9ce6796732dbd1baf210bdf6606c913e42fc18ac136dc43864356570467c99fe4cae41012d684dd993534daa5036b8e0cb7870c01c797b69b8e9336bdd5eaa97a1f61f341f422ca018054e496d598c62e339b7573c3337dd6b1aed1a22fe2194", 0xe1}, {0x0}, {&(0x7f0000000c40)="135a642ac3217cdb0ae5c8cd9ddb388f5f347df15b782d6489f28e46986f1fed372300afe246", 0x26}, {&(0x7f0000000c80)="bd9520ea3226c3038e30b6d4fc40e0c5f2039a1d887473021b5ae6cc2a4bbc2add48f969bd70e5e18d17a413370a5ffa618664a7ad56c45504b18c33abd3ca72fb7e592e99f2d439c5a9ce0a4e3c6c055a736714db9e551fd3bf7a571bce8943de38bac4c0f57e17d12a0cf224337b166cefa6856944fdc9811757905adcc3b2ed5078cee5702c3b218c8873cd77633f4ebaa9d7c17bd6e71273862c77e7b09b945febda91304c2d62208f01e5ddc3fa9ec28338a7bafac47162a36fcc23065388941564946b3e77b8c5d53ff93c", 0xce}], 0x4, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], 0x160}}], 0x3, 0x20000000) timer_settime(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000002c0), 0x4) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='setgroups\x00') r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r2, &(0x7f0000000080), 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) socket(0x80000000000000a, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x1d, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000e54903000400"], &(0x7f0000000100)='syzkaller\x00', 0x4000, 0x0, 0x0, 0x40f00, 0x76, '\x00', 0x0, @lsm=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in={{0x2, 0x4e20, @multicast2}}, 0x0, 0x0, 0x24, 0x0, "698e86252c563a2eb894ac1de863c518984bfa5ff139aeeef086eed112e6f0ffba88c7d0888990f99dc2416c1cbccf99d18464a65c3587c97aee9217b992893cebfc606ada5e14e782e63da22a6fe97d"}, 0xd8) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0xec) fcntl$setlease(r4, 0x400, 0x0) 6.645872255s ago: executing program 2 (id=512): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$binfmt_register(0xffffff9c, 0x0, 0x1, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="b4050000000000007112180000000000bc201000210e00000000000000000000159bb11d080054f795ebc6c48b7ee57df364594defe47aa18c81fbcc6c6042dbf743a90b61bae3a57ba478e007fe723b194058bc41fce6c4e98c8804a03ea7c9fc181b86e1c207e4b9c2e55e0d14ef22ee60615176aa293f77cb46958aa9bb869d981e76b9f4fd0f43d8bde942339d7e8fa10c87b5562d7cd8a361f5801b6e29c575dac7f00846c103fa144116db9a8a8850b0715c590a250c52c2b47c7a4176a8c5e2702c9ad3df0cc000"/219], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x3, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x20, 0x0, 0x8}, 0x10}, 0x94) write$binfmt_register(r3, &(0x7f00000004c0)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x0, 0x3a, '#%\\h*@#Lw\x9e5\x9f6k\x886\xafm\xa0\b\x81\xdc\xd1\x8f\x93r2\x0eeu}\xf7\"\xbd&-~\xea(J\xee\'X\x9a\xd4\xfeI6\xd9\x1b\xc8\x14.\xfa\xb8\x03\x16\x96\x11\xa8\x90{G\xe2\xf1u\xd1\xca\x8a>\xc3\x84\xd3\xcf\xa7\x1f\xc1\xbd\x12\xd0\x1e\x98\xce+\x12\xaex{\x91\xc7bw\xcaC\xe1/\x19\xfei\xf0\xa2\x9c3\xee/\xcf\xdew \x1c\xc7=\xfb\xb8\x88\x132?\xbf\xb2\x93B\x01\'#\xc0v\xces\xa4\x13\xb1\x14\x89\xa0\x14P\x97\x81%)\xa1\x0e)2a2\xa2\xef\f\xef\x8a\x95\xdd\xac\xab\xff#T}`\x88r\xb3\xd8\x19\x06\xde\xb7\xf0GR.?i|\xafhs\x1d\xdc\x12\x85!\xaaqg\x10\xec\x1b\xcb\xfc6\xba\xde44m\x96+\r\xb4\x9a\xe8V1\x82\xce\xdd\xddx\xe7H\xa3N\x92\xdb\xaa\xdbe\xc1\x05P\b<\x1e\xd6\x92\x8c\xaa\xbe\xda\\|\xcf\xaf$.\x10\x8d\x9aie\xa1W\x1e\xd2L\xfa\xcc\xfb\xc2\x90\x99\xa9\x9f\xcd\xfasX\x9d\xbb\x8f\x1a', 0x3a, '#%\\h*@#Lw\x9e5\x9f6k\x886\xafm\xa0\b\x81\xdc\xd1\x8f\x93r2\x0eeu}\xf7\"\xbd&-~\xeahJ\xee\'X\x9a\xd4\xfeI6\xd9\x1b\xc8\x14.\xfa\xb8\x03\x16\x96\x11\xa8\x90{\xc5\xe2\xf1u\xd1\xca\x8a>\xc3\x84\xd3\xcf\xa7\x1f\xc1\xb5\x12\xd0\x1e\x98\xce+\x12\xaex{\x91\xc7bw\xcaC\xe1/\x19\xfei\xf0\xa2\x9c3\xee/\xcf\xdew \x1c\xc7=\xfb\xb8\x88\x132\xf9\xbf7K\x8d\x16\xa6\xbf4\v\xces\xa4\x13\xb1\x14\x89\xa0\x14P\x97\x81%)\xa1\x0e)2a2\xa2\xef\f\xef\x8a\x95\xdd\xac\xab\xff#T}`\x88r\xb3\xd8\x19\x06\xde\xb7\xf0GR.?i|\xafhs\x1d\xdc\x12\x85!\xaaqg\x10\xec\x1b\xcb\xfc6\xba\xde\x13\xdf\xc6Z+\r\xb4\x9a\xe8V1\x82\xce\xdd\xddx\xe7H\xa3N\x92\xdb\xaa\xdbe\xc1\x05P\b<\x1e\xd6\x92\x89\xaa\xbe\xda\\|\xcf\xaf$.\x10\x8d\x9aie\xd3W\x1e\xd2L\xfa\xcc\xfb\xc2\x90\x99\xa9\x9f\xcd\xfasX\x9d\xbb\x8f\x1a', 0x3a, './file0'}, 0x237) socket(0x2, 0x5, 0x7f) sendmsg$IPSET_CMD_FLUSH(r2, 0x0, 0x480c4) r4 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(r4) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x34000080) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', 0x0, 0x0, 0x2) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000001a0069a925bd7000"/28], 0x1c}}, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r6, 0x4b45, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$kcm(0xa, 0x2, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000040)={0x6, @rand_addr=0x64010101, 0x4e22, 0x3, 'ovf\x00', 0x1, 0x80005, 0x5}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r7, 0x0, 0x485, 0x0, 0x0) 6.593438234s ago: executing program 0 (id=513): r0 = socket(0x400000000010, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001500)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket$inet6_sctp(0xa, 0x1, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) (async) socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0x10, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0xc, 0x2, [@TCA_GRED_LIMIT={0x8, 0x5, 0xea0}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48801}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0x10, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0xc, 0x2, [@TCA_GRED_LIMIT={0x8, 0x5, 0xea0}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48801}, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$xdp(0x2c, 0x3, 0x0) (async) socket$xdp(0x2c, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d40)=@newqdisc={0x3a8, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xffff}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x378, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x64, 0x2, 0x3, 0x17, 0xd, 0x1e, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x1f}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x3a8}}, 0x0) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x100}, 0x0) write(r0, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030004000500e1000c0400070080000900", 0x33a) (async) write(r0, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030004000500e1000c0400070080000900", 0x33a) 6.165395142s ago: executing program 0 (id=514): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0xd, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="000000100000daa76b6d128172b14d0e3e500000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/21], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 6.001742991s ago: executing program 3 (id=515): socket$netlink(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) syz_emit_vhci(0x0, 0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r4 = openat(r2, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r4, &(0x7f0000000100)='=', 0x1, 0x4fed3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r3, 0x0) (fail_nth: 5) 4.81164688s ago: executing program 0 (id=517): ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x0, 0x240, 0x300, &(0x7f0000000180)=[0x6bd1a312, 0xec63, 0xd, 0x8, 0x98b9, 0x80000000000000c, 0x0, 0x100000000000004, 0x10000, 0x100, 0xfe51, 0x0, 0x3, 0x5, 0x5, 0x49, 0x3fc, 0x4, 0x0, 0x9, 0x8, 0x7, 0x1c1, 0xffffffffffffffbf, 0x2, 0x2, 0x6, 0x7, 0x96, 0x1, 0xffffffff00000000, 0x0, 0x4, 0x7, 0x23b, 0x10000000003, 0x2, 0x3, 0x4, 0x8, 0x6, 0x6, 0x8000003, 0xa3de, 0x4e, 0x8, 0x5c3e, 0x400, 0x3, 0xfffffffffffffff3, 0xfffffffffffffff8, 0x2, 0xe, 0x7, 0x0, 0xe6, 0x200000000000101, 0x5, 0x100004, 0x63, 0x6, 0x7, 0x40000005, 0xfffffffeffffffff, 0xc, 0xd, 0x5929, 0xe8, 0x80000000, 0xfffffffffffffc00, 0x2, 0x4, 0x2, 0xcdc, 0x7, 0x2, 0x3, 0x2, 0x8, 0xffffffff, 0x101, 0x4, 0x6, 0xab6, 0x4, 0x4, 0x1, 0x80000007, 0xb, 0xff, 0x6, 0xe, 0x5, 0x400000000008061d, 0x3, 0x8, 0xf6, 0x4, 0x4, 0x200, 0xfffffffffffffffc, 0xe53e, 0x2c, 0x8, 0x2293332f, 0x6, 0x5, 0x0, 0xd, 0x3, 0x5, 0x1, 0x2, 0x7, 0xdfd4, 0xfffd, 0x10, 0x4cb, 0x8, 0x1, 0x53e0f0fe, 0xeb4, 0x3, 0xfffffffffffffffe, 0xb690, 0x3ffc00000, 0x8, 0x3]}) memfd_create(&(0x7f00000001c0)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0\xbc]\x12\xc0D\x9f\x80\x8f\xfe\xf2\xc2)\xccm\xacz\xc1\xad\xe4\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) r1 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r1, r1, 0x21) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 64) getrlimit(0xc, &(0x7f0000000300)) (async, rerun: 64) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async, rerun: 32) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async, rerun: 32) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000680)) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) openat2$dir(0xffffff9c, 0x0, &(0x7f00000003c0)={0x100100, 0x8, 0x7d}, 0x18) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x394, r5, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x348, 0x8, 0x0, 0x1, [{0x9c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x50, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "eff93d58460ea431f2cb4a6894ddb2834088d7445bf5afdd0619ce173f1db717"}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "491bc0be1dc1f88092e741a88b64f6dd9218ad21b44b472e44f1d0807ee6675c"}]}, {0x25c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x9, 0x7, @empty, 0x3}}, @WGPEER_A_ALLOWEDIPS={0x214, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}]}]}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x394}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) (async, rerun: 32) syz_clone(0x1010000, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0) (rerun: 32) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) sendfile(r6, r6, 0x0, 0x40008) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',max_read=0x0000000000000001,\x00']) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x109202) ioctl$USBDEVFS_SETINTERFACE(r7, 0x80085504, &(0x7f0000000180)) 4.810855419s ago: executing program 3 (id=518): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{0x1, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="0000000000000000400000000e0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000020000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000001400), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001440)={'team0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001480)={r2, r3, 0x25, 0x4, @void}, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r4, &(0x7f0000000400)=""/4096, 0x1000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{0x1, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f0000000440)}, 0x20) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000500), 0x200100, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x9, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000c6000100250000008510000001000000950000000000000018400000020000000000000000000000950000000000000095"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', r8, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x807}, 0x94) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f00000014c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0004000c000000080000000a0000000000000c04000000005f5f2e6c0030000025f011166e4fe6d944ec3ca74f50445b396a38c134093e343fe55acac40b01000000fddf1cc4735e7f64ce23bbd76676459e473f3d2dfb007f80500e4d4eb3877ead41e1ce92f6d6ed13608d49cac2101382165e2a972525c9cb06282bc1dadd2e0b5a7191d4f0d04dc8397dc247d7cc6d2cb995adfd6de72e2a909d97286fc68c6cfb601daec40889cb5a20ff3d22848cd630c2c99fc7c87bb419d3af5e904d6e05bac8e64d0640f1f753979a9f393d2b7e1cf8655ad04e0d42a89b24e0c174b5f61ded40145ed514eada5194b1b73b4038336e4e79509cc13e67bfefc89ee66fa21c03fa741b809de79670a2acae8790b378026a8354b903620afc76aa57fbd6d8f7dd4261e45373a72ab1c5fbe563eb31acc6b5e78b7f51101e03f9025f211934c97bf1414b5a29fa9d158a9b85b95d25414cb63a7e9e"], &(0x7f0000000780)=""/12, 0x2c, 0xc, 0x0, 0x40}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001640)={0x6, 0x2c, &(0x7f0000000540)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_val={0x18, 0x5, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0xbc}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @jmp={0x5, 0x1, 0x1, 0x3, 0x7, 0x18, 0x4}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, &(0x7f0000000700), 0x41100, 0x50, '\x00', r8, 0x25, r9, 0x8, &(0x7f0000000800)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x4, 0xa, 0x1, 0x7fffffff}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000880)=[{0x3, 0x5, 0x5, 0x3}, {0x3, 0x3, 0xd, 0x1}, {0x0, 0x5, 0x5, 0x2}, {0x0, 0x1, 0x9, 0x8}, {0x3, 0x4, 0x9, 0x5}, {0x4, 0x1, 0xc, 0xb}], 0x10, 0x5}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0000000000010000", @ANYRES32=0x0, @ANYBLOB="0100008000"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) syz_emit_ethernet(0x6a, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaad2380eb3968080089"], 0x0) r10 = socket$unix(0x1, 0x5, 0x0) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r11, &(0x7f0000000000)={0xa, 0x4e24, 0x4, @private2, 0x6}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x38, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x100, @private0={0xfc, 0x0, '\x00', 0x1}, 0x81}, @in6={0xa, 0x4e24, 0x1, @private2}]}, &(0x7f0000000400)=0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) getsockname(r10, &(0x7f0000000140)=@ieee802154={0x24, @long}, &(0x7f00000001c0)=0x80) ioctl$sock_proto_private(r10, 0x8b2d, &(0x7f0000000080)) r12 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) fcntl$dupfd(r12, 0x0, r12) bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="34130b00000007000004080000000800000005100000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x10000000, 0x2}, 0x50) 4.305336569s ago: executing program 2 (id=519): r0 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000700)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f0000000140)={0x40, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x84, &(0x7f0000000400)={0x40, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000900)={0x34, &(0x7f0000000040)={0x40, 0x13, 0x1, "f3"}, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201410117512920570509201ec70102030109022400010200100009045807028ab53800090506020001000006090582020002"], 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000006c0)={0x44, &(0x7f0000000500)=ANY=[@ANYBLOB="40300600000030b71e000000"], 0x0, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x9}, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x83, 0x1, "bc"}, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, &(0x7f00000001c0)={0x14, &(0x7f0000000080)={0x0, 0x24, 0xa8, {0xa8, 0xc, "444578f7b9077376a97234202bf6ff02eb9266ad18f94003c2d6c3d5065396b3c35d4788376ac8dd29e9508f229eebdee67cce935978741b85c35554c05e3f56aba597e3ed17020964c955b80afb6e0a9ee9e3d89c02ac1c25af757457802929e7e2db1eb602f87387cd7e7fcae30822358bbb656596bc603178cd8a130d651ee6cc79f67a2e9e0d79eef2fb069d93e4f51bc1aff7cf4a4b48676abb012eb7072b0e83eaa8b5"}}, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000002c0)={0x1c, &(0x7f0000000200)={0x40, 0x19, 0x2d, "acbb8c06229793edf0691fc4cc0db6c4c551e0c67af51ffdfabfea8886e70093abfbb58369fc2606d0f714da43"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x6}}) write$sndseq(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x50, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000ec667d40dd0432900bfd0000000109023e0001000000000904000000020a0000252406000005240000000d240f010000000000000000001524120000a317a88b045e4f17a607c0"], 0x0) 4.057849183s ago: executing program 4 (id=520): mprotect(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) r1 = accept4$x25(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)=0x12, 0x0) ioctl$SIOCX25SCAUSEDIAG(r1, 0x89ec, &(0x7f0000000200)={0x2, 0x3}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x2000001, 0x13, 0xffffffffffffffff, 0x517a3000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r3, &(0x7f0000034000)=""/102378, 0x18fea) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r4, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000180)="0b036c00e0ff64000200475400f6a13bb10000000800894f4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r7}, 0x14) r8 = socket$packet(0x11, 0x3, 0x300) r9 = dup(r8) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r10 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$sock_cred(r10, 0x1, 0x38, 0x0, &(0x7f0000003b40)) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000000)={0x1, r9}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0x20004, r2, 0x2}) prctl$PR_SCHED_CORE(0x4c, 0x0, 0x0, 0x0, 0x0) openat$comedi(0xffffff9c, &(0x7f0000000440)='/dev/comedi0\x00', 0x101001, 0x0) writev(r0, &(0x7f0000000800), 0x0) 4.042715777s ago: executing program 1 (id=521): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @short={0x2, 0x1, 0xaaa0}}, 0x14) 3.957830251s ago: executing program 1 (id=522): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x1f, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="180200000200000000000000f2ffffff85004b8d401700009d0000009500"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x9}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e22, @loopback}}, 0x0, 0x0, 0x48, 0x0, "f6a7346a1ca3caf66200f0e70b995efa20d5ddc09c0bc0c88e00bdea5e6998967d569964c8b68dae57dea91c0e3ef03a96483bcaaa5ab222d1993083e8e3619fbbff30da0288a8b78a3f921c40fdc06a"}, 0xd8) gettid() sendmmsg$inet(r0, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)="c5d2dc3df405df68c9deaa5aa2", 0xd}, {&(0x7f0000000540)="f56c1003c0a0f4d6eff2713b46698e120a4a3300d2c0e67726a5f82f9e7a1c79f6d5e9d61aa39feca0a7e9ec2ab31f093ccf36a2e4fbf80d4cfde4a0182a27743ea387cc2ec69cabbcb7d13edcea76b3dc53efa8af1dee135dead20d8277871c611d81b34f6e5029849aed6e97110c1cd3a6ece7c3fa3dcf6785c01e737fa6343ec99069d25a2eb3e9ee709be9860b5e6c", 0x91}, {&(0x7f0000000600)="4d66b05d07e530467b7e662652f34913024a1177a80c2ed2b610b185478a", 0x1e}, {&(0x7f0000000640)="fa94c4361456a7a8e2bb1fc83f9b7ecc997163d7963a368a01ca099ef6abd8e8d4065f8f51b2ba0b1729c04943fa151b066b3189f2b9743759c2ea6a37bff44010fa13603c25af1a50155d687680b108f55c543d2b0e836e67fa98fa5e323af5ebbd2ae43db6366bb10d32e5e4aaa949f27739b4e764d4ed875e4b20ef0b8fa1f2944e76d8ba7525f32a1002aad7fae3eea2e225bdf6cd5a78e5fba060ee48de4e61d14ef1d620855bb94c8922b6a70ab65582c97c250d2aa2764e00d30951c27ef1516a47a500aaa9527602dd98f8f32c9447b0fc46", 0xd6}, {0x0}], 0x5}}, {{&(0x7f0000000800)={0x2, 0x4e24, @empty}, 0x10, &(0x7f00000008c0)=[{&(0x7f0000000840)="1f3ed08a1ea06780855ce67e8b6369c88c2308f2d57f31262871c02ba9c9fb94cedfaf28091957186f7871c395f2aae06a5f39b44d31d56c0c7dc6fe2c14b95ae24e3a97e32b307ba32bea0c3fe18fa15d411b9aa37cb15df12dbe55573d48a7e3d9c47a563ed927ef9ae679978ef42ba91154fced", 0x75}], 0x1, &(0x7f0000000900)=[@ip_ttl={{0x14, 0x0, 0x2, 0xb}}], 0x18}}], 0x2, 0x20000000) timer_settime(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000002c0), 0x4) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='setgroups\x00') r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r2, &(0x7f0000000080), 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) socket(0x80000000000000a, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x1d, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000e54903000400"], &(0x7f0000000100)='syzkaller\x00', 0x4000, 0x0, 0x0, 0x40f00, 0x76, '\x00', 0x0, @lsm=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in={{0x2, 0x4e20, @multicast2}}, 0x0, 0x0, 0x24, 0x0, "698e86252c563a2eb894ac1de863c518984bfa5ff139aeeef086eed112e6f0ffba88c7d0888990f99dc2416c1cbccf99d18464a65c3587c97aee9217b992893cebfc606ada5e14e782e63da22a6fe97d"}, 0xd8) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0xec) fcntl$setlease(r5, 0x400, 0x0) 3.853311424s ago: executing program 4 (id=523): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f00000005c0)={'syztnl0\x00', 0x0, 0x40, 0x20, 0x2, 0x1, {{0x64, 0x4, 0x2, 0x3, 0x190, 0x64, 0x0, 0xa, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x38, 0x3, [{0x6, 0xd, "72b3b1bdf9090229e6fb10"}, {0x6, 0x7, "08026e8095"}, {0x6, 0x5, "42ceba"}, {0x1, 0x4, "b1a3"}, {0x6, 0x4, "ce16"}, {0x6, 0x11, "5a4189e6c1fe1892059534ac43c13e"}]}, @cipso={0x86, 0x27, 0xffffffffffffffff, [{0x7, 0xb, "d4691ca3fb5c7bb8bf"}, {0x1, 0x10, "8f94324ebd1f2b9edfb97934325d"}, {0x5, 0x6, "bcda6e94"}]}, @timestamp_prespec={0x44, 0x44, 0x6, 0x3, 0x8, [{@broadcast, 0x7}, {@private=0xa010102}, {@multicast2}, {@dev={0xac, 0x14, 0x14, 0x25}, 0x2eff}, {@multicast2, 0x7}, {@broadcast}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@empty, 0x10000}]}, @cipso={0x86, 0x52, 0xffffffffffffffff, [{0x0, 0x6, "c57ca3d6"}, {0x6, 0xf, "a4e5b967433c010b1c6713f2af"}, {0x0, 0xb, "7ab3df22fc8e89e9d7"}, {0x2, 0xd, "0ed1305b1cc83bfa67b7f7"}, {0x6, 0x6, "778b7bb1"}, {0x7, 0x10, "63ed624415c191b8de5330dc90c8"}, {0x0, 0x9, "9ab9f0e4b3bed3"}]}, @cipso={0x86, 0x7c, 0x0, [{0x1, 0xb, "891c7e0c815781cb83"}, {0x5, 0x12, "33f9b2601a07208be36e007566b185fc"}, {0x7, 0xb, "0ffc5793332eb3d73f"}, {0x5, 0xb, "e8a87e38b267c640bd"}, {0x2, 0x10, "9fc2cf2e8c382e57b12301858e6c"}, {0x6, 0x12, "87371338a353e307c40d835facd91f7e"}, {0x1, 0xf, "7e12732eea591fa6f3db30d4cc"}, {0x0, 0x5, "ce5185"}, {0x1, 0x6, "06b0a1c7"}, {0x2, 0x7, "d0a9855ba0"}]}, @timestamp={0x44, 0x8, 0x39, 0x0, 0x5, [0xa379]}, @noop, @noop]}}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x0, 0x24, 0x100, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x7, 0x1}, {0xc, 0xfff1}, {0x8, 0xd}}, [@qdisc_kind_options=@q_ingress, @TCA_STAB={0x0, 0x8, 0x0, 0x1, [{{0x0, 0x1, {0x7, 0xc, 0x3, 0x2, 0x2, 0x9, 0x7fff}}, {0x0, 0x2, [0xfff9]}}, {{0x0, 0x1, {0x8, 0x1, 0x3, 0xfffffff8, 0x1, 0x1ff, 0x6}}, {0x0, 0x2, [0x2540, 0x9, 0x101, 0x9c]}}, {{0x0, 0x1, {0x7, 0xd5, 0x101, 0x81, 0x2, 0x4, 0xb}}, {0x0, 0x2, [0x2, 0xa, 0xbdb0, 0x0, 0x1]}}, {{0x0, 0x1, {0xa, 0xfd, 0x2, 0x1, 0x2, 0x3, 0x6}}, {0x0, 0x2, [0xb7, 0xb7, 0x0, 0x5, 0x5]}}]}]}, 0x50}}, 0x2000e994) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) r4 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_buf(r4, 0x29, 0x1f, 0x0, &(0x7f0000000140)) sendmsg$WG_CMD_SET_DEVICE(r3, 0x0, 0x40000) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c0001800600060065580000080002"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r5, 0x400448c9, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x11) syz_emit_ethernet(0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f00000001c0)) 3.098731164s ago: executing program 3 (id=524): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x2b, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x8000000, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1e, &(0x7f0000000180)={@mcast1, 0x8000000, 0x0, 0xff, 0x0, 0x4}, 0x20) getsockopt$rose(r0, 0x104, 0x3, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0xcb, 0xf, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./cgroup\x00', 0x0, 0x2000010, 0x0) 3.090070162s ago: executing program 4 (id=525): socket(0x2b, 0x1, 0x1) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) read(r0, &(0x7f0000000340)=""/4091, 0xffb) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000000)) 3.075224062s ago: executing program 1 (id=526): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) close(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r3) r5 = syz_open_dev$loop(&(0x7f0000000300), 0x8f, 0x40240) ioctl$LOOP_CHANGE_FD(r5, 0x401070cd, 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x88854}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000109737107d071004c1ec0102030109021b00a081b1f4000904000001362434000905df"], 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x74f280, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000004600)='map_files\x00') fchdir(r7) write$cgroup_subtree(r7, &(0x7f0000000180)={[{0x2d, 'net_cls'}, {0x6, 'net'}, {0x2d, 'net_prio'}, {0x2b, 'perf_event'}, {0x2b, 'cpuset'}, {0x2d, 'pids'}]}, 0x32) close(r6) r8 = socket$unix(0x1, 0x2, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x60000) sendmsg$nl_route_sched(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0x18, 0xb}, {0x6, 0xd}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x0, 0x1, 0x406, 0x4, 0xffffffff, 0xb}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x81d3, 0x44, 0x80, 0x4}}]}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004060}, 0x4008000) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000000300)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.827305175s ago: executing program 4 (id=527): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001340)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x8004, {0x0, 0x0, 0x0, r5, {}, {}, {0xa, 0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newtfilter={0x54, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xfff2, 0xf}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x24, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x10000}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xffff, 0x7}}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x3, 0xe}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x2008c014) 2.446181097s ago: executing program 0 (id=528): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0xd, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="000000100000daa76b6d128172b14d0e3e500000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/21], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.803673161s ago: executing program 4 (id=529): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$binfmt_register(0xffffff9c, 0x0, 0x1, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="b4050000000000007112180000000000bc201000210e00000000000000000000159bb11d080054f795ebc6c48b7ee57df364594defe47aa18c81fbcc6c6042dbf743a90b61bae3a57ba478e007fe723b194058bc41fce6c4e98c8804a03ea7c9fc181b86e1c207e4b9c2e55e0d14ef22ee60615176aa293f77cb46958aa9bb869d981e76b9f4fd0f43d8bde942339d7e8fa10c87b5562d7cd8a361f5801b6e29c575dac7f00846c103fa144116db9a8a8850b0715c590a250c52c2b47c7a4176a8c5e2702c9ad3df0cc000"/219], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x3, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x20, 0x0, 0x8}, 0x10}, 0x94) write$binfmt_register(r3, &(0x7f00000004c0)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x0, 0x3a, '#%\\h*@#Lw\x9e5\x9f6k\x886\xafm\xa0\b\x81\xdc\xd1\x8f\x93r2\x0eeu}\xf7\"\xbd&-~\xea(J\xee\'X\x9a\xd4\xfeI6\xd9\x1b\xc8\x14.\xfa\xb8\x03\x16\x96\x11\xa8\x90{G\xe2\xf1u\xd1\xca\x8a>\xc3\x84\xd3\xcf\xa7\x1f\xc1\xbd\x12\xd0\x1e\x98\xce+\x12\xaex{\x91\xc7bw\xcaC\xe1/\x19\xfei\xf0\xa2\x9c3\xee/\xcf\xdew \x1c\xc7=\xfb\xb8\x88\x132?\xbf\xb2\x93B\x01\'#\xc0v\xces\xa4\x13\xb1\x14\x89\xa0\x14P\x97\x81%)\xa1\x0e)2a2\xa2\xef\f\xef\x8a\x95\xdd\xac\xab\xff#T}`\x88r\xb3\xd8\x19\x06\xde\xb7\xf0GR.?i|\xafhs\x1d\xdc\x12\x85!\xaaqg\x10\xec\x1b\xcb\xfc6\xba\xde44m\x96+\r\xb4\x9a\xe8V1\x82\xce\xdd\xddx\xe7H\xa3N\x92\xdb\xaa\xdbe\xc1\x05P\b<\x1e\xd6\x92\x8c\xaa\xbe\xda\\|\xcf\xaf$.\x10\x8d\x9aie\xa1W\x1e\xd2L\xfa\xcc\xfb\xc2\x90\x99\xa9\x9f\xcd\xfasX\x9d\xbb\x8f\x1a', 0x3a, '#%\\h*@#Lw\x9e5\x9f6k\x886\xafm\xa0\b\x81\xdc\xd1\x8f\x93r2\x0eeu}\xf7\"\xbd&-~\xeahJ\xee\'X\x9a\xd4\xfeI6\xd9\x1b\xc8\x14.\xfa\xb8\x03\x16\x96\x11\xa8\x90{\xc5\xe2\xf1u\xd1\xca\x8a>\xc3\x84\xd3\xcf\xa7\x1f\xc1\xb5\x12\xd0\x1e\x98\xce+\x12\xaex{\x91\xc7bw\xcaC\xe1/\x19\xfei\xf0\xa2\x9c3\xee/\xcf\xdew \x1c\xc7=\xfb\xb8\x88\x132\xf9\xbf7K\x8d\x16\xa6\xbf4\v\xces\xa4\x13\xb1\x14\x89\xa0\x14P\x97\x81%)\xa1\x0e)2a2\xa2\xef\f\xef\x8a\x95\xdd\xac\xab\xff#T}`\x88r\xb3\xd8\x19\x06\xde\xb7\xf0GR.?i|\xafhs\x1d\xdc\x12\x85!\xaaqg\x10\xec\x1b\xcb\xfc6\xba\xde\x13\xdf\xc6Z+\r\xb4\x9a\xe8V1\x82\xce\xdd\xddx\xe7H\xa3N\x92\xdb\xaa\xdbe\xc1\x05P\b<\x1e\xd6\x92\x89\xaa\xbe\xda\\|\xcf\xaf$.\x10\x8d\x9aie\xd3W\x1e\xd2L\xfa\xcc\xfb\xc2\x90\x99\xa9\x9f\xcd\xfasX\x9d\xbb\x8f\x1a', 0x3a, './file0'}, 0x237) socket(0x2, 0x5, 0x7f) sendmsg$IPSET_CMD_FLUSH(r2, 0x0, 0x480c4) r4 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(r4) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x34000080) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', 0x0, 0x0, 0x2) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000001a0069a925bd7000"/28], 0x1c}}, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r6, 0x4b45, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$kcm(0xa, 0x2, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000040)={0x6, @rand_addr=0x64010101, 0x4e22, 0x3, 'ovf\x00', 0x1, 0x80005, 0x5}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r7, 0x0, 0x485, 0x0, 0x0) 1.690519167s ago: executing program 3 (id=530): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8c) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, 0x0, 0x40814) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f00000000c0), &(0x7f0000000380)=0x4) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000000)='cifs\x00', 0x20000, &(0x7f00000001c0)='=\n\x9b\xa1Q\x83\xe9\n@\xf6\"2a\xd7\x1fch\x1a}#\xfa\xe4\n\xdc[\x03\x97\xcd\xf1\xa6b\x9a\x1f\xff\xff\xffIT\xe4\x8c&\xac\xe6:\xc5\xe8\xd9\"\x82\xd5\xeb\x90\xef1:\xba\xc3\xc3\xd3\xad\'\xc44\x17,,\x8dZz\x04\x17-#F\xc7<\xe6\xf5]%gC\x9e\xca\nS\xc3\xc8\x98\xd8\xc8\x9eZ\xa76\x9f\xc2=\xaa\xcet7\xb9\xbd\xd47\xe3\xc8@$8\v\x9f\xfd\xe1!\x11\x19Y\x06J\x8f\x80\xef9Tw8\x1b\xe2\xf3\x85\xd5}\xa5\xb7\xd5|') openat$kvm(0xffffffffffffff9c, 0x0, 0x800000, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) readv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000001300)=""/35, 0x23}], 0x1) getgroups(0x2, &(0x7f0000000000)=[0x0, 0x0]) 951.718972ms ago: executing program 0 (id=531): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) fchdir(0xffffffffffffffff) r3 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000002c0), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) read$msr(0xffffffffffffffff, &(0x7f0000002700)=""/102392, 0x18ff8) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, 0x0, &(0x7f0000000100)) socket$nl_netfilter(0x10, 0x3, 0xc) write$cgroup_freezer_state(r3, &(0x7f00000000c0)='FROZEN\x00', 0x7) sendfile(r3, r3, 0x0, 0x8000002) socket$nl_generic(0x10, 0x3, 0x10) 771.31945ms ago: executing program 3 (id=532): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @short={0x2, 0x1, 0xaaa0}}, 0x14) 528.815316ms ago: executing program 3 (id=533): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000100)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) r1 = syz_open_procfs(0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x2, 0x7, 0x7fc00005}]}) syz_clone3(0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000000)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000140)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, &(0x7f00000000c0)}) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000005c0)=@nat={'nat\x00', 0x1b, 0x5, 0x4f0, 0xf0, 0xf0, 0xffffffff, 0x0, 0x1e0, 0x420, 0x420, 0xffffffff, 0x420, 0x420, 0x5, &(0x7f0000000180), {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x2a}, [0xff000000, 0xff, 0xff, 0xff], [0xff000000, 0xffffff00, 0xff000000], 'pimreg0\x00', 'rose0\x00', {}, {}, 0x3c, 0xff, 0x5, 0x2}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x9, @ipv4=@remote, @ipv4=@multicast1, @gre_key=0x5, @port=0x4e22}}}, {{@ipv6={@local, @loopback, [0xffffffff, 0x0, 0x0, 0xff000000], [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 'team_slave_0\x00', 'vlan0\x00', {}, {0xff}, 0x2f, 0x56, 0x4, 0x31}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x10, @ipv4=@multicast2, @ipv4=@multicast1, @gre_key=0x9, @gre_key=0x6}}}, {{@uncond, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@frag={{0x30}, {[0xfff, 0xba], 0x6, 0x0, 0x2}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x3, @ipv4=@broadcast, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, @gre_key=0x9, @port=0x400}}}, {{@uncond, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@ah={{0x30}, {[0x4d4, 0x4d4], 0x8, 0xb, 0x2}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x3, @ipv6=@mcast2, @ipv6=@private0, @gre_key=0xf, @port=0x4e24}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x550) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) dup(r7) open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000340)=ANY=[@ANYBLOB="c4000000190001002dbd70000000000000000000000000000002000000000001ac1e0001000000000000684df9b5fbfedf496ef83b82cc37000000000000d903c989000000000a00300000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="07000000000000000c00000000000000000000000000000000000000000000000300000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000088010000000000000001000000000000000a0010000100000000000000"], 0xc4}}, 0x0) 0s ago: executing program 4 (id=534): socket(0x10, 0x803, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xdc, 0x0, 0x7fff7ffc}]}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x40) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) fanotify_init(0xf00, 0x1) syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x10040) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x4008004) kernel console output (not intermixed with test programs): nvalid bInterval 0, changing to 7 [ 92.060832][ T5890] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.088533][ T5890] usb 5-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 92.104029][ T5890] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.137468][ T5890] usb 5-1: config 0 descriptor?? [ 92.574430][ T5890] usbhid 5-1:0.0: can't add hid device: -71 [ 92.623492][ T5890] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 92.651534][ T6361] syzkaller1: entered promiscuous mode [ 92.807567][ T5890] usb 5-1: USB disconnect, device number 3 [ 92.875301][ T6361] syzkaller1: entered allmulticast mode [ 93.795638][ T30] audit: type=1400 audit(1769244977.052:2696): avc: denied { create } for pid=6379 comm="syz.4.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 93.995496][ T30] audit: type=1400 audit(1769244977.082:2697): avc: denied { setopt } for pid=6379 comm="syz.4.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 94.337176][ T30] audit: type=1400 audit(1769244977.522:2698): avc: denied { node_bind } for pid=6386 comm="syz.4.104" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 94.401328][ T30] audit: type=1400 audit(1769244977.622:2699): avc: denied { block_suspend } for pid=6386 comm="syz.4.104" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 94.617223][ T30] audit: type=1400 audit(1769244977.862:2700): avc: denied { bind } for pid=6392 comm="syz.0.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 94.673510][ T6397] netlink: 12 bytes leftover after parsing attributes in process `syz.4.108'. [ 94.683116][ T6397] netlink: 20 bytes leftover after parsing attributes in process `syz.4.108'. [ 94.838439][ T6403] netlink: 8 bytes leftover after parsing attributes in process `syz.0.110'. [ 94.950453][ T6403] : entered promiscuous mode [ 95.266577][ T9] IPVS: starting estimator thread 0... [ 95.451715][ T6411] IPVS: using max 50 ests per chain, 120000 per kthread [ 95.486916][ T6415] netlink: 24 bytes leftover after parsing attributes in process `syz.0.111'. [ 95.499559][ T6415] IPv6: syztnl0: Disabled Multicast RS [ 96.266319][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 96.284844][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 96.284876][ T30] audit: type=1400 audit(1769244979.542:2710): avc: denied { write } for pid=6423 comm="syz.4.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 96.570884][ T9] usb 4-1: device descriptor read/64, error -71 [ 96.591259][ T30] audit: type=1400 audit(1769244979.852:2711): avc: denied { write } for pid=6429 comm="syz.0.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 96.706052][ T30] audit: type=1400 audit(1769244979.872:2712): avc: denied { nlmsg_write } for pid=6429 comm="syz.0.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 96.841572][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 96.942075][ T30] audit: type=1400 audit(1769244980.202:2713): avc: denied { execute } for pid=6447 comm="syz.2.119" path="/28/cpu.stat" dev="tmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 97.014331][ T9] usb 4-1: device descriptor read/64, error -71 [ 97.162541][ T9] usb usb4-port1: attempt power cycle [ 97.308229][ T6461] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 97.721083][ T30] audit: type=1400 audit(1769244980.632:2714): avc: denied { read } for pid=6457 comm="syz.4.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 97.990855][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 98.061274][ T9] usb 4-1: device descriptor read/8, error -71 [ 98.301170][ T6474] No such timeout policy "syz1" [ 98.312075][ T6474] No control pipe specified [ 98.320613][ T6474] netlink: 8 bytes leftover after parsing attributes in process `syz.0.122'. [ 98.331177][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 98.393311][ T30] audit: type=1400 audit(1769244981.572:2715): avc: denied { mounton } for pid=6468 comm="syz.0.122" path="/27/file0" dev="tmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 98.622093][ T9] usb 4-1: device descriptor read/8, error -71 [ 98.756989][ T9] usb usb4-port1: unable to enumerate USB device [ 99.451727][ T6491] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 99.697001][ T6491] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 100.015933][ T30] audit: type=1400 audit(1769244983.272:2716): avc: denied { create } for pid=6508 comm="syz.0.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 100.342700][ T30] audit: type=1400 audit(1769244983.292:2717): avc: denied { write } for pid=6508 comm="syz.0.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 101.491983][ T6530] netlink: 16 bytes leftover after parsing attributes in process `syz.3.134'. [ 102.378542][ T30] audit: type=1400 audit(1769244985.632:2718): avc: denied { create } for pid=6527 comm="syz.0.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 102.401018][ T6537] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 102.560899][ T30] audit: type=1400 audit(1769244985.662:2719): avc: denied { ioctl } for pid=6527 comm="syz.0.136" path="socket:[10518]" dev="sockfs" ino=10518 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 102.808500][ T6555] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 102.823018][ T6551] netlink: 'syz.4.140': attribute type 1 has an invalid length. [ 102.830743][ T6551] netlink: 'syz.4.140': attribute type 2 has an invalid length. [ 102.838492][ T6551] netlink: 'syz.4.140': attribute type 2 has an invalid length. [ 102.846193][ T6551] netlink: 'syz.4.140': attribute type 1 has an invalid length. [ 102.854028][ T6551] netlink: 'syz.4.140': attribute type 1 has an invalid length. [ 103.106913][ T6548] netlink: 8 bytes leftover after parsing attributes in process `syz.2.139'. [ 103.132266][ T6548] : entered promiscuous mode [ 103.550989][ T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 104.309718][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 57360, setting to 1024 [ 104.389589][ T9] usb 1-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 104.501447][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.515923][ T9] usb 1-1: config 0 descriptor?? [ 104.934940][ T6565] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 105.166455][ T6559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.331111][ T6559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.397418][ T6578] syzkaller1: entered promiscuous mode [ 105.417950][ T6578] syzkaller1: entered allmulticast mode [ 106.316458][ T30] audit: type=1400 audit(1769244989.572:2720): avc: denied { ioctl } for pid=6558 comm="syz.0.144" path="socket:[10616]" dev="sockfs" ino=10616 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 106.316905][ T6583] netlink: 84 bytes leftover after parsing attributes in process `syz.0.144'. [ 106.416622][ T6579] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 106.735181][ T30] audit: type=1400 audit(1769244989.992:2721): avc: denied { write } for pid=6594 comm="syz.3.155" path="" dev="sockfs" ino=11368 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 106.918556][ T6590] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 106.984054][ T6601] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 107.018622][ T30] audit: type=1400 audit(1769244990.252:2722): avc: denied { read write } for pid=6598 comm="syz.3.156" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 107.076446][ T6601] netlink: 'syz.3.156': attribute type 10 has an invalid length. [ 107.097552][ T6601] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.112769][ T6601] bond0: (slave team0): Enslaving as an active interface with an up link [ 107.124908][ T30] audit: type=1400 audit(1769244990.252:2723): avc: denied { open } for pid=6598 comm="syz.3.156" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 107.386490][ T30] audit: type=1400 audit(1769244990.252:2724): avc: denied { ioctl } for pid=6598 comm="syz.3.156" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4620 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 107.607348][ T30] audit: type=1400 audit(1769244990.332:2725): avc: denied { bind } for pid=6598 comm="syz.3.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 107.671426][ T30] audit: type=1400 audit(1769244990.442:2726): avc: denied { create } for pid=6598 comm="syz.3.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 107.728137][ T6598] delete_channel: no stack [ 107.756374][ T30] audit: type=1400 audit(1769244990.442:2727): avc: denied { setopt } for pid=6598 comm="syz.3.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 108.100248][ T6610] syzkaller1: entered promiscuous mode [ 108.273889][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 108.280040][ T30] audit: type=1400 audit(1769244991.532:2728): avc: denied { write } for pid=6611 comm="syz.4.154" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 108.280361][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 108.303237][ T30] audit: type=1400 audit(1769244991.532:2729): avc: denied { open } for pid=6611 comm="syz.4.154" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 108.337695][ T6610] syzkaller1: entered allmulticast mode [ 108.720856][ T30] audit: type=1400 audit(1769244991.642:2730): avc: denied { connect } for pid=6612 comm="syz.1.158" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 108.848695][ T9] usb 1-1: USB disconnect, device number 10 [ 108.877915][ T30] audit: type=1400 audit(1769244991.642:2731): avc: denied { write } for pid=6612 comm="syz.1.158" laddr=fe80::13 lport=60 faddr=fe80::aa fport=20132 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 109.060566][ T30] audit: type=1400 audit(1769244991.652:2732): avc: denied { create } for pid=6612 comm="syz.1.158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 109.080296][ T30] audit: type=1400 audit(1769244991.652:2733): avc: denied { getopt } for pid=6612 comm="syz.1.158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 109.780911][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 109.920975][ T9] usb 2-1: device descriptor read/64, error -71 [ 110.318349][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 110.452054][ T6647] netlink: 24 bytes leftover after parsing attributes in process `syz.3.166'. [ 110.464276][ T6647] IPv6: syztnl0: Disabled Multicast RS [ 110.474667][ T9] usb 2-1: device descriptor read/64, error -71 [ 110.616037][ T9] usb usb2-port1: attempt power cycle [ 110.821818][ T6655] syz_tun: entered allmulticast mode [ 110.834089][ T6655] IPVS: set_ctl: invalid protocol: 92 10.1.1.0:20004 [ 110.853807][ T6655] netlink: 4 bytes leftover after parsing attributes in process `syz.0.169'. [ 110.903063][ T6655] syz_tun (unregistering): left allmulticast mode [ 110.937493][ T6653] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 110.970928][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 110.991448][ T9] usb 2-1: device descriptor read/8, error -71 [ 111.241022][ T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 111.252763][ T6665] netlink: 28 bytes leftover after parsing attributes in process `syz.3.171'. [ 111.261941][ T5823] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 111.330956][ T9] usb 2-1: device descriptor read/8, error -71 [ 111.471220][ T9] usb usb2-port1: unable to enumerate USB device [ 111.477661][ T5823] usb 5-1: Using ep0 maxpacket: 8 [ 111.501047][ T5823] usb 5-1: unable to get BOS descriptor or descriptor too short [ 111.515347][ T5823] usb 5-1: config 0 has an invalid interface number: 122 but max is 0 [ 111.531385][ T5823] usb 5-1: config 0 has no interface number 0 [ 111.547662][ T5823] usb 5-1: config 0 interface 122 altsetting 187 endpoint 0x82 has invalid maxpacket 59391, setting to 1024 [ 111.569321][ T5823] usb 5-1: config 0 interface 122 altsetting 187 has an endpoint descriptor with address 0x95, changing to 0x85 [ 111.594431][ T5823] usb 5-1: config 0 interface 122 altsetting 187 endpoint 0x85 has invalid maxpacket 19271, setting to 1024 [ 111.797993][ T5823] usb 5-1: config 0 interface 122 altsetting 187 bulk endpoint 0x85 has invalid maxpacket 1024 [ 111.890793][ T5823] usb 5-1: config 0 interface 122 altsetting 187 endpoint 0x6 has invalid wMaxPacketSize 0 [ 111.900883][ T5823] usb 5-1: config 0 interface 122 altsetting 187 bulk endpoint 0x6 has invalid maxpacket 0 [ 111.912237][ T5823] usb 5-1: config 0 interface 122 has no altsetting 0 [ 112.040006][ T5823] usb 5-1: New USB device found, idVendor=04b8, idProduct=0521, bcdDevice=15.4a [ 112.080572][ T5823] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.116802][ T5823] usb 5-1: Product: syz [ 112.126935][ T5823] usb 5-1: Manufacturer: syz [ 112.137218][ T5823] usb 5-1: SerialNumber: syz [ 112.171268][ T5823] usb 5-1: config 0 descriptor?? [ 112.176636][ T6660] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 112.190969][ T6660] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 112.237674][ T6676] netlink: 260 bytes leftover after parsing attributes in process `syz.1.174'. [ 112.252041][ T6674] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 112.437102][ T5823] pl2303 5-1:0.122: pl2303 converter detected [ 112.470657][ T5823] pl2303 5-1:0.122: pl2303_vendor_read - failed to read [8484]: -71 [ 112.668326][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 112.668355][ T30] audit: type=1400 audit(1769244995.802:2736): avc: denied { connect } for pid=6677 comm="syz.2.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 112.862491][ T5823] pl2303 5-1:0.122: pl2303_vendor_write - failed to write [0404]: -71 [ 112.883312][ T5823] pl2303 5-1:0.122: pl2303_vendor_read - failed to read [8484]: -71 [ 112.893183][ T6684] sg_write: data in/out 2054145657/8 bytes for SCSI command 0xc0-- guessing data in; [ 112.893183][ T6684] program syz.1.176 not setting count and/or reply_len properly [ 112.924335][ T5823] pl2303 5-1:0.122: pl2303_vendor_read - failed to read [8383]: -71 [ 112.947731][ T5823] pl2303 5-1:0.122: pl2303_vendor_read - failed to read [8484]: -71 [ 113.006428][ T5823] pl2303 5-1:0.122: pl2303_vendor_write - failed to write [0404]: -71 [ 113.086536][ T5823] pl2303 5-1:0.122: pl2303_vendor_read - failed to read [8484]: -71 [ 113.113163][ T5823] pl2303 5-1:0.122: pl2303_vendor_read - failed to read [8383]: -71 [ 113.129831][ T5823] pl2303 5-1:0.122: pl2303_vendor_write - failed to write [0000]: -71 [ 113.194655][ T30] audit: type=1326 audit(1769244996.452:2737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6690 comm="syz.1.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6366b9acb9 code=0x7ffc0000 [ 113.199951][ T5823] pl2303 5-1:0.122: pl2303_vendor_write - failed to write [0001]: -71 [ 113.221021][ T30] audit: type=1326 audit(1769244996.482:2738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6690 comm="syz.1.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6366b9acb9 code=0x7ffc0000 [ 113.373595][ T30] audit: type=1326 audit(1769244996.512:2739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6690 comm="syz.1.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6366b9acb9 code=0x7ffc0000 [ 113.409737][ T30] audit: type=1326 audit(1769244996.522:2740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6690 comm="syz.1.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6366b9acb9 code=0x7ffc0000 [ 113.481997][ T5823] pl2303 5-1:0.122: pl2303_vendor_write - failed to write [0002]: -71 [ 113.570594][ T30] audit: type=1326 audit(1769244996.522:2741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6690 comm="syz.1.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6366b9acb9 code=0x7ffc0000 [ 113.662801][ T5823] usb 5-1: pl2303 converter now attached to ttyUSB0 [ 113.675775][ T5823] usb 5-1: USB disconnect, device number 4 [ 113.707719][ T30] audit: type=1326 audit(1769244996.522:2742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6690 comm="syz.1.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7f6366b9acb9 code=0x7ffc0000 [ 113.758266][ T5823] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 113.788092][ T5823] pl2303 5-1:0.122: device disconnected [ 113.789603][ T30] audit: type=1326 audit(1769244996.522:2743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6690 comm="syz.1.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6366b9acb9 code=0x7ffc0000 [ 113.905651][ T30] audit: type=1326 audit(1769244996.522:2744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6690 comm="syz.1.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6366b9acb9 code=0x7ffc0000 [ 114.018402][ T30] audit: type=1326 audit(1769244996.522:2745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6690 comm="syz.1.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f6366b9acb9 code=0x7ffc0000 [ 114.270872][ T5823] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 114.620527][ T5823] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 114.625058][ T5823] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 114.625097][ T5823] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 114.625113][ T5823] usb 5-1: config 0 interface 0 has no altsetting 0 [ 114.625863][ T5823] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 114.625915][ T5823] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 114.625931][ T5823] usb 5-1: config 0 interface 0 has no altsetting 0 [ 114.626639][ T5823] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 114.626661][ T5823] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 114.626676][ T5823] usb 5-1: config 0 interface 0 has no altsetting 0 [ 114.627411][ T5823] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 114.627433][ T5823] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 114.627447][ T5823] usb 5-1: config 0 interface 0 has no altsetting 0 [ 114.628178][ T5823] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 114.628200][ T5823] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 114.628214][ T5823] usb 5-1: config 0 interface 0 has no altsetting 0 [ 114.628970][ T5823] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 114.629029][ T5823] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 114.629045][ T5823] usb 5-1: config 0 interface 0 has no altsetting 0 [ 114.629760][ T5823] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 114.629782][ T5823] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 114.629796][ T5823] usb 5-1: config 0 interface 0 has no altsetting 0 [ 114.630595][ T5823] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 114.630635][ T5823] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 114.630650][ T5823] usb 5-1: config 0 interface 0 has no altsetting 0 [ 114.637302][ T5823] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 114.637317][ T5823] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 114.637329][ T5823] usb 5-1: Product: syz [ 114.637338][ T5823] usb 5-1: Manufacturer: syz [ 114.637347][ T5823] usb 5-1: SerialNumber: syz [ 114.646704][ T5823] usb 5-1: config 0 descriptor?? [ 114.662208][ T5823] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 115.032548][ T5823] usb 5-1: USB disconnect, device number 5 [ 115.033744][ T5823] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 115.731089][ T5823] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 115.906891][ T5823] usb 1-1: Using ep0 maxpacket: 8 [ 115.945037][ T6733] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 115.968134][ T5823] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 115.990908][ T5823] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 116.058134][ T5823] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 116.110303][ T5823] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 116.186509][ T5823] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 116.233432][ T5823] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 116.252716][ T5823] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.735689][ T6756] : Can't lookup blockdev [ 118.181912][ T6757] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 118.690120][ T5823] usb 1-1: usb_control_msg returned -71 [ 118.715639][ T5823] usbtmc 1-1:16.0: can't read capabilities [ 118.727741][ T5823] usb 1-1: USB disconnect, device number 11 [ 119.040843][ T5937] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 119.330874][ T5937] usb 3-1: Using ep0 maxpacket: 16 [ 119.338214][ T5937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.386889][ T5937] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 119.425329][ T5937] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.455614][ T5937] usb 3-1: config 0 descriptor?? [ 119.701116][ T853] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 119.826264][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 119.826279][ T30] audit: type=1400 audit(1769245003.082:2759): avc: denied { unmount } for pid=5810 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 119.906959][ T30] audit: type=1400 audit(1769245003.162:2760): avc: denied { create } for pid=6764 comm="syz.2.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 119.957628][ T6765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.973949][ T6765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.985296][ T30] audit: type=1400 audit(1769245003.162:2761): avc: denied { setopt } for pid=6764 comm="syz.2.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 120.012292][ T853] usb 5-1: config 0 has an invalid interface number: 20 but max is 0 [ 120.031521][ T30] audit: type=1400 audit(1769245003.162:2762): avc: denied { read } for pid=6764 comm="syz.2.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 120.034532][ T853] usb 5-1: config 0 has no interface number 0 [ 120.073983][ T30] audit: type=1400 audit(1769245003.282:2763): avc: denied { write } for pid=6764 comm="syz.2.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 120.075621][ T853] usb 5-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 120.108866][ T853] usb 5-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 120.130962][ T853] usb 5-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 120.140046][ T853] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.148416][ T853] usb 5-1: Product: syz [ 120.152791][ T853] usb 5-1: Manufacturer: syz [ 120.172962][ T853] usb 5-1: SerialNumber: syz [ 120.223073][ T853] usb 5-1: config 0 descriptor?? [ 120.227785][ T30] audit: type=1400 audit(1769245003.482:2764): avc: denied { name_bind } for pid=6783 comm="syz.3.201" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 120.228633][ T6773] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 120.295585][ T853] usb-storage 5-1:0.20: USB Mass Storage device detected [ 120.327218][ T6785] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 120.338260][ T6785] block device autoloading is deprecated and will be removed. [ 120.427296][ T853] usb-storage 5-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 120.648976][ T853] scsi host1: usb-storage 5-1:0.20 [ 121.056853][ T5937] mcp2221 0003:04D8:00DD.0001: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 122.618734][ T5937] usb 3-1: USB disconnect, device number 4 [ 122.685368][ T30] audit: type=1400 audit(1769245005.902:2765): avc: denied { setopt } for pid=6796 comm="syz.3.204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 123.328702][ T5823] usb 5-1: USB disconnect, device number 6 [ 123.665709][ T30] audit: type=1400 audit(1769245006.912:2766): avc: denied { map } for pid=6812 comm="syz.4.208" path="socket:[11726]" dev="sockfs" ino=11726 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 124.002371][ T30] audit: type=1400 audit(1769245006.912:2767): avc: denied { read accept } for pid=6812 comm="syz.4.208" path="socket:[11726]" dev="sockfs" ino=11726 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 124.288830][ T6824] netlink: 'syz.3.211': attribute type 1 has an invalid length. [ 124.296925][ T6824] netlink: 'syz.3.211': attribute type 2 has an invalid length. [ 124.305657][ T6824] netlink: 'syz.3.211': attribute type 2 has an invalid length. [ 124.313426][ T6824] netlink: 'syz.3.211': attribute type 1 has an invalid length. [ 124.321224][ T6824] netlink: 'syz.3.211': attribute type 1 has an invalid length. [ 124.340967][ T853] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 124.409476][ T6821] netlink: 'syz.2.210': attribute type 1 has an invalid length. [ 124.417195][ T6821] netlink: 'syz.2.210': attribute type 2 has an invalid length. [ 124.424858][ T6821] netlink: 'syz.2.210': attribute type 2 has an invalid length. [ 124.432507][ T6821] netlink: 'syz.2.210': attribute type 1 has an invalid length. [ 124.440127][ T6821] netlink: 'syz.2.210': attribute type 1 has an invalid length. [ 124.692304][ T853] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 124.704398][ T853] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 124.715679][ T853] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.749697][ T853] usb 1-1: config 0 descriptor?? [ 124.975326][ T6817] qnx4: unable to read the superblock [ 125.000722][ T853] usbhid 1-1:0.0: can't add hid device: -71 [ 125.014452][ T853] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 125.051447][ T853] usb 1-1: USB disconnect, device number 12 [ 125.079158][ T6835] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 125.560853][ T853] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 125.801449][ T853] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.304996][ T6685] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 126.312637][ T853] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 126.323241][ T853] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.349780][ T853] usb 1-1: config 0 descriptor?? [ 126.475024][ T6685] usb 3-1: config 0 has an invalid interface number: 20 but max is 0 [ 126.483547][ T6685] usb 3-1: config 0 has no interface number 0 [ 126.506226][ T6685] usb 3-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 126.525404][ T6685] usb 3-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 126.543738][ T6685] usb 3-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 126.554835][ T6685] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.567154][ T6685] usb 3-1: Product: syz [ 126.572926][ T6685] usb 3-1: Manufacturer: syz [ 126.577732][ T6685] usb 3-1: SerialNumber: syz [ 126.600994][ T6685] usb 3-1: config 0 descriptor?? [ 126.606685][ T6840] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 126.742166][ T6685] usb-storage 3-1:0.20: USB Mass Storage device detected [ 126.771581][ T6685] usb-storage 3-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 126.848218][ T6854] netlink: 16 bytes leftover after parsing attributes in process `syz.4.217'. [ 126.860025][ T30] audit: type=1400 audit(1769245010.102:2768): avc: denied { read } for pid=6847 comm="syz.4.217" name="event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 128.262178][ T30] audit: type=1400 audit(1769245010.102:2769): avc: denied { ioctl } for pid=6847 comm="syz.4.217" path="/dev/input/event2" dev="devtmpfs" ino=922 ioctlcmd=0x45a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 128.309184][ T6685] scsi host1: usb-storage 3-1:0.20 [ 128.434231][ T853] usbhid 1-1:0.0: can't add hid device: -71 [ 128.440584][ T853] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 128.571372][ T853] usb 1-1: USB disconnect, device number 13 [ 128.887449][ T30] audit: type=1400 audit(1769245012.142:2770): avc: denied { bind } for pid=6869 comm="syz.0.223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 129.435100][ T30] audit: type=1400 audit(1769245012.692:2771): avc: denied { create } for pid=6878 comm="syz.1.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 129.499760][ T30] audit: type=1400 audit(1769245012.722:2772): avc: denied { ioctl } for pid=6878 comm="syz.1.226" path="socket:[11192]" dev="sockfs" ino=11192 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 129.656369][ T30] audit: type=1400 audit(1769245012.852:2773): avc: denied { read } for pid=6878 comm="syz.1.226" path="socket:[11192]" dev="sockfs" ino=11192 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 129.728584][ T30] audit: type=1400 audit(1769245012.912:2774): avc: denied { create } for pid=6888 comm="syz.4.229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 129.765224][ T30] audit: type=1400 audit(1769245012.912:2775): avc: denied { bind } for pid=6888 comm="syz.4.229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 129.842070][ T30] audit: type=1400 audit(1769245012.912:2776): avc: denied { read } for pid=6888 comm="syz.4.229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 129.890839][ T853] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 130.114360][ T853] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 130.138728][ T853] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 130.166671][ T853] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 130.218624][ T853] usb 4-1: config 0 interface 0 has no altsetting 0 [ 130.270023][ T6901] netlink: 8 bytes leftover after parsing attributes in process `syz.1.233'. [ 130.322833][ T6901] : entered promiscuous mode [ 130.466827][ T853] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 130.481044][ T853] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 130.501817][ T853] usb 4-1: config 0 interface 0 has no altsetting 0 [ 130.538236][ T853] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 130.559011][ T853] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 130.570354][ T5823] usb 3-1: USB disconnect, device number 5 [ 130.576374][ T853] usb 4-1: config 0 interface 0 has no altsetting 0 [ 130.587127][ T853] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 131.526530][ T853] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 131.541219][ T853] usb 4-1: config 0 interface 0 has no altsetting 0 [ 131.548913][ T853] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 131.561416][ T853] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 131.583183][ T853] usb 4-1: config 0 interface 0 has no altsetting 0 [ 131.591126][ T853] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 131.602153][ T853] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 131.613768][ T853] usb 4-1: config 0 interface 0 has no altsetting 0 [ 131.625431][ T853] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 131.640838][ T853] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 131.660903][ T853] usb 4-1: config 0 interface 0 has no altsetting 0 [ 131.701687][ T853] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 131.716848][ T853] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 131.730833][ T853] usb 4-1: config 0 interface 0 has no altsetting 0 [ 131.740219][ T853] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 131.758829][ T853] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 131.769220][ T853] usb 4-1: Product: syz [ 131.776800][ T853] usb 4-1: Manufacturer: syz [ 131.781710][ T853] usb 4-1: SerialNumber: syz [ 131.788965][ T853] usb 4-1: config 0 descriptor?? [ 131.809033][ T853] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 131.931164][ T5890] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 132.159298][ T30] audit: type=1400 audit(1769245015.412:2777): avc: denied { read write } for pid=6914 comm="syz.4.237" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 132.415255][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.431524][ T5890] usb 2-1: config 0 has an invalid interface number: 20 but max is 0 [ 132.439601][ T5890] usb 2-1: config 0 has no interface number 0 [ 132.443163][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.445737][ T5890] usb 2-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 132.454981][ T853] usb 4-1: USB disconnect, device number 7 [ 132.478263][ T853] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 132.484589][ T30] audit: type=1400 audit(1769245015.412:2778): avc: denied { open } for pid=6914 comm="syz.4.237" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 132.513864][ T5890] usb 2-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 132.522175][ T30] audit: type=1400 audit(1769245015.452:2779): avc: denied { ioctl } for pid=6914 comm="syz.4.237" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d0d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 132.570202][ T5890] usb 2-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 132.580285][ T6919] fuse: Bad value for 'fd' [ 132.585307][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.595212][ T5890] usb 2-1: Product: syz [ 132.599523][ T5890] usb 2-1: Manufacturer: syz [ 132.625782][ T5890] usb 2-1: SerialNumber: syz [ 132.822580][ T5890] usb 2-1: config 0 descriptor?? [ 132.831006][ T6909] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 132.878245][ T5890] usb-storage 2-1:0.20: USB Mass Storage device detected [ 132.904188][ T5890] usb-storage 2-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 133.050990][ T5890] scsi host1: usb-storage 2-1:0.20 [ 133.159537][ T30] audit: type=1400 audit(1769245016.412:2780): avc: denied { write } for pid=6930 comm="syz.3.241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 133.296865][ C0] vcan0: j1939_tp_txtimer: 0xffff888035152000: tx aborted with unknown reason: -2 [ 133.307375][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880585e0800: 0x00000: (250) Any other reason (if a Connection Abort reason is identified that is not listed in the table use code 250) [ 133.326516][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888035152000: 0x00000: (250) Any other reason (if a Connection Abort reason is identified that is not listed in the table use code 250) [ 133.346415][ T30] audit: type=1400 audit(1769245016.602:2781): avc: denied { read } for pid=5167 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 133.450361][ T30] audit: type=1400 audit(1769245016.602:2782): avc: denied { search } for pid=5167 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 133.523762][ T5941] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 133.666368][ T30] audit: type=1400 audit(1769245016.602:2783): avc: denied { search } for pid=5167 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 133.940156][ T30] audit: type=1400 audit(1769245016.602:2784): avc: denied { add_name } for pid=5167 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 133.961965][ T5941] usb 1-1: device descriptor read/64, error -71 [ 133.990632][ T30] audit: type=1400 audit(1769245016.602:2785): avc: denied { create } for pid=5167 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 134.016771][ T30] audit: type=1400 audit(1769245016.602:2786): avc: denied { append open } for pid=5167 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 134.170825][ T5937] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 134.210845][ T5941] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 134.331462][ T5937] usb 5-1: Using ep0 maxpacket: 32 [ 134.338015][ T5937] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 134.340902][ T5941] usb 1-1: device descriptor read/64, error -71 [ 134.365837][ T5937] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16 [ 134.379004][ T5937] usb 5-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3 [ 134.388458][ T5937] usb 5-1: Product: syz [ 134.392869][ T5937] usb 5-1: Manufacturer: syz [ 134.397640][ T5937] usb 5-1: SerialNumber: syz [ 134.415144][ T5937] usb 5-1: config 0 descriptor?? [ 134.449811][ T5937] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 134.463433][ T5941] usb usb1-port1: attempt power cycle [ 134.635728][ T1987] usb 5-1: Failed to submit usb control message: -71 [ 134.644041][ T1987] usb 5-1: unable to send the bmi data to the device: -71 [ 134.652718][ T5937] usb 5-1: USB disconnect, device number 7 [ 134.674653][ T1987] usb 5-1: unable to get target info from device [ 134.684032][ T1987] usb 5-1: could not get target info (-71) [ 134.690156][ T1987] usb 5-1: could not probe fw (-71) [ 134.813056][ T5941] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 134.852444][ T5941] usb 1-1: device descriptor read/8, error -71 [ 134.861773][ T5890] usb 2-1: USB disconnect, device number 9 [ 135.306479][ T6967] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 135.380974][ T5941] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 135.415900][ T5941] usb 1-1: device descriptor read/8, error -71 [ 135.544841][ T5941] usb usb1-port1: unable to enumerate USB device [ 135.743599][ T6978] netlink: 'syz.4.249': attribute type 1 has an invalid length. [ 135.751430][ T6978] netlink: 'syz.4.249': attribute type 2 has an invalid length. [ 135.759104][ T6978] netlink: 'syz.4.249': attribute type 2 has an invalid length. [ 135.768406][ T6978] netlink: 'syz.4.249': attribute type 1 has an invalid length. [ 135.776239][ T6978] netlink: 'syz.4.249': attribute type 1 has an invalid length. [ 136.220826][ T5941] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 137.053166][ T6993] 9p: Bad value for 'wfdno' [ 137.090394][ T5941] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 137.091415][ T6993] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 137.109227][ T6993] ALSA: mixer_oss: invalid OSS volume 'S' [ 137.250046][ T5941] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 137.269885][ T5941] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.323385][ T5941] usb 3-1: config 0 descriptor?? [ 137.555194][ T6981] qnx4: unable to read the superblock [ 137.617304][ T5941] usbhid 3-1:0.0: can't add hid device: -71 [ 137.652372][ T5941] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 137.687441][ T5941] usb 3-1: USB disconnect, device number 6 [ 138.000691][ T7008] 8021q: adding VLAN 0 to HW filter on device bond1 [ 138.106672][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 138.106687][ T30] audit: type=1400 audit(1769245021.362:2791): avc: denied { lock } for pid=7014 comm="syz.4.263" path="socket:[12534]" dev="sockfs" ino=12534 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 138.142671][ T5941] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 138.729686][ T5941] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.778049][ T30] audit: type=1400 audit(1769245022.012:2792): avc: denied { open } for pid=7014 comm="syz.4.263" path="/dev/ptyqd" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 138.804885][ T5941] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 139.142654][ T5941] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.154436][ T5941] usb 3-1: config 0 descriptor?? [ 139.159569][ T30] audit: type=1400 audit(1769245022.032:2793): avc: denied { ioctl } for pid=7014 comm="syz.4.263" path="/dev/ptyqd" dev="devtmpfs" ino=132 ioctlcmd=0x5436 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 139.186823][ T5941] usb 3-1: can't set config #0, error -71 [ 139.194459][ T5941] usb 3-1: USB disconnect, device number 7 [ 140.097094][ T30] audit: type=1400 audit(1769245023.352:2794): avc: denied { create } for pid=7026 comm="syz.1.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 140.915290][ T7043] : Can't lookup blockdev [ 141.702056][ T5823] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 141.748711][ T30] audit: type=1400 audit(1769245025.002:2795): avc: denied { ioctl } for pid=7026 comm="syz.1.266" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=13330 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 141.779913][ T30] audit: type=1400 audit(1769245025.002:2796): avc: denied { read } for pid=7026 comm="syz.1.266" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 141.861468][ T30] audit: type=1400 audit(1769245025.002:2797): avc: denied { open } for pid=7026 comm="syz.1.266" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 141.910808][ T5823] usb 5-1: Using ep0 maxpacket: 32 [ 142.249241][ T5823] usb 5-1: config 0 interface 0 has no altsetting 0 [ 142.263053][ T5823] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 142.597346][ T5823] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.620791][ T5823] usb 5-1: Product: syz [ 142.650936][ T5823] usb 5-1: Manufacturer: syz [ 142.682434][ T5823] usb 5-1: SerialNumber: syz [ 142.706473][ T5823] usb 5-1: config 0 descriptor?? [ 142.922115][ T5823] usb 5-1: can't set config #0, error -71 [ 142.942964][ T5823] usb 5-1: USB disconnect, device number 8 [ 143.125781][ T7066] netlink: 4 bytes leftover after parsing attributes in process `syz.2.274'. [ 143.399412][ T7050] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 143.410986][ T7050] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 143.423625][ T7050] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 143.463862][ T7050] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 143.475087][ T7050] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 143.503584][ T7050] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 143.523136][ T7050] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 143.539366][ T7050] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 143.559567][ T7050] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 143.591564][ T7050] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 143.623957][ T7050] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 143.638940][ T7050] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 143.657906][ T7050] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 143.669150][ T7050] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 143.687620][ T7050] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 143.943224][ T7073] netlink: 'syz.2.276': attribute type 21 has an invalid length. [ 143.951027][ T7073] IPv6: NLM_F_CREATE should be specified when creating new route [ 144.061135][ T853] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 144.071450][ T5941] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 144.231630][ T853] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 144.240976][ T5941] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 144.261401][ T5822] Bluetooth: hci0: command 0x0c1a tx timeout [ 144.282638][ T853] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 144.293231][ T7082] netlink: 'syz.2.277': attribute type 1 has an invalid length. [ 144.301720][ T7082] netlink: 'syz.2.277': attribute type 2 has an invalid length. [ 144.309492][ T5941] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 144.319008][ T853] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 144.697533][ T7082] netlink: 'syz.2.277': attribute type 2 has an invalid length. [ 144.705286][ T7082] netlink: 'syz.2.277': attribute type 1 has an invalid length. [ 144.713648][ T7082] netlink: 'syz.2.277': attribute type 1 has an invalid length. [ 144.714468][ T5941] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.807170][ T30] audit: type=1400 audit(1769245028.012:2798): avc: denied { read } for pid=7070 comm="syz.3.273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 144.810601][ T853] usb 5-1: config 0 interface 0 has no altsetting 0 [ 144.991851][ T30] audit: type=1400 audit(1769245028.012:2799): avc: denied { read write } for pid=7070 comm="syz.3.273" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 145.047090][ T5941] usb 1-1: config 0 descriptor?? [ 145.061871][ T853] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 145.078315][ T853] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 145.090106][ T30] audit: type=1400 audit(1769245028.012:2800): avc: denied { open } for pid=7070 comm="syz.3.273" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 145.092029][ T853] usb 5-1: config 0 interface 0 has no altsetting 0 [ 145.144308][ T30] audit: type=1400 audit(1769245028.012:2801): avc: denied { ioctl } for pid=7070 comm="syz.3.273" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 145.144312][ T853] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 145.144358][ T853] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 145.196398][ T853] usb 5-1: config 0 interface 0 has no altsetting 0 [ 145.205455][ T853] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 145.215077][ T853] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 145.227407][ T853] usb 5-1: config 0 interface 0 has no altsetting 0 [ 145.237640][ T853] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 145.251295][ T853] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 145.272029][ T7069] qnx4: unable to read the superblock [ 145.277934][ T853] usb 5-1: config 0 interface 0 has no altsetting 0 [ 145.294296][ T5941] usbhid 1-1:0.0: can't add hid device: -71 [ 145.304122][ T5941] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 145.315638][ T853] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 145.338419][ T853] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 145.343351][ T5941] usb 1-1: USB disconnect, device number 18 [ 145.361008][ T853] usb 5-1: config 0 interface 0 has no altsetting 0 [ 145.376040][ T853] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 145.388702][ T853] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 145.533385][ T5822] Bluetooth: hci2: command 0x0c1a tx timeout [ 145.537875][ T5816] Bluetooth: hci1: command 0x0c1a tx timeout [ 145.610863][ T5816] Bluetooth: hci4: command 0x0c1a tx timeout [ 145.675134][ T853] usb 5-1: config 0 interface 0 has no altsetting 0 [ 145.691696][ T5816] Bluetooth: hci3: command 0x0c1a tx timeout [ 145.720279][ T853] usb 5-1: unable to read config index 7 descriptor/start: -71 [ 145.728140][ T853] usb 5-1: can't read configurations, error -71 [ 145.803937][ T7089] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 145.851029][ T5890] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 146.041555][ T5890] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.066044][ T5890] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 146.083381][ T5890] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.194855][ T5890] usb 1-1: config 0 descriptor?? [ 146.330911][ T5816] Bluetooth: hci0: command 0x0c1a tx timeout [ 146.373588][ T7098] netlink: 24 bytes leftover after parsing attributes in process `syz.4.283'. [ 146.617405][ T5890] usbhid 1-1:0.0: can't add hid device: -71 [ 146.667449][ T5890] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 146.679891][ T5890] usb 1-1: USB disconnect, device number 19 [ 147.422312][ T5890] IPVS: starting estimator thread 0... [ 147.612504][ T5816] Bluetooth: hci2: command 0x0c1a tx timeout [ 147.612519][ T5822] Bluetooth: hci1: command 0x0c1a tx timeout [ 147.616280][ T7116] IPVS: using max 75 ests per chain, 180000 per kthread [ 147.690919][ T5816] Bluetooth: hci4: command 0x0c1a tx timeout [ 147.780825][ T5816] Bluetooth: hci3: command 0x0c1a tx timeout [ 148.071875][ T7124] netlink: 'syz.1.288': attribute type 4 has an invalid length. [ 148.085978][ T7124] netlink: 'syz.1.288': attribute type 4 has an invalid length. [ 148.418184][ T5816] Bluetooth: hci0: command 0x0c1a tx timeout [ 148.547130][ T7132] netlink: zone id is out of range [ 148.552463][ T7132] netlink: zone id is out of range [ 148.557669][ T7132] netlink: zone id is out of range [ 148.562924][ T7132] netlink: zone id is out of range [ 148.568327][ T7132] netlink: zone id is out of range [ 148.574358][ T7132] netlink: zone id is out of range [ 148.579520][ T7132] netlink: zone id is out of range [ 148.584778][ T7132] netlink: zone id is out of range [ 148.590008][ T7132] netlink: zone id is out of range [ 148.595236][ T7132] netlink: zone id is out of range [ 148.942621][ T7138] netlink: 'syz.0.292': attribute type 1 has an invalid length. [ 148.967221][ T30] audit: type=1400 audit(1769245032.212:2802): avc: denied { nlmsg_read } for pid=7135 comm="syz.0.292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 149.181650][ T7140] netlink: 'syz.4.293': attribute type 1 has an invalid length. [ 149.189294][ T7140] netlink: 'syz.4.293': attribute type 2 has an invalid length. [ 149.608759][ T7140] netlink: 'syz.4.293': attribute type 2 has an invalid length. [ 149.616464][ T7140] netlink: 'syz.4.293': attribute type 1 has an invalid length. [ 149.624084][ T7140] netlink: 'syz.4.293': attribute type 1 has an invalid length. [ 149.692197][ T5822] Bluetooth: hci2: command 0x0c1a tx timeout [ 149.692197][ T5816] Bluetooth: hci1: command 0x0c1a tx timeout [ 149.780101][ T5822] Bluetooth: hci4: command 0x0c1a tx timeout [ 149.850883][ T5822] Bluetooth: hci3: command 0x0c1a tx timeout [ 149.864614][ T7150] netlink: 48 bytes leftover after parsing attributes in process `syz.4.296'. [ 149.993708][ T7154] netlink: 'syz.1.295': attribute type 4 has an invalid length. [ 152.235588][ T7171] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 152.479318][ T7181] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 153.501461][ T7197] netlink: 'syz.1.308': attribute type 4 has an invalid length. [ 154.040843][ T5890] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 154.220956][ T5890] usb 2-1: Using ep0 maxpacket: 32 [ 154.328521][ T5890] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 154.588274][ T5890] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 154.642606][ T5890] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16 [ 154.662792][ T5890] usb 2-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3 [ 154.676437][ T7212] : Can't lookup blockdev [ 154.721762][ T5890] usb 2-1: Product: syz [ 154.734474][ T30] audit: type=1400 audit(1769245037.992:2803): avc: denied { nlmsg_read } for pid=7211 comm="syz.3.313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 154.768249][ T5890] usb 2-1: Manufacturer: syz [ 154.782250][ T5890] usb 2-1: SerialNumber: syz [ 154.806563][ T5890] usb 2-1: config 0 descriptor?? [ 154.816369][ T30] audit: type=1400 audit(1769245038.022:2804): avc: denied { ioctl } for pid=7211 comm="syz.3.313" path="/dev/sg0" dev="devtmpfs" ino=767 ioctlcmd=0x5393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 154.972138][ T5890] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 155.280862][ T5863] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 155.344957][ T60] usb 2-1: Failed to submit usb control message: -71 [ 155.345738][ T5941] usb 2-1: USB disconnect, device number 10 [ 155.354005][ T60] usb 2-1: unable to send the bmi data to the device: -71 [ 155.466145][ T60] usb 2-1: unable to get target info from device [ 155.472896][ T60] usb 2-1: could not get target info (-71) [ 155.480091][ T60] usb 2-1: could not probe fw (-71) [ 155.480271][ T5863] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 155.535731][ T5863] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 155.554034][ T5863] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 155.567376][ T5863] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 155.576584][ T5863] usb 4-1: SerialNumber: syz [ 155.809941][ T5863] usb 4-1: 0:2 : does not exist [ 155.859797][ T5863] usb 4-1: USB disconnect, device number 8 [ 155.999096][ T7234] fuse: Unknown parameter 'group_i00000000000000000000' [ 157.550951][ T853] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 158.222422][ T853] usb 3-1: Using ep0 maxpacket: 8 [ 158.329260][ T853] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 158.460454][ T853] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 158.490945][ T853] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 158.520820][ T853] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.003311][ T853] usb 3-1: config 0 descriptor?? [ 159.033105][ T853] iowarrior 3-1:0.0: no interrupt-in endpoint found [ 159.504730][ T30] audit: type=1326 audit(1769245042.742:2805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7261 comm="syz.1.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6366b9acb9 code=0x7ffc0000 [ 159.795869][ T30] audit: type=1326 audit(1769245042.752:2806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7261 comm="syz.1.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6366b9acb9 code=0x7ffc0000 [ 159.842602][ T30] audit: type=1326 audit(1769245042.752:2807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7261 comm="syz.1.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f6366b9acb9 code=0x7ffc0000 [ 159.905432][ T30] audit: type=1326 audit(1769245042.752:2808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7261 comm="syz.1.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6366b9acb9 code=0x7ffc0000 [ 159.937604][ T30] audit: type=1326 audit(1769245042.752:2809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7261 comm="syz.1.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6366b9acb9 code=0x7ffc0000 [ 159.967096][ T30] audit: type=1326 audit(1769245042.752:2810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7261 comm="syz.1.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6366b5b58e code=0x7ffc0000 [ 160.000813][ T30] audit: type=1326 audit(1769245042.752:2811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7261 comm="syz.1.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f6366b9bfd7 code=0x7ffc0000 [ 160.024324][ T853] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 160.046960][ T30] audit: type=1326 audit(1769245042.752:2812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7261 comm="syz.1.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6366b9acb9 code=0x7ffc0000 [ 160.223723][ T30] audit: type=1326 audit(1769245042.752:2813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7261 comm="syz.1.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f6366b9bfd7 code=0x7ffc0000 [ 160.249311][ T30] audit: type=1326 audit(1769245042.752:2814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7261 comm="syz.1.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f6366b5b58e code=0x7ffc0000 [ 160.310883][ T853] usb 5-1: Using ep0 maxpacket: 8 [ 161.144151][ T853] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 161.170186][ T30] audit: type=1326 audit(1769245042.752:2815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7261 comm="syz.1.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6366b9acb9 code=0x7ffc0000 [ 161.195644][ T853] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 161.208595][ T6846] usb 3-1: USB disconnect, device number 8 [ 161.250818][ T853] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.287400][ T5941] usb 2-1: new low-speed USB device number 11 using dummy_hcd [ 161.318293][ T853] usb 5-1: config 0 descriptor?? [ 161.339957][ T853] iowarrior 5-1:0.0: no interrupt-in endpoint found [ 161.471111][ T5941] usb 2-1: Invalid ep0 maxpacket: 32 [ 161.720947][ T5941] usb 2-1: new low-speed USB device number 12 using dummy_hcd [ 161.922403][ T5941] usb 2-1: Invalid ep0 maxpacket: 32 [ 161.933756][ T5941] usb usb2-port1: attempt power cycle [ 162.430916][ T5941] usb 2-1: new low-speed USB device number 13 using dummy_hcd [ 162.471310][ T5941] usb 2-1: Invalid ep0 maxpacket: 32 [ 162.610845][ T5941] usb 2-1: new low-speed USB device number 14 using dummy_hcd [ 162.632235][ T5941] usb 2-1: Invalid ep0 maxpacket: 32 [ 162.640175][ T5941] usb usb2-port1: unable to enumerate USB device [ 162.952659][ T7319] netlink: 8 bytes leftover after parsing attributes in process `syz.2.336'. [ 163.703404][ T6018] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 163.779268][ T6846] usb 5-1: USB disconnect, device number 11 [ 164.022502][ T6018] usb 2-1: config 0 has an invalid interface number: 20 but max is 0 [ 164.046433][ T6018] usb 2-1: config 0 has no interface number 0 [ 164.540957][ T6018] usb 2-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 164.592281][ T6018] usb 2-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 164.637213][ T6018] usb 2-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 164.673296][ T6018] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.688237][ T6018] usb 2-1: Product: syz [ 164.699248][ T6018] usb 2-1: Manufacturer: syz [ 164.708466][ T6018] usb 2-1: SerialNumber: syz [ 164.724395][ T6018] usb 2-1: config 0 descriptor?? [ 164.733769][ T7326] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 164.755567][ T6018] usb-storage 2-1:0.20: USB Mass Storage device detected [ 164.762573][ T6846] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 164.798170][ T6018] usb-storage 2-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 165.034217][ T6018] scsi host1: usb-storage 2-1:0.20 [ 165.075486][ T6846] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 165.086483][ T6846] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 165.103909][ T6846] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.121246][ T6846] usb 5-1: config 0 descriptor?? [ 165.259431][ T7346] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 165.679098][ T7334] qnx4: unable to read the superblock [ 165.782800][ T6846] usbhid 5-1:0.0: can't add hid device: -71 [ 165.806194][ T6846] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 165.851796][ T6846] usb 5-1: USB disconnect, device number 12 [ 166.167878][ T7356] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 166.289985][ T7355] IPv6: NLM_F_CREATE should be specified when creating new route [ 166.520003][ T7363] net_ratelimit: 47 callbacks suppressed [ 166.520040][ T7363] netlink: zone id is out of range [ 166.531036][ T7363] netlink: zone id is out of range [ 166.536307][ T7363] netlink: zone id is out of range [ 166.541617][ T7363] netlink: zone id is out of range [ 166.546812][ T7363] netlink: zone id is out of range [ 166.552161][ T7363] netlink: zone id is out of range [ 166.557420][ T7363] netlink: zone id is out of range [ 166.562677][ T7363] netlink: zone id is out of range [ 166.567926][ T7363] netlink: zone id is out of range [ 166.573244][ T7363] netlink: zone id is out of range [ 166.941407][ T7368] fuseblk: Unknown parameter 'blks#zá"–z\-Œ020ü0S001000' [ 166.967228][ T5890] usb 2-1: USB disconnect, device number 15 [ 167.098436][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 167.098450][ T30] audit: type=1400 audit(1769245050.352:2820): avc: denied { append } for pid=7378 comm="syz.0.351" name="001" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 167.182137][ T7379] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 167.355124][ T7386] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 167.438255][ T7385] fuse: Unknown parameter '' [ 167.651313][ T30] audit: type=1400 audit(1769245050.682:2821): avc: denied { wake_alarm } for pid=7367 comm="syz.3.347" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 167.708605][ T7375] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 167.754229][ T30] audit: type=1326 audit(1769245050.692:2822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7367 comm="syz.3.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f8bb0f9acb9 code=0x7ffc0000 [ 167.778416][ T30] audit: type=1326 audit(1769245050.702:2823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7367 comm="syz.3.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bb0f9acb9 code=0x7ffc0000 [ 167.838830][ T30] audit: type=1326 audit(1769245050.712:2824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7367 comm="syz.3.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bb0f9acb9 code=0x7ffc0000 [ 168.489956][ T30] audit: type=1326 audit(1769245050.712:2825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7367 comm="syz.3.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8bb0f9acb9 code=0x7ffc0000 [ 168.605659][ T30] audit: type=1326 audit(1769245050.712:2826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7367 comm="syz.3.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bb0f9acb9 code=0x7ffc0000 [ 168.709969][ T30] audit: type=1326 audit(1769245050.712:2827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7367 comm="syz.3.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bb0f9acb9 code=0x7ffc0000 [ 168.800836][ T30] audit: type=1326 audit(1769245050.712:2828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7367 comm="syz.3.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bb0f9acb9 code=0x7ffc0000 [ 169.050793][ T30] audit: type=1326 audit(1769245050.712:2829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7367 comm="syz.3.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bb0f9acb9 code=0x7ffc0000 [ 169.101404][ T7397] netlink: 'syz.1.356': attribute type 1 has an invalid length. [ 169.121259][ T7397] netlink: 'syz.1.356': attribute type 2 has an invalid length. [ 169.144002][ T7397] netlink: 'syz.1.356': attribute type 2 has an invalid length. [ 169.152346][ T7397] netlink: 'syz.1.356': attribute type 1 has an invalid length. [ 169.160048][ T7397] netlink: 'syz.1.356': attribute type 1 has an invalid length. [ 170.288782][ T7421] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 170.393385][ T7419] netlink: 'syz.0.360': attribute type 1 has an invalid length. [ 170.401065][ T7419] netlink: 'syz.0.360': attribute type 2 has an invalid length. [ 170.408679][ T7419] netlink: 'syz.0.360': attribute type 2 has an invalid length. [ 170.416781][ T7419] netlink: 'syz.0.360': attribute type 1 has an invalid length. [ 170.424433][ T7419] netlink: 'syz.0.360': attribute type 1 has an invalid length. [ 170.790432][ T7427] : Can't lookup blockdev [ 171.857178][ T7433] net_ratelimit: 58 callbacks suppressed [ 171.857216][ T7433] netlink: zone id is out of range [ 171.868198][ T7433] netlink: zone id is out of range [ 171.873792][ T7433] netlink: zone id is out of range [ 171.879159][ T7433] netlink: zone id is out of range [ 171.884584][ T7433] netlink: zone id is out of range [ 171.889911][ T7433] netlink: zone id is out of range [ 171.895132][ T7433] netlink: zone id is out of range [ 171.900268][ T7433] netlink: zone id is out of range [ 171.905432][ T7433] netlink: zone id is out of range [ 171.910561][ T7433] netlink: zone id is out of range [ 172.487332][ T7442] netlink: 28 bytes leftover after parsing attributes in process `syz.2.367'. [ 173.004927][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 173.004967][ T30] audit: type=1400 audit(1769245056.252:2846): avc: denied { create } for pid=7440 comm="syz.4.366" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 173.268499][ T30] audit: type=1400 audit(1769245056.262:2847): avc: denied { write } for pid=7440 comm="syz.4.366" name="file0" dev="tmpfs" ino=400 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 173.302380][ T30] audit: type=1400 audit(1769245056.262:2848): avc: denied { open } for pid=7440 comm="syz.4.366" path="/73/file0" dev="tmpfs" ino=400 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 173.599668][ T30] audit: type=1400 audit(1769245056.672:2849): avc: denied { unlink } for pid=5818 comm="syz-executor" name="file0" dev="tmpfs" ino=400 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 173.746938][ T7456] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 173.795904][ T7456] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 174.617729][ T7458] fuse: Unknown parameter 'fd0x0000000000000007' [ 174.643726][ T30] audit: type=1400 audit(1769245057.902:2850): avc: denied { name_bind } for pid=7451 comm="syz.4.369" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 175.271214][ T6018] IPVS: starting estimator thread 0... [ 175.280820][ T5941] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 175.382903][ T7473] IPVS: using max 75 ests per chain, 180000 per kthread [ 175.462597][ T5941] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 175.471160][ T6846] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 175.557612][ T5941] usb 5-1: config 0 has no interface number 0 [ 175.601682][ T5941] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.630023][ T5941] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.640099][ T5941] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 175.663722][ T6846] usb 3-1: config 128 has an invalid interface number: 148 but max is 0 [ 175.672439][ T6846] usb 3-1: config 128 has no interface number 0 [ 175.680272][ T5941] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.689271][ T6846] usb 3-1: config 128 interface 148 altsetting 9 endpoint 0x7 has invalid wMaxPacketSize 0 [ 175.708308][ T5941] usb 5-1: config 0 descriptor?? [ 175.715569][ T6846] usb 3-1: config 128 interface 148 altsetting 9 endpoint 0x5 has an invalid bInterval 129, changing to 11 [ 175.742179][ T7476] syzkaller0: entered promiscuous mode [ 175.747728][ T6846] usb 3-1: config 128 interface 148 has no altsetting 0 [ 175.760049][ T7476] syzkaller0: entered allmulticast mode [ 175.774563][ T6846] usb 3-1: New USB device found, idVendor=0cf3, idProduct=e019, bcdDevice=fb.4f [ 175.784891][ T6846] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.811871][ T6846] usb 3-1: Product: syz [ 175.819473][ T6846] usb 3-1: Manufacturer: syz [ 175.853675][ T6846] usb 3-1: SerialNumber: syz [ 175.882133][ T7476] binder: 7475:7476 ioctl c0d05604 200000000300 returned -22 [ 176.002635][ T7480] syzkaller1: entered promiscuous mode [ 176.044265][ T30] audit: type=1400 audit(1769245059.272:2851): avc: denied { read } for pid=7478 comm="syz.3.375" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 176.067022][ T7480] syzkaller1: entered allmulticast mode [ 176.084059][ T30] audit: type=1400 audit(1769245059.292:2852): avc: denied { open } for pid=7478 comm="syz.3.375" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 176.130337][ T6846] usb 3-1: USB disconnect, device number 9 [ 176.144016][ T5941] prodikeys 0003:041E:2801.0002: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.4-1/input1 [ 176.160829][ T30] audit: type=1400 audit(1769245059.302:2853): avc: denied { ioctl } for pid=7478 comm="syz.3.375" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 176.188297][ T5941] hid_prodikeys: hid-prodikeys: failed to find output report [ 176.188297][ T5941] [ 176.341300][ T30] audit: type=1400 audit(1769245059.602:2854): avc: denied { read } for pid=7464 comm="syz.4.371" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 176.429992][ T7481] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 176.441055][ T30] audit: type=1400 audit(1769245059.632:2855): avc: denied { open } for pid=7464 comm="syz.4.371" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 176.630969][ T6846] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 176.960441][ T6846] usb 3-1: Using ep0 maxpacket: 8 [ 176.967616][ T6846] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 176.986858][ T6846] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 177.017056][ T6846] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 177.036525][ T6846] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 16 [ 177.060443][ T6846] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 177.093814][ T6846] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 177.104113][ T6846] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.348000][ T6846] usb 3-1: usb_control_msg returned -32 [ 177.357180][ T6846] usbtmc 3-1:16.0: can't read capabilities [ 177.430897][ T853] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 177.620826][ T5890] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 177.640794][ T853] usb 2-1: Using ep0 maxpacket: 8 [ 177.650483][ T853] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 177.674568][ T853] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 177.687261][ T853] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 177.702160][ T853] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 177.716060][ T853] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 177.741801][ T853] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.750126][ T7507] usbtmc 3-1:16.0: usb_bulk_msg returned -71 [ 177.784222][ T5890] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 177.794356][ T5890] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 177.815699][ T5890] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 177.843336][ T5890] usb 4-1: config 0 interface 0 has no altsetting 0 [ 177.861787][ T5890] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 177.874218][ T5890] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 177.899354][ T5890] usb 4-1: config 0 interface 0 has no altsetting 0 [ 177.912001][ T5890] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 177.921445][ T5890] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 177.942068][ T5890] usb 4-1: config 0 interface 0 has no altsetting 0 [ 177.952067][ T6018] usb 3-1: USB disconnect, device number 10 [ 177.969785][ T853] usb 2-1: usb_control_msg returned -32 [ 177.990560][ T7500] ptrace attach of ""[7508] was attempted by "./syz-executor exec"[7500] [ 178.026527][ T5963] usb 5-1: USB disconnect, device number 13 [ 178.039035][ T853] usbtmc 2-1:16.0: can't read capabilities [ 178.098556][ T5890] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 178.109091][ T853] usb 2-1: USB disconnect, device number 16 [ 178.224987][ T7511] bridge0: port 3(gretap0) entered blocking state [ 178.232781][ T7511] bridge0: port 3(gretap0) entered disabled state [ 178.241658][ T7511] gretap0: entered allmulticast mode [ 178.257427][ T7511] gretap0: entered promiscuous mode [ 178.272977][ T7511] bridge0: port 3(gretap0) entered blocking state [ 178.279791][ T7511] bridge0: port 3(gretap0) entered forwarding state [ 178.487605][ T5890] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 178.519779][ T5890] usb 4-1: config 0 interface 0 has no altsetting 0 [ 178.579796][ T5890] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 178.640861][ T5890] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 178.700888][ T5890] usb 4-1: config 0 interface 0 has no altsetting 0 [ 178.714634][ T5890] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 178.744411][ T5890] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 178.783359][ T5890] usb 4-1: config 0 interface 0 has no altsetting 0 [ 178.808360][ T5890] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 178.842841][ T5890] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 178.870839][ T5890] usb 4-1: config 0 interface 0 has no altsetting 0 [ 178.885060][ T5890] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 178.900853][ T5890] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 179.005325][ T7523] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 179.269582][ T5890] usb 4-1: config 0 interface 0 has no altsetting 0 [ 179.414285][ T5890] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 179.438982][ T5890] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 179.467735][ T5890] usb 4-1: Product: syz [ 179.484381][ T5890] usb 4-1: Manufacturer: syz [ 179.499772][ T5890] usb 4-1: SerialNumber: syz [ 179.522760][ T5890] usb 4-1: config 0 descriptor?? [ 179.552900][ T5890] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 179.805606][ T5941] usb 4-1: USB disconnect, device number 9 [ 179.824654][ T5941] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 179.860848][ T853] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 179.871325][ T6846] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 180.030988][ T853] usb 3-1: Using ep0 maxpacket: 32 [ 180.038280][ T6846] usb 2-1: config 128 has an invalid interface number: 148 but max is 0 [ 180.056012][ T853] usb 3-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 180.071658][ T6846] usb 2-1: config 128 has no interface number 0 [ 180.079564][ T853] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.088380][ T6846] usb 2-1: config 128 interface 148 altsetting 9 endpoint 0x7 has invalid wMaxPacketSize 0 [ 180.099233][ T853] usb 3-1: Product: syz [ 180.105097][ T853] usb 3-1: Manufacturer: syz [ 180.109777][ T6846] usb 2-1: config 128 interface 148 altsetting 9 endpoint 0x5 has an invalid bInterval 129, changing to 11 [ 180.121277][ T853] usb 3-1: SerialNumber: syz [ 180.126571][ T6846] usb 2-1: config 128 interface 148 has no altsetting 0 [ 180.134259][ T853] usb 3-1: config 0 descriptor?? [ 180.141304][ T6846] usb 2-1: New USB device found, idVendor=0cf3, idProduct=e019, bcdDevice=fb.4f [ 180.150339][ T6846] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.159494][ T853] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 180.168490][ T853] dvb-usb: bulk message failed: -22 (2/0) [ 180.175366][ T6846] usb 2-1: Product: syz [ 180.179536][ T6846] usb 2-1: Manufacturer: syz [ 180.185549][ T6846] usb 2-1: SerialNumber: syz [ 180.191481][ T853] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 180.202980][ T853] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 180.216020][ T853] usb 3-1: media controller created [ 180.221350][ T5941] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 180.235271][ T853] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 180.255434][ T853] usb 3-1: selecting invalid altsetting 7 [ 180.261229][ T853] cxusb: set interface failed [ 180.265892][ T853] dvb-usb: bulk message failed: -22 (1/0) [ 180.291002][ T853] DVB: Unable to find symbol lgdt330x_attach() [ 180.297176][ T853] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 180.360800][ T853] rc_core: IR keymap rc-dvico-portable not found [ 180.382448][ T853] Registered IR keymap rc-empty [ 180.389285][ T853] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 180.409592][ T5941] usb 1-1: Using ep0 maxpacket: 8 [ 180.422430][ T5941] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 180.432045][ T7540] loop2: detected capacity change from 0 to 7 [ 180.442795][ T853] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input5 [ 180.458587][ T5941] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 180.473646][ T6846] usb 2-1: USB disconnect, device number 17 [ 180.486249][ T853] dvb-usb: schedule remote query interval to 100 msecs. [ 180.487669][ T7540] Dev loop2: unable to read RDB block 7 [ 180.496589][ T5941] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 180.502508][ T7540] loop2: unable to read partition table [ 180.511449][ T853] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 180.522389][ T7540] loop2: partition table beyond EOD, truncated [ 180.527384][ T5941] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 180.545114][ T7540] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 180.676511][ T6858] dvb-usb: bulk message failed: -22 (1/0) [ 180.693232][ T5941] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 180.702343][ T5941] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.815884][ T853] dvb-usb: bulk message failed: -22 (1/0) [ 181.479696][ T853] dvb-usb: bulk message failed: -22 (1/0) [ 181.590931][ T6858] dvb-usb: bulk message failed: -22 (1/0) [ 181.726603][ T5941] usb 1-1: usb_control_msg returned -32 [ 181.736348][ T5870] dvb-usb: bulk message failed: -22 (1/0) [ 181.766356][ T5941] usbtmc 1-1:16.0: can't read capabilities [ 181.791151][ T6846] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 181.861782][ T5941] dvb-usb: bulk message failed: -22 (1/0) [ 181.881373][ T5863] usb 3-1: USB disconnect, device number 11 [ 181.963820][ T6846] usb 2-1: Using ep0 maxpacket: 8 [ 181.974281][ T6846] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 181.983037][ T6846] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 181.993353][ T6846] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 182.002854][ T5863] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 182.011495][ T6846] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 16 [ 182.031405][ T6846] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 182.069169][ T6846] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 182.078983][ T6846] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.106372][ C1] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 182.943465][ T6846] usb 2-1: usb_control_msg returned -71 [ 182.951203][ T6846] usbtmc 2-1:16.0: can't read capabilities [ 182.989381][ T6846] usb 2-1: USB disconnect, device number 18 [ 183.363172][ T5863] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 183.598835][ T5890] usb 1-1: USB disconnect, device number 20 [ 183.634838][ T5863] usb 3-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 183.671518][ T5863] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.701429][ T7573] CUSE: info not properly terminated [ 183.706738][ T5863] usb 3-1: Product: syz [ 183.721018][ T6846] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 183.771944][ T5863] usb 3-1: Manufacturer: syz [ 183.776552][ T5863] usb 3-1: SerialNumber: syz [ 183.971059][ T6846] usb 4-1: Using ep0 maxpacket: 8 [ 183.987147][ T6846] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 184.057330][ T5863] usb 3-1: config 0 descriptor?? [ 184.065247][ T5863] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 184.113134][ T6846] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 184.123082][ T6846] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 184.132261][ T6846] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.149441][ T6846] usb 4-1: config 0 descriptor?? [ 184.341679][ T7560] netlink: 4 bytes leftover after parsing attributes in process `syz.2.395'. [ 184.363120][ T6846] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 184.573746][ T7569] iowarrior 4-1:0.0: Error -90 while submitting URB [ 184.705455][ T6846] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 185.244804][ T6846] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 185.288207][ T6858] usb 3-1: USB disconnect, device number 12 [ 185.295911][ T6846] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 185.318542][ T6846] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 185.339387][ T6846] usb 2-1: config 0 interface 0 has no altsetting 0 [ 185.355455][ T5870] usb 4-1: USB disconnect, device number 10 [ 185.383016][ T6846] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 185.450629][ T6846] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 185.472487][ T6846] usb 2-1: config 0 interface 0 has no altsetting 0 [ 185.479944][ T6846] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 185.490344][ T6846] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 185.507709][ T6846] usb 2-1: config 0 interface 0 has no altsetting 0 [ 185.523932][ T6846] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 185.660031][ T6846] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 185.672607][ T6846] usb 2-1: config 0 interface 0 has no altsetting 0 [ 185.683166][ T6846] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 185.695885][ T6846] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 185.710167][ T6846] usb 2-1: config 0 interface 0 has no altsetting 0 [ 185.720372][ T6846] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 185.736712][ T6846] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 185.756996][ T6846] usb 2-1: config 0 interface 0 has no altsetting 0 [ 185.771631][ T6846] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 185.780515][ T6846] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 185.808715][ T6846] usb 2-1: config 0 interface 0 has no altsetting 0 [ 185.821565][ T6846] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 185.830438][ T6846] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 185.850780][ T6846] usb 2-1: config 0 interface 0 has no altsetting 0 [ 185.859360][ T6846] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 185.860861][ T5863] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 185.890777][ T6846] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 185.900814][ T6846] usb 2-1: Product: syz [ 185.904979][ T6846] usb 2-1: Manufacturer: syz [ 185.919398][ T6846] usb 2-1: SerialNumber: syz [ 185.932266][ T6846] usb 2-1: config 0 descriptor?? [ 185.970034][ T6846] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 186.052603][ T5863] usb 5-1: Using ep0 maxpacket: 32 [ 186.091844][ T5863] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 186.141183][ T5863] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16 [ 186.188758][ T7600] FAULT_INJECTION: forcing a failure. [ 186.188758][ T7600] name failslab, interval 1, probability 0, space 0, times 0 [ 186.204788][ T5863] usb 5-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3 [ 186.226727][ T5890] usb 2-1: USB disconnect, device number 19 [ 186.233249][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 186.233265][ T30] audit: type=1400 audit(1769245069.432:2857): avc: denied { map } for pid=7597 comm="syz.3.406" path="socket:[15534]" dev="sockfs" ino=15534 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 186.269059][ T5863] usb 5-1: Product: syz [ 186.303534][ T7600] CPU: 1 UID: 0 PID: 7600 Comm: syz.2.404 Not tainted syzkaller #0 PREEMPT(full) [ 186.303559][ T7600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 186.303567][ T7600] Call Trace: [ 186.303573][ T7600] [ 186.303579][ T7600] dump_stack_lvl+0x100/0x190 [ 186.303607][ T7600] should_fail_ex.cold+0x5/0xa [ 186.303634][ T7600] should_failslab+0xc2/0x120 [ 186.303656][ T7600] kmem_cache_alloc_noprof+0x83/0x780 [ 186.303677][ T7600] ? alloc_empty_file+0x55/0x1c0 [ 186.303702][ T7600] ? alloc_empty_file+0x55/0x1c0 [ 186.303723][ T7600] alloc_empty_file+0x55/0x1c0 [ 186.303745][ T7600] path_openat+0xe8/0x3120 [ 186.303763][ T7600] ? getname_flags+0x93/0xf0 [ 186.303778][ T7600] ? do_sys_openat2+0xc5/0x220 [ 186.303799][ T7600] ? __x64_sys_openat+0x12d/0x210 [ 186.303820][ T7600] ? do_syscall_64+0xc9/0xf80 [ 186.303836][ T7600] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.303857][ T7600] ? __pfx_path_openat+0x10/0x10 [ 186.303884][ T7600] do_filp_open+0x1f7/0x420 [ 186.303910][ T7600] ? __pfx_do_filp_open+0x10/0x10 [ 186.303943][ T7600] ? _raw_spin_unlock+0x28/0x50 [ 186.303966][ T7600] ? alloc_fd+0x476/0x790 [ 186.303993][ T7600] do_sys_openat2+0x12e/0x220 [ 186.304016][ T7600] ? __pfx_do_sys_openat2+0x10/0x10 [ 186.304039][ T7600] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 186.304060][ T7600] ? __fget_files+0x21f/0x3d0 [ 186.304083][ T7600] __x64_sys_openat+0x12d/0x210 [ 186.304104][ T7600] ? fput+0x79/0x100 [ 186.304127][ T7600] ? __pfx___x64_sys_openat+0x10/0x10 [ 186.304149][ T7600] ? ksys_write+0x1ac/0x250 [ 186.304174][ T7600] do_syscall_64+0xc9/0xf80 [ 186.304194][ T7600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.304210][ T7600] RIP: 0033:0x7f023699acb9 [ 186.304223][ T7600] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 186.304239][ T7600] RSP: 002b:00007f0237774028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 186.304255][ T7600] RAX: ffffffffffffffda RBX: 00007f0236c15fa0 RCX: 00007f023699acb9 [ 186.304265][ T7600] RDX: 0000000000208000 RSI: 00002000000017c0 RDI: ffffffffffffff9c [ 186.304276][ T7600] RBP: 00007f0237774090 R08: 0000000000000000 R09: 0000000000000000 [ 186.304285][ T7600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 186.304295][ T7600] R13: 00007f0236c16038 R14: 00007f0236c15fa0 R15: 00007ffefd72b2b8 [ 186.304317][ T7600] [ 186.320116][ T5890] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 186.666909][ T5863] usb 5-1: Manufacturer: syz [ 186.730974][ T5863] usb 5-1: SerialNumber: syz [ 186.885082][ T5863] usb 5-1: config 0 descriptor?? [ 186.897609][ T30] audit: type=1326 audit(1769245070.152:2858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7597 comm="syz.3.406" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8bb0f9acb9 code=0x0 [ 187.035237][ T5863] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 187.196205][ T3490] usb 5-1: Failed to submit usb control message: -71 [ 187.203445][ T5863] usb 5-1: USB disconnect, device number 14 [ 187.210942][ T3490] usb 5-1: unable to send the bmi data to the device: -71 [ 187.226150][ T3490] usb 5-1: unable to get target info from device [ 187.284304][ T3490] usb 5-1: could not get target info (-71) [ 187.297564][ T3490] usb 5-1: could not probe fw (-71) [ 187.860407][ T7624] CUSE: info not properly terminated [ 188.751401][ T7635] xt_HMARK: proto mask must be zero with L3 mode [ 188.762306][ T30] audit: type=1400 audit(1769245072.022:2859): avc: denied { ioctl } for pid=7628 comm="syz.4.413" path="socket:[15593]" dev="sockfs" ino=15593 ioctlcmd=0x4150 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 188.803817][ T7635] faux_driver vgem: [drm] Unknown color mode 13; guessing buffer size. [ 188.926905][ T30] audit: type=1400 audit(1769245072.182:2860): avc: denied { write } for pid=7634 comm="syz.0.415" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 188.981215][ T30] audit: type=1400 audit(1769245072.212:2861): avc: denied { map } for pid=7634 comm="syz.0.415" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 189.006870][ T30] audit: type=1400 audit(1769245072.212:2862): avc: denied { execute } for pid=7634 comm="syz.0.415" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 189.034553][ T30] audit: type=1400 audit(1769245072.222:2863): avc: denied { getopt } for pid=7634 comm="syz.0.415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 189.116670][ T30] audit: type=1400 audit(1769245072.362:2864): avc: denied { write } for pid=7642 comm="syz.0.417" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 189.488636][ T30] audit: type=1400 audit(1769245072.362:2865): avc: denied { ioctl } for pid=7642 comm="syz.0.417" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 189.653989][ T7647] syzkaller1: entered promiscuous mode [ 189.659493][ T7647] syzkaller1: entered allmulticast mode [ 189.961101][ T30] audit: type=1400 audit(1769245073.122:2866): avc: denied { append } for pid=7648 comm="syz.0.420" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 190.136556][ T5822] Bluetooth: hci3: unexpected event for opcode 0x2043 [ 190.887337][ T7673] CUSE: info not properly terminated [ 191.046315][ T7677] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 191.053901][ T7677] IPv6: NLM_F_CREATE should be set when creating new route [ 191.061295][ T7677] IPv6: NLM_F_CREATE should be set when creating new route [ 191.068533][ T7677] IPv6: NLM_F_CREATE should be set when creating new route [ 192.033636][ T5890] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 192.100820][ T5863] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 192.241268][ T5890] usb 3-1: Using ep0 maxpacket: 32 [ 192.250170][ T5890] usb 3-1: config 0 interface 0 has no altsetting 0 [ 192.259992][ T5890] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 192.260022][ T7688] FAULT_INJECTION: forcing a failure. [ 192.260022][ T7688] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 192.269802][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.291980][ T7688] CPU: 0 UID: 0 PID: 7688 Comm: syz.3.429 Not tainted syzkaller #0 PREEMPT(full) [ 192.291995][ T7688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 192.292002][ T7688] Call Trace: [ 192.292006][ T7688] [ 192.292010][ T7688] dump_stack_lvl+0x100/0x190 [ 192.292030][ T7688] should_fail_ex.cold+0x5/0xa [ 192.292050][ T7688] _copy_to_user+0x32/0xd0 [ 192.292066][ T7688] simple_read_from_buffer+0xcb/0x170 [ 192.292080][ T7688] proc_fail_nth_read+0x1af/0x230 [ 192.292096][ T7688] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 192.292112][ T7688] ? rw_verify_area+0xce/0x6d0 [ 192.292122][ T7688] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 192.292137][ T7688] vfs_read+0x1e4/0xb30 [ 192.292150][ T7688] ? __pfx_vfs_read+0x10/0x10 [ 192.292160][ T7688] ? find_held_lock+0x2b/0x80 [ 192.292175][ T7688] ? __fget_files+0x215/0x3d0 [ 192.292191][ T7688] ? __fget_files+0x21f/0x3d0 [ 192.292207][ T7688] ksys_read+0x12a/0x250 [ 192.292219][ T7688] ? __pfx_ksys_read+0x10/0x10 [ 192.292234][ T7688] do_syscall_64+0xc9/0xf80 [ 192.292248][ T7688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.292259][ T7688] RIP: 0033:0x7f8bb0f5b58e [ 192.292269][ T7688] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 192.292279][ T7688] RSP: 002b:00007f8bb1dc2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 192.292290][ T7688] RAX: ffffffffffffffda RBX: 00007f8bb1dc36c0 RCX: 00007f8bb0f5b58e [ 192.292297][ T7688] RDX: 000000000000000f RSI: 00007f8bb1dc30a0 RDI: 0000000000000004 [ 192.292303][ T7688] RBP: 00007f8bb1dc3090 R08: 0000000000000000 R09: 0000000000000000 [ 192.292310][ T7688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.292316][ T7688] R13: 00007f8bb1216038 R14: 00007f8bb1215fa0 R15: 00007ffd2a3e15d8 [ 192.292330][ T7688] [ 192.483851][ T5890] usb 3-1: Product: syz [ 192.488390][ T5890] usb 3-1: Manufacturer: syz [ 192.493013][ T5890] usb 3-1: SerialNumber: syz [ 192.502128][ T5890] usb 3-1: config 0 descriptor?? [ 192.525421][ T5890] gs_usb 3-1:0.0: Required endpoints not found [ 192.536028][ T5863] usb 2-1: unable to get BOS descriptor or descriptor too short [ 192.545436][ T5863] usb 2-1: config 9 has an invalid interface number: 209 but max is 2 [ 192.553676][ T5863] usb 2-1: config 9 has an invalid interface number: 254 but max is 2 [ 192.561960][ T5863] usb 2-1: config 9 has no interface number 1 [ 192.568022][ T5863] usb 2-1: config 9 has no interface number 2 [ 192.574213][ T5863] usb 2-1: config 9 interface 209 has no altsetting 0 [ 192.581056][ T5863] usb 2-1: config 9 interface 254 has no altsetting 0 [ 192.587843][ T5863] usb 2-1: config 9 interface 0 has no altsetting 0 [ 192.604031][ T5863] usb 2-1: New USB device found, idVendor=05c6, idProduct=9245, bcdDevice=d1.2a [ 192.613192][ T5863] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.621380][ T5863] usb 2-1: Product: syz [ 192.625598][ T5863] usb 2-1: Manufacturer: syz [ 192.630191][ T5863] usb 2-1: SerialNumber: syz [ 192.718621][ T7679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.727364][ T7679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.261565][ T7703] syzkaller1: entered promiscuous mode [ 193.272731][ T7703] syzkaller1: entered allmulticast mode [ 193.432775][ T30] audit: type=1400 audit(1769245076.692:2867): avc: denied { ioctl } for pid=7704 comm="syz.0.434" path="socket:[14977]" dev="sockfs" ino=14977 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 193.880287][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.887090][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.991298][ T6858] usb 3-1: USB disconnect, device number 13 [ 194.172192][ T5822] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 194.181511][ T5822] Bluetooth: hci3: Injecting HCI hardware error event [ 194.189410][ T5816] Bluetooth: hci3: hardware error 0x00 [ 194.266459][ T5918] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 194.432889][ T5918] usb 1-1: Using ep0 maxpacket: 8 [ 194.448588][ T5918] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 194.675266][ T5918] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 194.685360][ T5918] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.714925][ T5918] usb 1-1: config 0 descriptor?? [ 194.783310][ T5863] qmi_wwan 2-1:9.0: probe with driver qmi_wwan failed with error -22 [ 194.815250][ T5863] usb 2-1: USB disconnect, device number 20 [ 194.926194][ T30] audit: type=1400 audit(1769245078.182:2868): avc: denied { mounton } for pid=7724 comm="syz.1.440" path="/69/file1" dev="tmpfs" ino=376 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 194.949727][ T5918] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 195.148355][ T30] audit: type=1400 audit(1769245078.402:2869): avc: denied { name_connect } for pid=7726 comm="syz.3.441" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 195.182976][ T30] audit: type=1400 audit(1769245078.422:2870): avc: denied { listen } for pid=7726 comm="syz.3.441" lport=46361 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 195.236927][ T7734] net_ratelimit: 61 callbacks suppressed [ 195.237119][ T7734] netlink: zone id is out of range [ 195.248130][ T7734] netlink: zone id is out of range [ 195.253432][ T7734] netlink: zone id is out of range [ 195.256889][ T30] audit: type=1400 audit(1769245078.422:2871): avc: denied { accept } for pid=7726 comm="syz.3.441" lport=46361 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 195.259056][ T7734] netlink: zone id is out of range [ 195.294035][ T7734] netlink: zone id is out of range [ 195.300323][ T7734] netlink: zone id is out of range [ 195.305550][ T7734] netlink: zone id is out of range [ 195.310901][ T7734] netlink: zone id is out of range [ 195.316960][ T7734] netlink: zone id is out of range [ 195.322225][ T7734] netlink: zone id is out of range [ 195.588907][ T5918] usb 1-1: USB disconnect, device number 21 [ 195.608285][ T30] audit: type=1400 audit(1769245078.482:2872): avc: denied { setopt } for pid=7726 comm="syz.3.441" lport=46361 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 196.306810][ T5816] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 196.449270][ T7760] FAULT_INJECTION: forcing a failure. [ 196.449270][ T7760] name failslab, interval 1, probability 0, space 0, times 0 [ 196.550938][ T7760] CPU: 0 UID: 0 PID: 7760 Comm: syz.0.447 Not tainted syzkaller #0 PREEMPT(full) [ 196.550963][ T7760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 196.550973][ T7760] Call Trace: [ 196.550978][ T7760] [ 196.550985][ T7760] dump_stack_lvl+0x100/0x190 [ 196.551011][ T7760] should_fail_ex.cold+0x5/0xa [ 196.551038][ T7760] should_failslab+0xc2/0x120 [ 196.551059][ T7760] kmem_cache_alloc_noprof+0x83/0x780 [ 196.551078][ T7760] ? __pfx_map_id_range_down+0x10/0x10 [ 196.551099][ T7760] ? security_inode_alloc+0x3b/0x2c0 [ 196.551116][ T7760] ? security_inode_alloc+0x3b/0x2c0 [ 196.551128][ T7760] security_inode_alloc+0x3b/0x2c0 [ 196.551143][ T7760] inode_init_always_gfp+0xced/0x1040 [ 196.551169][ T7760] alloc_inode+0x8e/0x250 [ 196.551189][ T7760] sock_alloc+0x44/0x280 [ 196.551211][ T7760] ? security_socket_create+0x7f/0x250 [ 196.551236][ T7760] __sock_create+0xc2/0x860 [ 196.551255][ T7760] __sys_socket+0x14d/0x260 [ 196.551269][ T7760] ? fput+0x79/0x100 [ 196.551289][ T7760] ? __pfx___sys_socket+0x10/0x10 [ 196.551305][ T7760] ? ksys_write+0x1ac/0x250 [ 196.551322][ T7760] ? __pfx_ksys_write+0x10/0x10 [ 196.551344][ T7760] __x64_sys_socket+0x72/0xb0 [ 196.551361][ T7760] ? lockdep_hardirqs_on+0x78/0x100 [ 196.551380][ T7760] do_syscall_64+0xc9/0xf80 [ 196.551400][ T7760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.551418][ T7760] RIP: 0033:0x7f30bed9acb9 [ 196.551433][ T7760] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 196.551449][ T7760] RSP: 002b:00007f30bfc2f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 196.551468][ T7760] RAX: ffffffffffffffda RBX: 00007f30bf015fa0 RCX: 00007f30bed9acb9 [ 196.551479][ T7760] RDX: 00000000fffffffe RSI: 0000000000000003 RDI: 000000000000000f [ 196.551489][ T7760] RBP: 00007f30bfc2f090 R08: 0000000000000000 R09: 0000000000000000 [ 196.551500][ T7760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.551510][ T7760] R13: 00007f30bf016038 R14: 00007f30bf015fa0 R15: 00007ffca8581788 [ 196.551543][ T7760] [ 197.220870][ T6858] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 197.387802][ T6858] usb 2-1: Using ep0 maxpacket: 16 [ 197.776840][ T6858] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.803713][ T6858] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 197.829484][ T6858] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.867620][ T6858] usb 2-1: config 0 descriptor?? [ 198.022253][ T30] audit: type=1400 audit(1769245081.282:2873): avc: denied { create } for pid=7781 comm="syz.3.453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 198.102009][ T7765] trusted_key: syz.1.448 sent an empty control message without MSG_MORE. [ 198.133168][ T30] audit: type=1400 audit(1769245081.282:2874): avc: denied { ioctl } for pid=7781 comm="syz.3.453" path="socket:[15794]" dev="sockfs" ino=15794 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 198.277238][ T30] audit: type=1400 audit(1769245081.322:2875): avc: denied { ioctl } for pid=7781 comm="syz.3.453" path="socket:[15791]" dev="sockfs" ino=15791 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 198.320695][ T6858] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 198.329617][ T6858] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 198.356657][ T30] audit: type=1400 audit(1769245081.362:2876): avc: denied { ioctl } for pid=7764 comm="syz.1.448" path="socket:[15108]" dev="sockfs" ino=15108 ioctlcmd=0x89f2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 198.370800][ T6858] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 198.450997][ T6858] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 198.465102][ T6858] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 198.543573][ T6858] mcp2221 0003:04D8:00DD.0003: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 198.810405][ T6858] usb 2-1: USB disconnect, device number 21 [ 199.711041][ T6846] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 199.930930][ T6846] usb 4-1: Using ep0 maxpacket: 8 [ 200.042040][ T6846] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 200.092613][ T6846] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 200.144849][ T6846] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.178161][ T6846] usb 4-1: config 0 descriptor?? [ 200.259008][ T7832] FAULT_INJECTION: forcing a failure. [ 200.259008][ T7832] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 200.314566][ T7832] CPU: 1 UID: 0 PID: 7832 Comm: syz.1.461 Not tainted syzkaller #0 PREEMPT(full) [ 200.314594][ T7832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 200.314605][ T7832] Call Trace: [ 200.314610][ T7832] [ 200.314617][ T7832] dump_stack_lvl+0x100/0x190 [ 200.314646][ T7832] should_fail_ex.cold+0x5/0xa [ 200.314674][ T7832] _copy_from_iter+0x1f4/0x1690 [ 200.314703][ T7832] ? __pfx__copy_from_iter+0x10/0x10 [ 200.314725][ T7832] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 200.314754][ T7832] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 200.314776][ T7832] skb_copy_datagram_from_iter+0x11f/0x720 [ 200.314802][ T7832] packet_sendmsg+0x2476/0x53c0 [ 200.314821][ T7832] ? avc_has_perm+0x90/0x1e0 [ 200.314848][ T7832] ? __lock_acquire+0x4a5/0x2630 [ 200.314870][ T7832] ? sock_has_perm+0x258/0x2f0 [ 200.314896][ T7832] ? __pfx_sock_has_perm+0x10/0x10 [ 200.314923][ T7832] ? __pfx_packet_sendmsg+0x10/0x10 [ 200.314953][ T7832] ____sys_sendmsg+0xa54/0xc30 [ 200.314973][ T7832] ? __pfx_____sys_sendmsg+0x10/0x10 [ 200.315000][ T7832] ___sys_sendmsg+0x190/0x1e0 [ 200.315019][ T7832] ? __pfx____sys_sendmsg+0x10/0x10 [ 200.315047][ T7832] ? find_held_lock+0x2b/0x80 [ 200.315084][ T7832] __sys_sendmsg+0x170/0x220 [ 200.315107][ T7832] ? __pfx___sys_sendmsg+0x10/0x10 [ 200.315143][ T7832] do_syscall_64+0xc9/0xf80 [ 200.315163][ T7832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.315181][ T7832] RIP: 0033:0x7f6366b9acb9 [ 200.315195][ T7832] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 200.315212][ T7832] RSP: 002b:00007f63679d2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 200.315229][ T7832] RAX: ffffffffffffffda RBX: 00007f6366e15fa0 RCX: 00007f6366b9acb9 [ 200.315240][ T7832] RDX: 0000000000000000 RSI: 0000200000001780 RDI: 0000000000000003 [ 200.315249][ T7832] RBP: 00007f63679d2090 R08: 0000000000000000 R09: 0000000000000000 [ 200.315259][ T7832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 200.315269][ T7832] R13: 00007f6366e16038 R14: 00007f6366e15fa0 R15: 00007fff62494788 [ 200.315291][ T7832] [ 200.674801][ T6846] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 200.915726][ T7855] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=41 sclass=netlink_tcpdiag_socket pid=7855 comm=syz.4.464 [ 200.932168][ T7855] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=41 sclass=netlink_tcpdiag_socket pid=7855 comm=syz.4.464 [ 201.341067][ T7855] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=41 sclass=netlink_tcpdiag_socket pid=7855 comm=syz.4.464 [ 201.399045][ T7862] fuse: Bad value for 'fd' [ 201.408061][ T5870] usb 4-1: USB disconnect, device number 11 [ 201.777046][ T7868] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 202.025989][ T7872] netlink: 4 bytes leftover after parsing attributes in process `syz.3.471'. [ 202.122494][ T7872] syzkaller1: entered promiscuous mode [ 202.127991][ T7872] syzkaller1: entered allmulticast mode [ 202.252323][ T5870] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 203.233558][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 203.233569][ T30] audit: type=1400 audit(1769245086.002:2878): avc: denied { execute } for pid=7876 comm="syz.1.472" path="/dev/audio1" dev="devtmpfs" ino=1297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 203.320969][ T5870] usb 1-1: Using ep0 maxpacket: 32 [ 203.419979][ T5870] usb 1-1: unable to get BOS descriptor or descriptor too short [ 203.457816][ T5870] usb 1-1: config 128 has an invalid interface number: 127 but max is 3 [ 203.485750][ T5870] usb 1-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 203.557621][ T5870] usb 1-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 203.589427][ T5870] usb 1-1: config 128 has no interface number 0 [ 203.625295][ T5870] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 203.923123][ T5870] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 203.940705][ T5870] usb 1-1: config 128 interface 127 has no altsetting 0 [ 204.134103][ T5870] usb 1-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 204.157290][ T5870] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.274931][ T5870] usb 1-1: Product: syz [ 204.282700][ T5870] usb 1-1: Manufacturer: syz [ 204.294827][ T5870] usb 1-1: SerialNumber: syz [ 204.709478][ T7905] fuse: Bad value for 'fd' [ 205.249749][ T30] audit: type=1400 audit(1769245088.112:2879): avc: denied { setopt } for pid=7893 comm="syz.2.477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 205.549491][ T5870] usb 1-1: USB disconnect, device number 22 [ 205.639423][ T7913] net_ratelimit: 66 callbacks suppressed [ 205.639457][ T7913] netlink: zone id is out of range [ 205.650882][ T7913] netlink: zone id is out of range [ 205.656069][ T7913] netlink: zone id is out of range [ 205.661338][ T7913] netlink: zone id is out of range [ 205.666458][ T7913] netlink: zone id is out of range [ 205.671686][ T7913] netlink: zone id is out of range [ 205.676823][ T7913] netlink: zone id is out of range [ 205.682011][ T7913] netlink: zone id is out of range [ 205.687165][ T7913] netlink: zone id is out of range [ 205.692479][ T7913] netlink: zone id is out of range [ 206.538370][ T5802] udevd[5802]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 206.681357][ C0] hrtimer: interrupt took 8613 ns [ 209.010514][ T7951] fuse: Invalid rootmode [ 209.241263][ T7959] netlink: 8 bytes leftover after parsing attributes in process `syz.2.493'. [ 209.585780][ T7957] validate_nla: 1 callbacks suppressed [ 209.585812][ T7957] netlink: 'syz.3.491': attribute type 1 has an invalid length. [ 209.600209][ T7957] netlink: 'syz.3.491': attribute type 2 has an invalid length. [ 209.607995][ T7957] netlink: 'syz.3.491': attribute type 2 has an invalid length. [ 209.615820][ T7957] netlink: 'syz.3.491': attribute type 1 has an invalid length. [ 209.623694][ T7957] netlink: 'syz.3.491': attribute type 1 has an invalid length. [ 210.119927][ T7968] syzkaller1: entered promiscuous mode [ 210.128737][ T7968] syzkaller1: entered allmulticast mode [ 211.826876][ T7984] veth0_to_team: entered promiscuous mode [ 212.321071][ T5890] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 212.532381][ T5890] usb 5-1: config 128 has an invalid interface number: 148 but max is 0 [ 212.540852][ T5890] usb 5-1: config 128 has no interface number 0 [ 212.547200][ T5890] usb 5-1: config 128 interface 148 altsetting 9 endpoint 0x7 has invalid wMaxPacketSize 0 [ 212.557669][ T5890] usb 5-1: config 128 interface 148 altsetting 9 endpoint 0x5 has an invalid bInterval 129, changing to 11 [ 212.590468][ T5890] usb 5-1: config 128 interface 148 has no altsetting 0 [ 213.203541][ T5890] usb 5-1: New USB device found, idVendor=0cf3, idProduct=e019, bcdDevice=fb.4f [ 213.388881][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.438600][ T5890] usb 5-1: Product: syz [ 213.451676][ T5890] usb 5-1: Manufacturer: syz [ 213.456303][ T5890] usb 5-1: SerialNumber: syz [ 213.457224][ T8007] netlink: 16 bytes leftover after parsing attributes in process `syz.0.507'. [ 213.708578][ T5890] usb 5-1: USB disconnect, device number 15 [ 213.966552][ T8020] netlink: 8 bytes leftover after parsing attributes in process `syz.2.510'. [ 214.487337][ T6846] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 214.657257][ T8029] netlink: 666 bytes leftover after parsing attributes in process `syz.0.513'. [ 214.660791][ T6846] usb 5-1: Using ep0 maxpacket: 8 [ 214.673408][ T8030] netlink: 666 bytes leftover after parsing attributes in process `syz.0.513'. [ 214.823630][ T6846] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 214.845348][ T6846] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 214.872590][ T6846] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 214.918971][ T6846] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 16 [ 214.969889][ T6846] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 215.640138][ T6846] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 215.649476][ T6846] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.940909][ T30] audit: type=1400 audit(1769245099.142:2880): avc: denied { mount } for pid=8043 comm="syz.3.515" name="/" dev="ramfs" ino=16369 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 216.039693][ T6846] usb 5-1: can't set config #16, error -71 [ 216.070330][ T6846] usb 5-1: USB disconnect, device number 16 [ 216.100814][ T30] audit: type=1400 audit(1769245099.152:2881): avc: denied { execute } for pid=8043 comm="syz.3.515" path="" dev="ramfs" ino=16370 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 217.106118][ T30] audit: type=1400 audit(1769245100.362:2882): avc: denied { create } for pid=8055 comm="syz.1.521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 217.130781][ T6846] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 217.166225][ T30] audit: type=1400 audit(1769245100.392:2883): avc: denied { bind } for pid=8055 comm="syz.1.521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 217.217621][ T30] audit: type=1400 audit(1769245100.422:2884): avc: denied { getopt } for pid=8057 comm="syz.4.520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 217.350413][ T6846] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 217.367529][ T6846] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.420996][ T6846] usb 3-1: Product: syz [ 217.441280][ T6846] usb 3-1: Manufacturer: syz [ 217.461382][ T6846] usb 3-1: SerialNumber: syz [ 217.692163][ T8065] netlink: 8 bytes leftover after parsing attributes in process `syz.4.523'. [ 217.730752][ T8065] : entered promiscuous mode [ 218.150538][ T6846] net_ratelimit: 65 callbacks suppressed [ 218.150562][ T6846] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 218.235715][ T8075] tipc: Started in network mode [ 218.240577][ T8075] tipc: Node identity 26a616a4870e, cluster identity 4711 [ 218.248250][ T6846] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 218.259311][ T8075] tipc: Enabled bearer , priority 0 [ 218.273188][ T8075] syzkaller0: entered promiscuous mode [ 218.278717][ T8075] syzkaller0: entered allmulticast mode [ 218.356973][ T30] audit: type=1400 audit(1769245101.572:2885): avc: denied { setopt } for pid=8070 comm="syz.3.524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 218.700876][ T30] audit: type=1400 audit(1769245101.582:2886): avc: denied { getopt } for pid=8070 comm="syz.3.524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 219.271055][ T5963] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 219.372995][ T5941] tipc: Node number set to 2712147620 [ 219.501017][ T5963] usb 2-1: Using ep0 maxpacket: 16 [ 219.574719][ T5963] usb 2-1: config 129 has too many interfaces: 160, using maximum allowed: 32 [ 219.741079][ T5963] usb 2-1: config 129 has 1 interface, different from the descriptor's value: 160 [ 220.045188][ T6846] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 220.080892][ T5963] usb 2-1: config 129 interface 0 altsetting 0 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 220.103115][ T5963] usb 2-1: config 129 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 220.131240][ T5963] usb 2-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=ec.c1 [ 220.160641][ T5963] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.184909][ T5963] usb 2-1: Product: syz [ 220.202055][ T5963] usb 2-1: Manufacturer: syz [ 220.232330][ T5963] usb 2-1: SerialNumber: syz [ 220.533255][ T8075] tipc: Resetting bearer [ 220.601168][ T5963] powermate 2-1:129.0: probe with driver powermate failed with error -5 [ 220.931452][ T8073] tipc: Resetting bearer [ 220.989843][ T8073] tipc: Disabling bearer [ 220.990625][ T5963] usb 2-1: USB disconnect, device number 22 [ 326.110697][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 326.117650][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5818/1:b..l [ 326.125875][ C1] rcu: (detected by 1, t=10502 jiffies, g=21141, q=258 ncpus=2) [ 326.133580][ C1] task:syz-executor state:R running task stack:23928 pid:5818 tgid:5818 ppid:5809 task_flags:0x400140 flags:0x00080000 [ 326.147748][ C1] Call Trace: [ 326.151024][ C1] [ 326.153950][ C1] ? __schedule+0xf65/0x5e10 [ 326.158536][ C1] __schedule+0xfe4/0x5e10 [ 326.162958][ C1] ? __pfx___schedule+0x10/0x10 [ 326.167796][ C1] ? mark_held_locks+0x40/0x70 [ 326.172553][ C1] preempt_schedule_irq+0x50/0x90 [ 326.177571][ C1] irqentry_exit+0x17b/0x670 [ 326.182154][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 326.188124][ C1] RIP: 0010:unwind_next_frame+0x1f6/0x1ea0 [ 326.193925][ C1] Code: 89 c3 39 d0 0f 83 8a 15 00 00 48 ba 00 00 00 00 00 fc ff df 89 c1 48 8d 3c 8d 10 fd 0e 92 49 89 f8 49 c1 e8 03 45 0f b6 04 10 <48> 89 fa 83 e2 07 83 c2 03 44 38 c2 7c 2f 45 84 c0 74 2a 48 89 4c [ 326.213532][ C1] RSP: 0018:ffffc90003376ed8 EFLAGS: 00000a02 [ 326.219603][ C1] RAX: 0000000000015f46 RBX: 0000000000000001 RCX: 0000000000015f46 [ 326.227574][ C1] RDX: dffffc0000000000 RSI: 00000000000a7ab2 RDI: ffffffff92147a28 [ 326.235534][ C1] RBP: ffffc90003376f90 R08: 0000000000000000 R09: 0000000000000007 [ 326.243496][ C1] R10: 0000000000000200 R11: 0000000000015f46 R12: ffffc90003376f98 [ 326.251461][ C1] R13: ffffc90003376f48 R14: ffffc90003376f7d R15: ffffffff825f4624 [ 326.259423][ C1] ? alloc_vmap_area+0x934/0x2a00 [ 326.264463][ C1] ? unwind_next_frame+0x6fa/0x1ea0 [ 326.269667][ C1] ? alloc_vmap_area+0x935/0x2a00 [ 326.274695][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 326.280855][ C1] arch_stack_walk+0x94/0xf0 [ 326.285447][ C1] ? alloc_vmap_area+0x935/0x2a00 [ 326.290466][ C1] stack_trace_save+0x8e/0xc0 [ 326.295137][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 326.300499][ C1] ? finish_task_switch.isra.0+0x2c5/0xb70 [ 326.306302][ C1] ? rcu_is_watching+0x12/0xc0 [ 326.311061][ C1] ? trace_sched_exit_tp+0xcd/0x100 [ 326.316260][ C1] save_stack+0x162/0x1e0 [ 326.320580][ C1] ? __pfx_save_stack+0x10/0x10 [ 326.325420][ C1] ? post_alloc_hook+0x1e1/0x250 [ 326.330343][ C1] ? get_page_from_freelist+0xe3d/0x2e10 [ 326.335963][ C1] ? __alloc_frozen_pages_noprof+0x26c/0x2410 [ 326.342023][ C1] ? alloc_pages_mpol+0x1fb/0x550 [ 326.347036][ C1] ? alloc_pages_noprof+0x131/0x390 [ 326.352226][ C1] ? get_free_pages_noprof+0x10/0xb0 [ 326.357505][ C1] ? __kasan_populate_vmalloc+0xa0/0x210 [ 326.363126][ C1] ? alloc_vmap_area+0x935/0x2a00 [ 326.368148][ C1] ? __lock_acquire+0x4a5/0x2630 [ 326.373081][ C1] __set_page_owner+0x8c/0x540 [ 326.377839][ C1] ? __pfx___set_page_owner+0x10/0x10 [ 326.383201][ C1] ? bad_range+0x261/0x400 [ 326.387610][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 326.392801][ C1] post_alloc_hook+0x1e1/0x250 [ 326.397558][ C1] get_page_from_freelist+0xe3d/0x2e10 [ 326.403019][ C1] ? prepare_alloc_pages+0x16d/0x5f0 [ 326.408309][ C1] __alloc_frozen_pages_noprof+0x26c/0x2410 [ 326.414199][ C1] ? find_held_lock+0x2b/0x80 [ 326.418869][ C1] ? is_bpf_text_address+0x8a/0x1a0 [ 326.424060][ C1] ? is_bpf_text_address+0x8a/0x1a0 [ 326.429260][ C1] ? bpf_ksym_find+0x128/0x1c0 [ 326.434011][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 326.440165][ C1] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 326.446478][ C1] ? is_bpf_text_address+0x94/0x1a0 [ 326.451671][ C1] ? tomoyo_file_open+0x6b/0x90 [ 326.456513][ C1] ? __kernel_text_address+0xd/0x30 [ 326.461702][ C1] ? unwind_get_return_address+0x59/0xa0 [ 326.467344][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 326.473243][ C1] ? policy_nodemask+0xed/0x4f0 [ 326.478087][ C1] alloc_pages_mpol+0x1fb/0x550 [ 326.482930][ C1] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 326.488291][ C1] ? kasan_save_stack+0x30/0x50 [ 326.493129][ C1] ? __kasan_kmalloc+0xaa/0xb0 [ 326.497886][ C1] ? __get_vm_area_node+0x101/0x330 [ 326.503077][ C1] ? __vmalloc_node_range_noprof+0x213/0x1530 [ 326.509141][ C1] ? __vmalloc_node_noprof+0xad/0xf0 [ 326.514425][ C1] ? do_arpt_get_ctl+0x698/0x9b0 [ 326.519359][ C1] alloc_pages_noprof+0x131/0x390 [ 326.524380][ C1] get_free_pages_noprof+0x10/0xb0 [ 326.529485][ C1] __kasan_populate_vmalloc+0xa0/0x210 [ 326.534943][ C1] alloc_vmap_area+0x935/0x2a00 [ 326.539795][ C1] ? __pfx_alloc_vmap_area+0x10/0x10 [ 326.545079][ C1] __get_vm_area_node+0x1ca/0x330 [ 326.550103][ C1] __vmalloc_node_range_noprof+0x213/0x1530 [ 326.555991][ C1] ? do_arpt_get_ctl+0x698/0x9b0 [ 326.560922][ C1] ? __mutex_lock+0x26a/0x1b90 [ 326.565681][ C1] ? __lock_acquire+0x4a5/0x2630 [ 326.570606][ C1] ? do_arpt_get_ctl+0x698/0x9b0 [ 326.575970][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 326.580989][ C1] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 326.587315][ C1] ? net_generic+0xea/0x2a0 [ 326.591804][ C1] ? net_generic+0xea/0x2a0 [ 326.596299][ C1] ? do_arpt_get_ctl+0x698/0x9b0 [ 326.601225][ C1] __vmalloc_node_noprof+0xad/0xf0 [ 326.606336][ C1] ? do_arpt_get_ctl+0x698/0x9b0 [ 326.611266][ C1] do_arpt_get_ctl+0x698/0x9b0 [ 326.616025][ C1] ? __pfx_do_arpt_get_ctl+0x10/0x10 [ 326.621401][ C1] ? nf_sockopt_find.isra.0+0x222/0x290 [ 326.626946][ C1] nf_getsockopt+0x7c/0xe0 [ 326.631401][ C1] ip_getsockopt+0x192/0x1e0 [ 326.635985][ C1] ? __pfx_ip_getsockopt+0x10/0x10 [ 326.641084][ C1] ? find_held_lock+0x2b/0x80 [ 326.645754][ C1] ? __might_fault+0xc5/0x140 [ 326.650421][ C1] ? __might_fault+0xc5/0x140 [ 326.655094][ C1] tcp_getsockopt+0xa1/0x110 [ 326.659676][ C1] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 326.665564][ C1] do_sock_getsockopt+0x259/0x3d0 [ 326.670585][ C1] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 326.676124][ C1] ? fd_install+0x223/0x580 [ 326.680625][ C1] __sys_getsockopt+0x148/0x260 [ 326.685472][ C1] ? __x64_sys_getsockopt+0xbd/0x160 [ 326.690748][ C1] ? rcu_is_watching+0x12/0xc0 [ 326.695501][ C1] __x64_sys_getsockopt+0xbd/0x160 [ 326.700603][ C1] ? do_syscall_64+0x94/0xf80 [ 326.705269][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 326.710462][ C1] do_syscall_64+0xc9/0xf80 [ 326.714969][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.720850][ C1] RIP: 0033:0x7fe979f9c4aa [ 326.725253][ C1] RSP: 002b:00007ffd265a7628 EFLAGS: 00000212 ORIG_RAX: 0000000000000037 [ 326.733652][ C1] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fe979f9c4aa [ 326.741617][ C1] RDX: 0000000000000061 RSI: 0000000000000000 RDI: 0000000000000003 [ 326.749577][ C1] RBP: 00007ffd265a7690 R08: 00007ffd265a763c R09: 0000000000000000 [ 326.757534][ C1] R10: 00007ffd265a7690 R11: 0000000000000212 R12: 00007ffd265a763c [ 326.765493][ C1] R13: 00007fe97a046f00 R14: 0000000000035c88 R15: 00007ffd265a7d80 [ 326.773465][ C1] [ 326.776476][ C1] rcu: rcu_preempt kthread starved for 10565 jiffies! g21141 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 326.787653][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 326.797602][ C1] rcu: RCU grace-period kthread stack dump: [ 326.803470][ C1] task:rcu_preempt state:R running task stack:28408 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 326.816950][ C1] Call Trace: [ 326.820215][ C1] [ 326.823137][ C1] ? __schedule+0xf65/0x5e10 [ 326.827716][ C1] __schedule+0xfe4/0x5e10 [ 326.832118][ C1] ? __lock_acquire+0x4a5/0x2630 [ 326.837054][ C1] ? __pfx___schedule+0x10/0x10 [ 326.841888][ C1] ? find_held_lock+0x2b/0x80 [ 326.846560][ C1] ? schedule+0x2bf/0x390 [ 326.850882][ C1] schedule+0xdd/0x390 [ 326.854936][ C1] schedule_timeout+0x127/0x280 [ 326.859784][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 326.865148][ C1] ? __pfx_process_timeout+0x10/0x10 [ 326.870433][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 326.876240][ C1] ? prepare_to_swait_event+0xdf/0x4a0 [ 326.881687][ C1] rcu_gp_fqs_loop+0x1a9/0xb00 [ 326.886440][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 326.891712][ C1] ? prepare_to_swait_event+0xdf/0x4a0 [ 326.897157][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 326.902093][ C1] ? rcu_is_watching+0x12/0xc0 [ 326.906848][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 326.912657][ C1] rcu_gp_kthread+0x21e/0x320 [ 326.917326][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 326.922511][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 326.928316][ C1] ? __kthread_parkme+0x18c/0x230 [ 326.933344][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 326.938530][ C1] kthread+0x3b3/0x730 [ 326.942589][ C1] ? __pfx_kthread+0x10/0x10 [ 326.947169][ C1] ? ret_from_fork+0x79/0xaf0 [ 326.951839][ C1] ? ret_from_fork+0x79/0xaf0 [ 326.956508][ C1] ? rcu_is_watching+0x12/0xc0 [ 326.961265][ C1] ? __pfx_kthread+0x10/0x10 [ 326.966279][ C1] ret_from_fork+0x754/0xaf0 [ 326.970858][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 326.975960][ C1] ? __switch_to+0x7b9/0x10c0 [ 326.980978][ C1] ? __pfx_kthread+0x10/0x10 [ 326.985558][ C1] ret_from_fork_asm+0x1a/0x30 [ 326.990322][ C1] [ 326.993331][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 326.999635][ C1] Sending NMI from CPU 1 to CPUs 0: [ 327.004829][ C0] NMI backtrace for cpu 0 [ 327.004843][ C0] CPU: 0 UID: 0 PID: 8112 Comm: syz.3.533 Not tainted syzkaller #0 PREEMPT(full) [ 327.004860][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 327.004867][ C0] RIP: 0010:lock_acquire+0x50/0x330 [ 327.004881][ C0] Code: 01 12 4c 89 7c 24 30 4d 89 cf 66 90 65 8b 05 bb 1c 01 12 83 f8 07 0f 87 a4 02 00 00 48 0f a3 05 46 14 d4 0e 0f 82 6f 02 00 00 <8b> 35 de 44 d4 0e 85 f6 0f 85 8a 00 00 00 48 8b 44 24 30 65 48 2b [ 327.004894][ C0] RSP: 0018:ffffc9000c2d7c28 EFLAGS: 00000202 [ 327.004905][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000001 [ 327.004913][ C0] RDX: 0000000000000000 RSI: ffffffff8bfa3520 RDI: ffffffff8def0f20 [ 327.004922][ C0] RBP: ffff88813fe5b440 R08: 0000000000000001 R09: 0000000000000000 [ 327.004929][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000001 [ 327.004937][ C0] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000000 [ 327.004944][ C0] FS: 00007f8bb1da26c0(0000) GS:ffff8881245dc000(0000) knlGS:0000000000000000 [ 327.004959][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 327.004967][ C0] CR2: 0000200000000058 CR3: 0000000074fe5000 CR4: 00000000003526f0 [ 327.004976][ C0] Call Trace: [ 327.004981][ C0] [ 327.004986][ C0] ? __pfx___might_resched+0x10/0x10 [ 327.005003][ C0] ? __might_fault+0xc5/0x140 [ 327.005017][ C0] __might_fault+0xde/0x140 [ 327.005030][ C0] ? __might_fault+0xc5/0x140 [ 327.005043][ C0] copy_siginfo_to_user+0x83/0xc0 [ 327.005063][ C0] x64_setup_rt_frame+0xa03/0xce0 [ 327.005083][ C0] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 327.005104][ C0] arch_do_signal_or_restart+0x59e/0x7a0 [ 327.005122][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 327.005143][ C0] ? __do_sys_rt_sigreturn+0x1da/0x2c0 [ 327.005164][ C0] exit_to_user_mode_loop+0x86/0x4b0 [ 327.005179][ C0] ? rcu_is_watching+0x12/0xc0 [ 327.005196][ C0] do_syscall_64+0x4fe/0xf80 [ 327.005210][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.005224][ C0] RIP: 0033:0x7f8bb0f9acb7 [ 327.005234][ C0] Code: 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 [ 327.005245][ C0] RSP: 002b:00007f8bb1da20e8 EFLAGS: 00000246 [ 327.005255][ C0] RAX: 00000000000000ca RBX: 00007f8bb1216098 RCX: 00007f8bb0f9acb9 [ 327.005263][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f8bb1216098 [ 327.005271][ C0] RBP: 00007f8bb1216090 R08: 0000000000000000 R09: 0000000000000000 [ 327.005279][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 327.005287][ C0] R13: 00007f8bb1216128 R14: 00007ffd2a3e14f0 R15: 00007ffd2a3e15d8 [ 327.005300][ C0] [ 328.224585][ T6846] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001028. ret = -ETIMEDOUT [ 328.243576][ T6846] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPIPE [ 328.255585][ T6846] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 328.266758][ T6846] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 328.651460][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 328.657776][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 328.670478][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 328.682089][ T6846] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -32 [ 328.695435][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 SYZFAIL: failed to send rpc fd=3 want=784 sent=0 n=-1 (errno 32: Broken pipe) [ 329.094160][ T8113] usb 3-1: USB disconnect, device number 14 [ 330.331402][ T367] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.446794][ T367] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.520426][ T367] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.582157][ T367] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.727840][ T367] bridge_slave_1: left allmulticast mode [ 330.738178][ T367] bridge_slave_1: left promiscuous mode [ 330.746372][ T367] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.760221][ T367] bridge_slave_0: left allmulticast mode [ 330.767498][ T367] bridge_slave_0: left promiscuous mode [ 330.773649][ T367] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.058828][ T367] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 331.072716][ T367] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 331.089201][ T367] bond0 (unregistering): Released all slaves [ 331.099598][ T367] bond1 (unregistering): Released all slaves [ 331.166731][ T367] : left promiscuous mode [ 331.444736][ T367] hsr_slave_0: left promiscuous mode [ 331.455228][ T367] hsr_slave_1: left promiscuous mode [ 331.466840][ T367] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 331.475983][ T367] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 331.485116][ T367] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 331.493357][ T367] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 331.516376][ T367] veth1_macvtap: left promiscuous mode [ 331.522381][ T367] veth0_macvtap: left promiscuous mode [ 331.826905][ T367] team0 (unregistering): Port device team_slave_1 removed [ 331.857776][ T367] team0 (unregistering): Port device team_slave_0 removed [ 332.312868][ T367] IPVS: stop unused estimator thread 0... [ 332.439633][ T367] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.493193][ T367] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.535482][ T367] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.589422][ T367] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.695650][ T367] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.764765][ T367] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.806880][ T367] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.902158][ T367] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.046125][ T367] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.119416][ T367] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.179005][ T367] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.235312][ T367] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.361629][ T367] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.445581][ T367] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.532141][ T367] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.618947][ T367] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.780529][ T367] bridge_slave_1: left allmulticast mode [ 333.787018][ T367] bridge_slave_1: left promiscuous mode [ 333.793408][ T367] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.804556][ T367] bridge_slave_0: left allmulticast mode [ 333.813048][ T367] bridge_slave_0: left promiscuous mode [ 333.820023][ T367] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.830629][ T367] gretap0: left allmulticast mode [ 333.836357][ T367] gretap0: left promiscuous mode [ 333.842213][ T367] bridge0: port 3(gretap0) entered disabled state [ 333.850277][ T367] bridge_slave_1: left allmulticast mode [ 333.857933][ T367] bridge_slave_1: left promiscuous mode [ 333.864008][ T367] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.873748][ T367] bridge_slave_0: left allmulticast mode [ 333.879387][ T367] bridge_slave_0: left promiscuous mode [ 333.885459][ T367] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.896840][ T367] bridge_slave_1: left allmulticast mode [ 333.902617][ T367] bridge_slave_1: left promiscuous mode [ 333.910078][ T367] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.926390][ T367] bridge_slave_0: left allmulticast mode [ 333.933600][ T367] bridge_slave_0: left promiscuous mode [ 333.939314][ T367] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.955870][ T367] bridge_slave_1: left allmulticast mode [ 333.961630][ T367] bridge_slave_1: left promiscuous mode [ 333.967324][ T367] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.976582][ T367] bridge_slave_0: left allmulticast mode [ 333.982300][ T367] bridge_slave_0: left promiscuous mode [ 333.987984][ T367] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.209941][ T367] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 334.221157][ T367] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 334.230452][ T367] bond0 (unregistering): Released all slaves [ 334.372399][ T367] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 334.382574][ T367] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 334.392955][ T367] bond0 (unregistering): Released all slaves [ 334.447396][ T367] bond1 (unregistering): Released all slaves [ 334.612936][ T367] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 334.622845][ T367] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 334.632320][ T367] bond0 (unregistering): Released all slaves [ 334.771050][ T367] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 334.781722][ T367] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 334.791568][ T367] bond0 (unregistering): (slave team0): Releasing backup interface [ 334.800354][ T367] bond0 (unregistering): Released all slaves [ 334.905320][ T367] : left promiscuous mode [ 334.934429][ T367] : left promiscuous mode [ 335.012229][ T367] : left promiscuous mode [ 335.084511][ T367] : left promiscuous mode [ 335.177057][ T367] tipc: Left network mode [ 335.832822][ T367] hsr_slave_0: left promiscuous mode [ 335.838642][ T367] hsr_slave_1: left promiscuous mode [ 335.844859][ T367] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 335.857092][ T367] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 335.871568][ T367] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 335.878957][ T367] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 335.892090][ T367] hsr_slave_0: left promiscuous mode [ 335.897995][ T367] hsr_slave_1: left promiscuous mode [ 335.904282][ T367] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 335.912593][ T367] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 335.920366][ T367] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 335.928234][ T367] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 335.939948][ T367] hsr_slave_0: left promiscuous mode [ 335.946903][ T367] hsr_slave_1: left promiscuous mode [ 335.952987][ T367] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 335.960365][ T367] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 335.968978][ T367] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 335.981802][ T367] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 335.995047][ T367] hsr_slave_0: left promiscuous mode [ 336.002005][ T367] hsr_slave_1: left promiscuous mode [ 336.007948][ T367] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 336.015615][ T367] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 336.023284][ T367] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 336.030652][ T367] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 336.080544][ T367] veth1_macvtap: left promiscuous mode [ 336.086173][ T367] veth0_macvtap: left promiscuous mode [ 336.091818][ T367] veth1_vlan: left promiscuous mode [ 336.097214][ T367] veth0_vlan: left promiscuous mode [ 336.103749][ T367] veth1_macvtap: left promiscuous mode [ 336.110043][ T367] veth0_macvtap: left promiscuous mode [ 336.115684][ T367] veth1_vlan: left promiscuous mode [ 336.120968][ T367] veth0_vlan: left promiscuous mode