last executing test programs: 15.104412105s ago: executing program 2 (id=640): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f0000000040)}) setreuid(0xffffffffffffffff, 0xffffffffffffffff) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400000000000900020073797a30000000001400078008000840000028590800064000000000050005000000400005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4000080) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4006, &(0x7f0000000000)=0x4, 0x5, 0x2) r3 = syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000100)=ANY=[@ANYBLOB="1201010200000040b421810040000102030109026e0003017f0006080b0002012230230904000000010130000a2401100a00090000000904014cbcda4430000904010101010230000905010960"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$uac3(r3, 0x0, 0x0) syz_usb_control_io$uac3(r3, 0x0, 0x0) 11.632979952s ago: executing program 2 (id=652): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r1 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) sched_getaffinity(r1, 0x0, 0x0) timer_settime(r2, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x6}, @hci_rp_read_voice_setting={{0x5}, {0x0, 0xaa5}}}}, 0x9) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x100, {0x0, 0x0, 0x0, 0x0, {0xe, 0x1}}}, 0x24}}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x1, 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB="611085000000000095", @ANYRESDEC], &(0x7f0000000200)='GPL\x00'}, 0x94) ioctl$SG_IO(r0, 0x2285, &(0x7f00000033c0)={0x53, 0xfffffffffffffffc, 0x6, 0x68, @buffer={0x0, 0x44, &(0x7f00000000c0)=""/68}, &(0x7f0000000040)="1c3513000000", 0x0, 0x12000, 0x0, 0x0, 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000b80)=ANY=[@ANYBLOB="380000000b1401"], 0x38}, 0x1, 0x0, 0x0, 0x20040001}, 0x100) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELTABLE={0x2c, 0x2, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = syz_usb_connect(0x0, 0x32, &(0x7f0000000140)=ANY=[@ANYRESDEC, @ANYBLOB="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", @ANYRESHEX=r0, @ANYRES8=r0, @ANYBLOB="f7a9b22bfbfc81f2ed1dc43d21798f46768d4a901a8039d27a0b2fb312e22fb2eda030c598857baf5494dcfc6c2d5bee97c216328368fdfeaf09c65a4ea0cc7bb1f296eea8e9c043dfcde1bdec7d3a35d6822def91e87457b5e6ad38b7d784b928797d394afa67d25db0c4db584fe795798c8062edff504ef7170c6067ee5f7ca98e", @ANYRES64], 0x0) syz_usb_ep_read(r5, 0x2, 0x0, 0x0) 10.858862613s ago: executing program 1 (id=657): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f0000000040)) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018030000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00000000000000000000000900000000000000000000000900000000000000000000000a02"], 0x0, 0x96}, 0x28) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x4, 0x0, 0x1000}]}}, 0x0, 0x26}, 0x28) socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r2) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2, 0x80805, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2, 0x0, 0x0, 0x1d6225b, 0x0, 0x0, 0x14}, 0x90) 9.881484981s ago: executing program 1 (id=660): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x1a5}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0xf4000000}) 8.525172915s ago: executing program 1 (id=662): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f0000000040)}) setreuid(0xffffffffffffffff, 0xffffffffffffffff) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400000000000900020073797a30000000001400078008000840000028590800064000000000050005000000400005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4000080) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4006, &(0x7f0000000000)=0x4, 0x5, 0x2) r3 = syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000100)=ANY=[@ANYBLOB="1201010200000040b421810040000102030109026e0003017f0006080b0002012230230904000000010130000a2401100a00090000000904014cbcda4430000904010101010230000905010960"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$uac3(r3, 0x0, 0x0) syz_usb_control_io$uac3(r3, 0x0, 0x0) 8.333319128s ago: executing program 2 (id=663): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f0000000040)}) setreuid(0xffffffffffffffff, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400000000000900020073797a30000000001400078008000840000028590800064000000000050005000000400005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) 8.112272981s ago: executing program 4 (id=664): inotify_init1(0x80000) setxattr$incfs_id(&(0x7f0000000080)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000000c0), 0x0, 0x0, 0x1) r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000480)={0x8, {0x1, 0x7, 0x0, 0x9}}) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r1, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x803}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x77359400}}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) io_uring_setup(0x7715, &(0x7f0000000140)={0x0, 0x405b, 0x4, 0x3, 0x8e}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8b19, &(0x7f0000000140)={'wlan1\x00', @random="0100eb00"}) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffff9]}, 0x0, 0x8) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) ioctl$SNDCTL_DSP_STEREO(r1, 0xc0045003, &(0x7f0000000140)=0x1) 8.077652593s ago: executing program 3 (id=665): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socket$inet6(0xa, 0x80002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x2d, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@remote, @broadcast, 0xb, 0xfffe}}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000040)={0x2}) 8.076723032s ago: executing program 2 (id=666): sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/class/net/bond0/bonding/slaves\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)='-veth0', 0x6) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='4', 0x1}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) 7.071976739s ago: executing program 3 (id=668): socket$inet_icmp_raw(0x2, 0x3, 0x1) gettid() r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{r0, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000200)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$9p_rdma(&(0x7f00000000c0), &(0x7f0000000140)='.\x00', &(0x7f00000001c0), 0x10000, &(0x7f0000000440)={'trans=rdma,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@rq={'rq', 0x3d, 0x9}}]}}) bpf$PROG_LOAD(0x5, &(0x7f0000001780)={0x6, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000010000000000000000000000711814000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r3}, 0xc) rt_sigtimedwait(&(0x7f0000000000)={[0xde7f]}, 0x0, 0x0, 0x8) syz_open_dev$usbfs(0x0, 0xf, 0x101301) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102384, 0x18ff0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x5, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000074f6967d00000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.82106613s ago: executing program 4 (id=670): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000000)) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010058c6000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000540)={0x0, 0x64, &(0x7f0000000140)={&(0x7f0000000080)={0x28, 0x25, 0x1, 0x0, 0x0, {0xf, 0x0, 0x300}, [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@local}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="08000000040000000400000006"], 0x48) socket(0x2, 0x80805, 0x0) r4 = syz_open_dev$video(&(0x7f0000000040), 0x7, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r4, 0xc0405665, &(0x7f0000000080)={0x0, 0x2}) 6.813554911s ago: executing program 2 (id=671): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/class/net/bond0/bonding/slaves\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)='-veth0', 0x6) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='4', 0x1}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) 5.906282845s ago: executing program 4 (id=672): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x100, 0xa0ca, 0x80000004, 0x4f, 0x0, 0x9, 0xe, 0xd, 0x31e}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[], 0x90}}, 0x4000) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="680000000000000017010000020000004f000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16000000000018000000000000001701000004000000060000000000000036b01a06bfa0450a95c85e192c3e04beaa663010259f815dcdb6cf3c57b707d8"], 0x80, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e20284", 0x4f}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc", 0x2a}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d7", 0x3b}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cb", 0xa0}], 0x4, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 5.584889124s ago: executing program 0 (id=674): prlimit64(0x0, 0xe, &(0x7f0000000240)={0xd1e2, 0x47fffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000001000)=@abs={0x0, 0x0, 0xce27}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r4, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x1006) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000040)="308201d43082017ba00302010202142eea648d7f17e62e9e5869c887c68e1bd0f86fde300a06082a8648ce3d040302303a3138303606035504030c2f4360727469666963617465207665084f6d9cc37003576f6e2045434453412073656c662d74657374696e67206b65793020170d3234303431333232313632365a180f32020034303332303232313632365a303a3138303606035504030c2f43657274696669636174652076657269666963617428a2e0861e1ae90d413273656c662d74657374696e67206b65793059301306072a8648ce3d020106082a8648ce3d0a01070342000407e56b51affc1941", 0xec, 0xfffffffffffffffd) ioctl$sock_SIOCGIFINDEX(r3, 0x89a0, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, 0x0, 0x0) accept(r5, 0x0, 0x0) 4.293705533s ago: executing program 1 (id=675): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24000084) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x3ffd, 0xfffffdfc, {0x0, 0x0, 0x0, r12, {0x4}, {0xffff}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0x81a}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4005c}, 0x20000000) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff, 0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) 3.921408935s ago: executing program 4 (id=676): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0xa0}, 0x80) pipe2(0x0, 0x0) syz_ublk_add_dev(r5, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe, 0x0, 0x0, 0x10}}}, &(0x7f0000000300)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000040)={0x0, 0xc1, 0x10, 0xfffffffd, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x42, 0x3, 0x91, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 3.905008117s ago: executing program 0 (id=677): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x4, 0x2, 0x7}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xa0}}, 0x0) getpeername$netlink(r0, &(0x7f0000000340), &(0x7f0000000540)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 3.815188974s ago: executing program 3 (id=678): syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) socket$kcm(0x10, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = mq_open(&(0x7f0000000080)='\xef\x00', 0x40, 0x0, 0x0) mq_getsetattr(r3, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000002f80)={0x0, 0xffe4, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x70, 0x30, 0x9, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x8}, @TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PTYPE={0x6, 0xa}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0x3b}}}}]}]}, 0x70}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x70bd29, 0x25dfdbfd, {0x2, 0x1f, 0x51, 0xfe, r2}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}}, 0x0) getsockname(r0, &(0x7f00000003c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000440)=0x80) 3.522836924s ago: executing program 0 (id=679): socket$can_raw(0x1d, 0x3, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x2, 0xfffff010}, {0x20, 0x0, 0x20, 0xfffff034}, {0x6}]}, 0x10) 3.511976266s ago: executing program 1 (id=680): socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000100)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x48, 0x0) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x48840, 0x0) socket(0xa, 0x80805, 0x0) userfaultfd(0x80801) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$inet6(0xa, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, 0x0, &(0x7f0000000100)=r1}, 0x20) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x6b82}], 0x2) 3.490924557s ago: executing program 4 (id=681): close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r6, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1, 0x0, 0x0, 0x6000}, 0x20) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) 3.388853693s ago: executing program 0 (id=682): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000006c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$sysctl(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x0, 0x2}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r4, &(0x7f0000000040)=[{&(0x7f0000000180)=""/88, 0x58}], 0x1, 0x3c, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) 2.835060211s ago: executing program 0 (id=683): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x90}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000880)={0x0, 0xfffffffe, 0x0, 0x4, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x8000, 0x3, 0xbaa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8684, 0x2, 0x40040001, 0x334, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xec4b, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 2.834688489s ago: executing program 1 (id=684): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x100, 0x70bd2c, 0x25dfdbfb, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@multicast2, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x2000000000000, 0x3c, 0xfffffffffff7fffd, 0x50}, {0x5, 0x0, 0x100000001, 0x3}, 0x6, 0x40000000, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e"], 0xb8}}, 0x20004000) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0x1b02, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x6, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0x0, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x589541, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r4, 0xc008ae05, &(0x7f0000000100)={0x6, 0x0, [{0x80000000, 0xfffff479, 0x2, 0x5, 0x2, 0x4, 0xff}, {0x8, 0x0, 0x1, 0x3, 0x7, 0x4, 0x11}, {0x0, 0xc, 0x5, 0xffff, 0x5, 0x80, 0x3}, {0x80000001, 0x4, 0x2, 0x200, 0xd4df, 0x4f1e, 0x81}, {0x80000001, 0x6, 0x7, 0x7, 0x57, 0x2, 0x7}, {0xc0000001, 0x5, 0x2, 0x8, 0x3, 0x8, 0x350}]}) r5 = syz_open_procfs(0x0, &(0x7f0000000300)='wchan\x00') r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x20, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r6, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x5, 0x600, 0x1}}, 0x20) readv(r5, &(0x7f00000020c0)=[{&(0x7f0000001ec0)=""/110, 0x6e}], 0x1) syz_genetlink_get_family_id$wireguard(0x0, r5) 2.834329824s ago: executing program 3 (id=685): openat$ppp(0xffffffffffffff9c, 0x0, 0x161042, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x2f}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4, 0x0, r5}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6704, 0x40, 0x1000002, 0xa2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5cc7, 0x8000, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x8000, 0x40040000, 0x3bb}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x1, 0x1, 0x2f0, 0x0, r5}}], 0x1, 0x0, 0x0) 2.132773434s ago: executing program 4 (id=686): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/class/net/bond0/bonding/slaves\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)='-veth0', 0x6) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='4', 0x1}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) 1.944283218s ago: executing program 3 (id=687): prlimit64(0x0, 0xe, &(0x7f0000000240)={0xd1e2, 0x47fffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000001000)=@abs={0x0, 0x0, 0xce27}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r4, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x1006) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000040)="308201d43082017ba00302010202142eea648d7f17e62e9e5869c887c68e1bd0f86fde300a06082a8648ce3d040302303a3138303606035504030c2f4360727469666963617465207665084f6d9cc37003576f6e2045434453412073656c662d74657374696e67206b65793020170d3234303431333232313632365a180f32020034303332303232313632365a303a3138303606035504030c2f43657274696669636174652076657269666963617428a2e0861e1ae90d413273656c662d74657374696e67206b65793059301306072a8648ce3d020106082a8648ce3d0a01070342000407e56b51affc1941", 0xec, 0xfffffffffffffffd) ioctl$sock_SIOCGIFINDEX(r3, 0x89a0, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, 0x0, 0x0) accept(r5, 0x0, 0x0) 237.054398ms ago: executing program 3 (id=688): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00000003c0)="e3402a2059ded7eb80f67f19ae87aa2c8d302d927c903e95f61931c2ed91cb8059b181b0a6e52fa27a11", 0x2a) socket$packet(0x11, 0x2, 0x300) r1 = openat$vhost_vsock(0xffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_VDPA_SET_CONFIG(r1, 0x4008af74, &(0x7f00000000c0)=ANY=[@ANYBLOB="85090000c0000000cd52600aabcd6f79eb3f7b9d38d57f291fa2e55ef1f75a7e080592d3f8848603547fca68a8cd9dd5b01db0f518219a73ca8eb938596a716502473a9f7e9960372671bbcae02a3229e5c021b8caef62ce72a1fcabec1d1970f6116e724f8833f17ed603b4afa36fa9c39c8085cebddeac28787c24a13b430082f1ad3ea02dd27d50eca28d0985ae65c37c9e37d0b8f76f97eab47b1197efa27cc8b2090025b0abad4ced64cf3e91b20f9b7040260245b6"]) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000080)=@req={0x800000, 0x1, 0x1000, 0x800}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040081}, 0x4000) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f00000001c0)=@generic={0x3, 0x1, 0x256b}) mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3, 0x11, r2, 0x0) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0xa8242) r5 = fcntl$dupfd(r4, 0x406, r4) r6 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x1608a2) write(r6, 0x0, 0x0) write$tun(r5, &(0x7f0000000400)=ANY=[], 0xa2) ioctl$SG_GET_PACK_ID(r5, 0x227c, &(0x7f0000000100)) 218.174285ms ago: executing program 2 (id=689): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000016c0)={'wlan0\x00', 0x0}) r3 = syz_usb_connect(0x2, 0x68, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010203010902240001000000000904fb00026c5d650009050402100000fa000905820240"], 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r4, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(r4, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) r6 = openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x121040, 0x0) syz_usb_control_io(r3, &(0x7f0000000340)={0x2c, &(0x7f0000000080)={0x20, 0xf, 0x37, {0x37, 0x4, "2f65e8e051e4a35f5325534d34b38137b79a937ce252c90504815b205c01dffb00b0c3767754c24ddedc62a1f56c55effc24e547a6"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1404}}, &(0x7f0000000240)={0x0, 0xf, 0x3e, {0x5, 0xf, 0x3e, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xb, 0x3, 0x1, 0x407}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "d437ae54198389aa70c7ab10a95049b9"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x6c, 0xf, 0x1}, @wireless={0xb, 0x10, 0x1, 0xc, 0xb0, 0x3, 0x8, 0x160, 0x9}, @ptm_cap={0x3}]}}, &(0x7f00000002c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0xf5, 0xb, 0x6, 0x1, "ab03451d", "6ba21ef8"}}, &(0x7f0000000300)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xf, 0x8, 0x6, 0x4, 0x6, 0x2, 0x9}}}, &(0x7f0000000900)={0x84, &(0x7f0000000440)={0x0, 0x0, 0x53, "128ff4ad9667983923c2bc7fb3089952ecf2baf08f1f69312d26f9fc49ef69b295baaa4d43c9a89ce7a1480d42eb01a8437ae26384d81e506beca5608d3b5017f552cb6badeb50e446f641ed090061bbd0e68b"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x45}, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000100)={0x20, 0x0, 0x4, {0x1260, 0x4}}, &(0x7f0000000640)={0x40, 0x7, 0x2, 0x9}, &(0x7f0000000680)={0x40, 0x9, 0x1, 0xd}, &(0x7f00000006c0)={0x40, 0xb, 0x2, "1b81"}, &(0x7f0000000700)={0x40, 0xf, 0x2, 0x200}, &(0x7f0000000740)={0x40, 0x13, 0x6, @local}, &(0x7f0000000780)={0x40, 0x17, 0x6}, &(0x7f00000007c0)={0x40, 0x19, 0x2, "85f4"}, &(0x7f0000000800)={0x40, 0x1a, 0x2, 0xc}, &(0x7f0000000840)={0x40, 0x1c, 0x1, 0x41}, &(0x7f0000000880)={0x40, 0x1e, 0x1, 0x5}, &(0x7f00000008c0)={0x40, 0x21, 0x1, 0xa}}) ioctl$SOUND_MIXER_READ_VOLUME(r6, 0x40086603, &(0x7f0000000040)) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000540)={0x4c, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xe}, @broadcast, @device_a, @initial, {0x3, 0x9}}, 0xfffd, @val={0x8c, 0x10, {0x283, "726712ea1b02", @short="acf28009ddef7a20"}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040080}, 0x28008004) 0s ago: executing program 0 (id=690): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x4) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r3 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) write$FUSE_CREATE_OPEN(r3, 0x0, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x7f03) kernel console output (not intermixed with test programs): t=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 87.206268][ T30] audit: type=1400 audit(1787192133.270:234): avc: denied { bind } for pid=5859 comm="syz.4.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 87.228077][ T30] audit: type=1400 audit(1787192133.280:235): avc: denied { setopt } for pid=5859 comm="syz.4.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 87.254925][ T30] audit: type=1400 audit(1787192133.280:236): avc: denied { write } for pid=5859 comm="syz.4.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 87.600048][ T5878] oom_control is deprecated and will be removed. Please report your usecase to linux-mm-@kvack.org if you depend on this functionality. [ 89.047109][ T30] audit: type=1400 audit(1787192135.250:237): avc: denied { name_bind } for pid=5887 comm="syz.4.24" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 89.069976][ T30] audit: type=1400 audit(1787192135.250:238): avc: denied { node_bind } for pid=5887 comm="syz.4.24" saddr=224.0.0.1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 91.750710][ T5923] Zero length message leads to an empty skb [ 92.300449][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 92.522899][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 92.537927][ T10] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 92.941576][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 93.069673][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 93.429526][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 93.452864][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 93.484055][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 93.542608][ T10] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 93.559374][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 93.559390][ T30] audit: type=1400 audit(1787192139.760:245): avc: denied { create } for pid=5934 comm="syz.0.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 93.589417][ T10] usb 3-1: Manufacturer: syz [ 93.901289][ T10] usb 3-1: config 0 descriptor?? [ 93.918601][ T30] audit: type=1400 audit(1787192140.120:246): avc: denied { mmap_zero } for pid=5934 comm="syz.0.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 94.049750][ T30] audit: type=1400 audit(1787192140.120:247): avc: denied { allowed } for pid=5939 comm="syz.3.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 94.371484][ T30] audit: type=1400 audit(1787192140.140:248): avc: denied { map } for pid=5939 comm="syz.3.37" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=9541 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 94.404866][ T5944] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 94.411563][ T5944] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 94.437877][ T5952] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(10) [ 94.444514][ T5952] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 94.465145][ T5949] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(7) [ 94.465164][ T5944] vhci_hcd vhci_hcd.0: Device attached [ 94.472013][ T5949] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 94.491019][ T30] audit: type=1400 audit(1787192140.140:249): avc: denied { read write } for pid=5939 comm="syz.3.37" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=9541 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 94.546731][ T5957] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(13) [ 94.553355][ T5957] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 94.587056][ T30] audit: type=1400 audit(1787192140.240:250): avc: denied { map } for pid=5934 comm="syz.0.35" path="socket:[8953]" dev="sockfs" ino=8953 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 94.596413][ T5949] vhci_hcd vhci_hcd.0: Device attached [ 94.652876][ T10] rc_core: IR keymap rc-hauppauge not found [ 94.660440][ T10] Registered IR keymap rc-empty [ 94.666583][ T5961] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(16) [ 94.671923][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 94.673400][ T5961] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 94.690013][ T5957] vhci_hcd vhci_hcd.0: Device attached [ 94.700520][ T5952] vhci_hcd vhci_hcd.0: Device attached [ 94.712908][ T5715] usb 41-1: new high-speed USB device number 2 using vhci_hcd [ 94.720514][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 94.737585][ T30] audit: type=1400 audit(1787192140.940:251): avc: denied { append } for pid=5963 comm="syz.0.39" name="video7" dev="devtmpfs" ino=950 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 94.741802][ T5961] vhci_hcd vhci_hcd.0: Device attached [ 94.777184][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 94.789126][ T5965] vhci_hcd vhci_hcd.0: pdev(4) rhport(5) sockfd(6) [ 94.795620][ T5965] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 94.811774][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input5 [ 94.824754][ T30] audit: type=1400 audit(1787192141.010:252): avc: denied { create } for pid=5963 comm="syz.0.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 94.856589][ T5965] vhci_hcd vhci_hcd.0: Device attached [ 94.894522][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 94.918312][ T30] audit: type=1400 audit(1787192141.120:253): avc: denied { sys_admin } for pid=5963 comm="syz.0.39" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 94.942648][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 94.975227][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 95.013452][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 95.053778][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 95.076961][ T5973] netlink: 20 bytes leftover after parsing attributes in process `syz.3.40'. [ 95.095312][ T5944] vhci_hcd vhci_hcd.0: pdev(4) rhport(6) sockfd(9) [ 95.102298][ T5944] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 95.114907][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 95.131095][ T30] audit: type=1400 audit(1787192141.320:254): avc: denied { unmount } for pid=5963 comm="syz.0.39" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 95.159856][ T5949] vhci_hcd vhci_hcd.0: pdev(4) rhport(7) sockfd(19) [ 95.166531][ T5949] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 95.183540][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 95.194549][ T5944] vhci_hcd vhci_hcd.0: Device attached [ 95.213684][ T5949] vhci_hcd vhci_hcd.0: Device attached [ 95.222924][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 95.243761][ T5976] vhci_hcd: connection closed [ 95.244175][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 95.246388][ T5958] vhci_hcd: connection closed [ 95.248933][ T5962] vhci_hcd: connection closed [ 95.249463][ T5967] vhci_hcd: connection closed [ 95.269511][ T5955] vhci_hcd: connection closed [ 95.272950][ T5950] vhci_hcd: connection reset by peer [ 95.284255][ T5954] vhci_hcd: connection closed [ 95.286791][ T5974] vhci_hcd: connection closed [ 95.291049][ T76] vhci_hcd vhci_hcd.4: stop threads [ 95.395540][ T76] vhci_hcd vhci_hcd.4: release socket [ 95.453765][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 96.649970][ T10] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 96.664521][ T10] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 96.719112][ T76] vhci_hcd vhci_hcd.4: disconnect device [ 96.736468][ T76] vhci_hcd vhci_hcd.4: stop threads [ 96.752241][ T76] vhci_hcd vhci_hcd.4: release socket [ 96.757411][ T10] usb 3-1: USB disconnect, device number 2 [ 96.770855][ T76] vhci_hcd vhci_hcd.4: disconnect device [ 96.796208][ T76] vhci_hcd vhci_hcd.4: stop threads [ 96.832462][ T76] vhci_hcd vhci_hcd.4: release socket [ 96.864075][ T76] vhci_hcd vhci_hcd.4: disconnect device [ 96.876664][ T76] vhci_hcd vhci_hcd.4: stop threads [ 96.887082][ T76] vhci_hcd vhci_hcd.4: release socket [ 97.039314][ T76] vhci_hcd vhci_hcd.4: disconnect device [ 97.045929][ T76] vhci_hcd vhci_hcd.4: stop threads [ 97.051282][ T76] vhci_hcd vhci_hcd.4: release socket [ 97.058929][ T76] vhci_hcd vhci_hcd.4: disconnect device [ 97.073433][ T76] vhci_hcd vhci_hcd.4: stop threads [ 97.084382][ T5988] netlink: 8 bytes leftover after parsing attributes in process `syz.0.42'. [ 97.085060][ T76] vhci_hcd vhci_hcd.4: release socket [ 97.616065][ T76] vhci_hcd vhci_hcd.4: disconnect device [ 97.639013][ T76] vhci_hcd vhci_hcd.4: stop threads [ 97.654316][ T76] vhci_hcd vhci_hcd.4: release socket [ 97.666468][ T76] vhci_hcd vhci_hcd.4: disconnect device [ 97.673744][ T76] vhci_hcd vhci_hcd.4: stop threads [ 97.679035][ T76] vhci_hcd vhci_hcd.4: release socket [ 97.684635][ T76] vhci_hcd vhci_hcd.4: disconnect device [ 99.207588][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 99.207604][ T30] audit: type=1400 audit(1787192145.410:260): avc: denied { read write } for pid=5998 comm="syz.4.46" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 99.401053][ T30] audit: type=1400 audit(1787192145.440:261): avc: denied { open } for pid=5998 comm="syz.4.46" path="/dev/dri/renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 99.693730][ T30] audit: type=1400 audit(1787192145.530:262): avc: denied { ioctl } for pid=5999 comm="syz.2.47" path="socket:[9085]" dev="sockfs" ino=9085 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 99.746967][ T30] audit: type=1400 audit(1787192145.580:263): avc: denied { write } for pid=5999 comm="syz.2.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 99.806014][ T5715] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 100.195574][ T30] audit: type=1400 audit(1787192145.720:264): avc: denied { sqpoll } for pid=6006 comm="syz.1.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 100.284197][ T30] audit: type=1400 audit(1787192145.790:265): avc: denied { unmount } for pid=5607 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 100.345951][ T30] audit: type=1400 audit(1787192145.970:266): avc: denied { create } for pid=6006 comm="syz.1.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 100.453183][ T30] audit: type=1400 audit(1787192145.970:267): avc: denied { setopt } for pid=6006 comm="syz.1.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 100.503642][ T6017] netlink: 12 bytes leftover after parsing attributes in process `syz.4.51'. [ 101.348059][ T30] audit: type=1400 audit(1787192147.550:268): avc: denied { create } for pid=6024 comm="syz.0.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 101.548321][ T30] audit: type=1400 audit(1787192147.750:269): avc: denied { create } for pid=6024 comm="syz.0.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 102.104265][ T9] usb usb42-port8: attempt power cycle [ 103.057883][ T9] usb usb42-port8: unable to enumerate USB device [ 103.977508][ T6051] IPv6: NLM_F_CREATE should be specified when creating new route [ 104.790786][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 104.790802][ T30] audit: type=1400 audit(1787192150.990:278): avc: denied { create } for pid=6053 comm="syz.1.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 104.831445][ T30] audit: type=1400 audit(1787192151.030:279): avc: denied { bind } for pid=6053 comm="syz.1.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 106.207577][ T6027] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.219479][ T6027] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.556358][ T6032] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 107.172920][ T5715] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 109.989262][ T30] audit: type=1400 audit(1787192156.190:280): avc: denied { setopt } for pid=6091 comm="syz.2.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 110.090309][ T6099] netlink: 4 bytes leftover after parsing attributes in process `syz.1.70'. [ 110.127440][ T30] audit: type=1400 audit(1787192156.330:281): avc: denied { write } for pid=6097 comm="syz.4.73" name="001" dev="devtmpfs" ino=741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 110.133122][ T5715] usb 5-1: device not accepting address 2, error -71 [ 110.185394][ T6101] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 110.387069][ T30] audit: type=1400 audit(1787192156.420:282): avc: denied { create } for pid=6097 comm="syz.4.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 110.953319][ T30] audit: type=1400 audit(1787192157.150:283): avc: denied { firmware_load } for pid=6085 comm="syz.1.70" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 110.990050][ T6099] faux_driver regulatory: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 111.014771][ T6099] faux_driver regulatory: Direct firmware load for regulatory.db.p7s failed with error -4 [ 111.023978][ T30] audit: type=1800 audit(1787192157.190:284): pid=6099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t op=collect_data cause=failed comm="syz.1.70" name="regulatory.db.p7s" dev="sda1" ino=449 res=0 errno=0 [ 111.162643][ T30] audit: type=1400 audit(1787192157.350:285): avc: denied { create } for pid=6103 comm="syz.3.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 111.181541][ T6099] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db.p7s [ 111.275609][ T30] audit: type=1400 audit(1787192157.380:286): avc: denied { firmware_load } for pid=6085 comm="syz.1.70" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 111.365938][ T30] audit: type=1400 audit(1787192157.560:287): avc: denied { write } for pid=6122 comm="syz.2.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 111.378421][ T6099] syz.1.70 (6099) used greatest stack depth: 19072 bytes left [ 111.521081][ T30] audit: type=1400 audit(1787192157.560:288): avc: denied { read } for pid=6122 comm="syz.2.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 111.640618][ T30] audit: type=1400 audit(1787192157.830:289): avc: denied { shutdown } for pid=6124 comm="syz.0.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 115.258827][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 115.258857][ T30] audit: type=1400 audit(1787192161.460:305): avc: denied { unmount } for pid=5607 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 117.612930][ T30] audit: type=1400 audit(1787192163.810:306): avc: denied { mount } for pid=6157 comm="syz.3.88" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 118.181726][ T30] audit: type=1400 audit(1787192163.920:307): avc: denied { ioctl } for pid=6162 comm="syz.4.87" path="socket:[9822]" dev="sockfs" ino=9822 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 118.220494][ T30] audit: type=1400 audit(1787192163.920:308): avc: denied { read } for pid=6162 comm="syz.4.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 118.898988][ T6177] program syz.4.93 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 119.606887][ T30] audit: type=1400 audit(1787192165.810:309): avc: denied { unmount } for pid=5597 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 120.338886][ T6185] usb usb7: check_ctrlrecip: process 6185 (syz.1.95) requesting ep 01 but needs 81 [ 121.140162][ T6198] netlink: 20 bytes leftover after parsing attributes in process `syz.1.98'. [ 121.202120][ T30] audit: type=1400 audit(1787192167.400:310): avc: denied { unmount } for pid=5598 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 123.354415][ T30] audit: type=1400 audit(1787192169.560:311): avc: denied { prog_load } for pid=6212 comm="syz.3.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 123.449795][ T30] audit: type=1400 audit(1787192169.650:312): avc: denied { map_create } for pid=6212 comm="syz.3.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 123.697221][ T6218] netlink: 'syz.2.106': attribute type 2 has an invalid length. [ 123.723682][ T6218] netlink: 40 bytes leftover after parsing attributes in process `syz.2.106'. [ 123.783102][ T6218] : entered promiscuous mode [ 124.263303][ T30] audit: type=1400 audit(1787192170.470:313): avc: denied { setopt } for pid=6228 comm="syz.4.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 124.300938][ T6231] netlink: 'syz.4.104': attribute type 1 has an invalid length. [ 124.872041][ T6239] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6239 comm=syz.4.104 [ 125.389930][ T30] audit: type=1400 audit(1787192171.590:314): avc: denied { write } for pid=6247 comm="syz.1.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 125.452560][ T30] audit: type=1400 audit(1787192171.650:315): avc: denied { ioctl } for pid=6247 comm="syz.1.112" path="socket:[9915]" dev="sockfs" ino=9915 ioctlcmd=0x8940 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 126.355461][ T30] audit: type=1400 audit(1787192171.960:316): avc: denied { write } for pid=6243 comm="syz.4.110" path="socket:[10659]" dev="sockfs" ino=10659 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 126.490647][ T6258] netlink: 28 bytes leftover after parsing attributes in process `syz.4.114'. [ 126.552186][ T30] audit: type=1400 audit(1787192172.750:317): avc: denied { create } for pid=6260 comm="syz.0.115" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 126.615918][ T30] audit: type=1400 audit(1787192172.800:318): avc: denied { ioctl } for pid=6260 comm="syz.0.115" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=10674 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 126.707811][ T30] audit: type=1400 audit(1787192172.880:319): avc: denied { ioctl } for pid=6257 comm="syz.4.114" path="socket:[10679]" dev="sockfs" ino=10679 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 126.926187][ T30] audit: type=1400 audit(1787192173.130:320): avc: denied { create } for pid=6278 comm="syz.4.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 126.996360][ T30] audit: type=1400 audit(1787192173.140:321): avc: denied { connect } for pid=6278 comm="syz.4.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 127.216526][ T942] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 127.276304][ T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 127.399289][ T942] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 127.428853][ T942] usb 3-1: config 0 has no interfaces? [ 127.439833][ T942] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.484975][ T942] usb 3-1: config 0 descriptor?? [ 127.504610][ T10] usb 5-1: New USB device found, idVendor=9710, idProduct=7840, bcdDevice= 0.00 [ 127.561949][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.588802][ T10] usb 5-1: Product: syz [ 127.607238][ T10] usb 5-1: Manufacturer: syz [ 127.629078][ T10] usb 5-1: SerialNumber: syz [ 127.746773][ T6280] Bluetooth: MGMT ver 1.23 [ 127.840054][ T942] usb 3-1: USB disconnect, device number 3 [ 127.869872][ T10] mos7840 5-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected [ 127.946887][ T30] audit: type=1400 audit(1787192174.140:322): avc: denied { write } for pid=6302 comm="syz.1.121" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 128.320681][ T30] audit: type=1326 audit(1787192174.400:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6312 comm="syz.3.122" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbede79e0d9 code=0x0 [ 128.358530][ T30] audit: type=1400 audit(1787192174.560:324): avc: denied { mounton } for pid=6312 comm="syz.3.122" path="/20/file1" dev="tmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 128.421110][ T30] audit: type=1400 audit(1787192174.620:325): avc: denied { name_bind } for pid=6319 comm="syz.0.124" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 128.683042][ T6279] input: syz1 as /devices/virtual/input/input6 [ 128.701504][ T6279] input: failed to attach handler leds to device input6, error: -6 [ 129.208299][ T10] mos7840 ttyUSB0: probe with driver mos7840 failed with error -71 [ 129.249062][ T10] mos7840 ttyUSB1: probe with driver mos7840 failed with error -71 [ 129.269067][ T10] mos7840 ttyUSB2: probe with driver mos7840 failed with error -71 [ 129.282607][ T10] mos7840 ttyUSB3: probe with driver mos7840 failed with error -71 [ 129.356553][ T10] usb 5-1: USB disconnect, device number 4 [ 129.485691][ T10] mos7840 5-1:1.0: device disconnected [ 131.253745][ T134] af_packet: tpacket_rcv: packet too big, clamped from 52 to 4294967280. macoff=96 [ 132.356298][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 132.356315][ T30] audit: type=1400 audit(1787192178.560:335): avc: denied { nlmsg_read } for pid=6349 comm="syz.0.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 132.390437][ T6353] netlink: 24 bytes leftover after parsing attributes in process `syz.3.134'. [ 132.531691][ T6357] IPv6: NLM_F_CREATE should be specified when creating new route [ 132.584916][ T6353] netlink: 4 bytes leftover after parsing attributes in process `syz.3.134'. [ 132.636238][ T5744] IPVS: starting estimator thread 0... [ 132.694267][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.700941][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.732851][ T6366] IPVS: using max 40 ests per chain, 96000 per kthread [ 132.872860][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 133.043993][ T9] usb 4-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 133.079958][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 133.103524][ T9] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 133.125922][ T30] audit: type=1400 audit(1787192179.330:336): avc: denied { bind } for pid=6362 comm="syz.0.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 133.156175][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.164801][ T9] usb 4-1: Product: syz [ 133.173125][ T30] audit: type=1400 audit(1787192179.360:337): avc: denied { listen } for pid=6362 comm="syz.0.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 133.202988][ T9] usb 4-1: Manufacturer: syz [ 133.207651][ T9] usb 4-1: SerialNumber: syz [ 133.226262][ T30] audit: type=1400 audit(1787192179.360:338): avc: denied { write } for pid=6362 comm="syz.0.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 133.528432][ T9] usblp 4-1:1.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 133.543885][ T30] audit: type=1400 audit(1787192179.730:339): avc: denied { mount } for pid=6371 comm="syz.4.139" name="/" dev="autofs" ino=10096 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 133.603123][ T30] audit: type=1400 audit(1787192179.760:340): avc: denied { create } for pid=6373 comm="syz.0.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 133.662653][ T30] audit: type=1400 audit(1787192179.770:341): avc: denied { getopt } for pid=6373 comm="syz.0.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 133.790029][ T30] audit: type=1400 audit(1787192179.990:342): avc: denied { ioctl } for pid=6350 comm="syz.3.134" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x5507 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 134.575808][ T5744] usb 4-1: USB disconnect, device number 2 [ 134.664242][ T6361] syz.1.137 (6361): drop_caches: 2 [ 134.683734][ T5744] usblp0: removed [ 135.025932][ T6390] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6390 comm=syz.4.146 [ 135.262063][ T30] audit: type=1400 audit(1787192181.460:343): avc: denied { read write } for pid=6392 comm="syz.3.147" name="raw-gadget" dev="devtmpfs" ino=819 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 135.325974][ T30] audit: type=1400 audit(1787192181.460:344): avc: denied { open } for pid=6392 comm="syz.3.147" path="/dev/raw-gadget" dev="devtmpfs" ino=819 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 135.522868][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 135.703164][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 135.711427][ T9] usb 4-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00 [ 135.785928][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 135.854775][ T9] usb 4-1: config 0 has no interfaces? [ 135.890982][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.051798][ T9] usb 4-1: config 0 descriptor?? [ 137.725375][ T6433] netlink: 20 bytes leftover after parsing attributes in process `syz.0.153'. [ 137.818054][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 137.818088][ T30] audit: type=1400 audit(1787192184.000:364): avc: denied { create } for pid=6429 comm="syz.4.151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 138.159836][ T6436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.176660][ T6436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.188227][ T30] audit: type=1400 audit(1787192184.010:365): avc: denied { write } for pid=6429 comm="syz.4.151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 138.232215][ T6433] team0 (unregistering): Port device team_slave_0 removed [ 138.319172][ T6433] team0 (unregistering): Port device team_slave_1 removed [ 138.618224][ T6438] syzkaller0: entered promiscuous mode [ 138.635953][ T6438] syzkaller0: entered allmulticast mode [ 139.372428][ T10] usb 4-1: USB disconnect, device number 3 [ 139.590829][ T30] audit: type=1400 audit(1787192185.790:366): avc: denied { cmd } for pid=6454 comm="iou-wrk-6455" path="socket:[11276]" dev="sockfs" ino=11276 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 139.692889][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 139.780267][ T6464] bond0: option slaves: invalid value (-veth0) [ 139.922879][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 139.922927][ T9] usb 5-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 139.923887][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 139.923910][ T9] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 139.923949][ T9] usb 5-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 139.923984][ T9] usb 5-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 139.924018][ T9] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 139.924043][ T9] usb 5-1: config 1 interface 1 has no altsetting 0 [ 139.926561][ T9] usb 5-1: string descriptor 0 read error: -22 [ 139.926660][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.997225][ T9] usb 5-1: 2:0: failed to get current value for ch 0 (-32) [ 141.478889][ T9] usb 5-1: 2:0: cannot get min/max values for control 2 (id 2) [ 141.513040][ T9] usb 5-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 141.536240][ T9] usb 5-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/1/1 [ 141.790847][ T9] usb 5-1: 2:0: cannot get min/max values for control 2 (id 2) [ 141.835245][ T9] usb 5-1: 2:0: cannot get min/max values for control 2 (id 2) [ 141.879281][ T9] usb 5-1: USB disconnect, device number 5 [ 143.315910][ T30] audit: type=1400 audit(1787192189.520:367): avc: denied { create } for pid=6497 comm="syz.3.172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 144.954117][ T30] audit: type=1400 audit(1787192191.160:368): avc: denied { bind } for pid=6504 comm="syz.2.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 144.988884][ T30] audit: type=1400 audit(1787192191.180:369): avc: denied { name_bind } for pid=6504 comm="syz.2.175" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 145.082899][ T30] audit: type=1400 audit(1787192191.180:370): avc: denied { node_bind } for pid=6504 comm="syz.2.175" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 145.215942][ T30] audit: type=1400 audit(1787192191.180:371): avc: denied { bind } for pid=6504 comm="syz.2.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 145.321729][ T6511] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 145.655786][ T6514] gtp0: entered allmulticast mode [ 145.706530][ T30] audit: type=1400 audit(1787192191.910:372): avc: denied { create } for pid=6513 comm="syz.1.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 145.827754][ T30] audit: type=1400 audit(1787192192.030:373): avc: denied { ioctl } for pid=6513 comm="syz.1.177" path="socket:[11200]" dev="sockfs" ino=11200 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 145.945763][ T6531] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 146.050776][ T6523] syzkaller0: entered promiscuous mode [ 146.077953][ T6523] syzkaller0: entered allmulticast mode [ 146.672860][ T5775] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 146.833731][ T5775] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 146.890376][ T5775] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 146.920715][ T5775] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 146.955040][ T5775] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.005965][ T6533] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 147.048977][ T5775] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 147.891303][ T5817] usb 4-1: USB disconnect, device number 4 [ 148.472447][ T6561] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 148.501916][ T6561] CIFS: Attempting to mount //127.0.0.1/share [ 149.332783][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 149.685987][ T6561] CIFS: VFS: Error connecting to socket. Aborting operation. [ 149.711880][ T6561] CIFS: VFS: cifs_mount failed w/return code = -4 [ 149.965349][ T30] audit: type=1400 audit(1787192196.160:374): avc: denied { name_bind } for pid=6572 comm="syz.1.194" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 150.896333][ T6581] tipc: Enabling of bearer rejected, failed to enable media [ 152.473788][ T942] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 153.684781][ T942] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 153.703770][ T942] usb 3-1: config 0 has no interfaces? [ 153.710551][ T942] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.916765][ T942] usb 3-1: config 0 descriptor?? [ 154.322372][ T942] usb 3-1: can't set config #0, error -71 [ 154.371075][ T942] usb 3-1: USB disconnect, device number 4 [ 155.073985][ T30] audit: type=1400 audit(1787192201.270:375): avc: denied { create } for pid=6620 comm="syz.4.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 155.589440][ T30] audit: type=1400 audit(1787192201.790:376): avc: denied { shutdown } for pid=6629 comm="syz.1.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 155.696960][ T30] audit: type=1400 audit(1787192201.830:377): avc: denied { read } for pid=6629 comm="syz.1.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 159.309191][ T6655] netlink: 4 bytes leftover after parsing attributes in process `syz.2.214'. [ 159.473349][ T30] audit: type=1400 audit(1787192205.670:378): avc: denied { bind } for pid=6661 comm="syz.1.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 159.526301][ T30] audit: type=1400 audit(1787192205.680:379): avc: denied { name_bind } for pid=6661 comm="syz.1.216" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 159.595122][ T30] audit: type=1400 audit(1787192205.680:380): avc: denied { node_bind } for pid=6661 comm="syz.1.216" saddr=::1 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 159.652229][ T30] audit: type=1400 audit(1787192205.720:381): avc: denied { name_connect } for pid=6661 comm="syz.1.216" dest=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 159.662929][ T5809] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 159.932547][ T5809] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 159.992270][ T5809] usb 4-1: config 0 has no interfaces? [ 160.030302][ T5809] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.336001][ T5809] usb 4-1: config 0 descriptor?? [ 160.703831][ T6660] Bluetooth: hci0: invalid length 0, exp 2 for type 9 [ 160.749426][ T942] usb 4-1: USB disconnect, device number 5 [ 160.786932][ T6675] bond0: option slaves: invalid value (-veth0) [ 160.917850][ T6681] batman_adv: batadv0: Adding interface: veth0 [ 160.924323][ T6681] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 160.949973][ T6681] batman_adv: batadv0: Interface activated: veth0 [ 160.968105][ T6681] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.975768][ T6681] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 161.025317][ T6681] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 161.037814][ T6681] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 161.045840][ T6681] batman_adv: batadv0: Interface deactivated: veth0 [ 161.052550][ T6681] batman_adv: batadv0: Removing interface: veth0 [ 161.076575][ T30] audit: type=1400 audit(1787192207.280:382): avc: denied { listen } for pid=6683 comm="syz.4.223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 161.528640][ T30] audit: type=1400 audit(1787192207.430:383): avc: denied { accept } for pid=6683 comm="syz.4.223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 161.595668][ T30] audit: type=1400 audit(1787192207.800:384): avc: denied { create } for pid=6689 comm="syz.1.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 162.077106][ T30] audit: type=1400 audit(1787192208.230:385): avc: denied { bind } for pid=6692 comm="syz.3.225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 164.313853][ T30] audit: type=1400 audit(1787192210.520:386): avc: denied { read } for pid=6722 comm="syz.1.237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 164.507084][ T30] audit: type=1400 audit(1787192210.710:387): avc: denied { getopt } for pid=6725 comm="syz.3.228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 164.742870][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 164.912922][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 164.931340][ T9] usb 4-1: New USB device found, idVendor=0830, idProduct=0080, bcdDevice=5c.a8 [ 164.943468][ T6716] lo: entered allmulticast mode [ 164.979925][ T9] usb 4-1: config 3 has an invalid interface number: 88 but max is 0 [ 164.988084][ T6714] lo: left allmulticast mode [ 165.007396][ T9] usb 4-1: config 3 has no interface number 0 [ 165.021659][ T9] usb 4-1: config 3 interface 88 has no altsetting 0 [ 165.044019][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.052835][ T9] usb 4-1: Product: syz [ 165.057042][ T9] usb 4-1: Manufacturer: syz [ 165.061637][ T9] usb 4-1: SerialNumber: syz [ 165.676313][ T30] audit: type=1400 audit(1787192211.880:388): avc: denied { create } for pid=6738 comm="syz.4.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 165.768314][ T6726] netlink: 36 bytes leftover after parsing attributes in process `syz.3.228'. [ 166.055726][ T30] audit: type=1400 audit(1787192212.220:389): avc: denied { ioctl } for pid=6738 comm="syz.4.242" path="socket:[12024]" dev="sockfs" ino=12024 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 166.191235][ T6746] netlink: 56 bytes leftover after parsing attributes in process `syz.3.228'. [ 166.323597][ T6744] netlink: 4 bytes leftover after parsing attributes in process `syz.4.242'. [ 166.352179][ T30] audit: type=1400 audit(1787192212.250:390): avc: denied { bind } for pid=6738 comm="syz.4.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 166.405919][ T6726] 9p: Bad value for 'rfdno' [ 166.605730][ T30] audit: type=1400 audit(1787192212.350:391): avc: denied { setopt } for pid=6738 comm="syz.4.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 166.820522][ T30] audit: type=1400 audit(1787192212.370:392): avc: denied { append } for pid=6738 comm="syz.4.242" name="001" dev="devtmpfs" ino=741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 166.984523][ T30] audit: type=1400 audit(1787192212.420:393): avc: denied { read write } for pid=6738 comm="syz.4.242" name="video7" dev="devtmpfs" ino=950 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 167.419410][ T30] audit: type=1400 audit(1787192212.440:394): avc: denied { open } for pid=6738 comm="syz.4.242" path="/dev/video7" dev="devtmpfs" ino=950 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 167.448390][ T30] audit: type=1400 audit(1787192212.470:395): avc: denied { ioctl } for pid=6738 comm="syz.4.242" path="/dev/video7" dev="devtmpfs" ino=950 ioctlcmd=0x561c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 167.533794][ T30] audit: type=1400 audit(1787192212.600:396): avc: denied { mounton } for pid=6725 comm="syz.3.228" path="/41/file0" dev="tmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 167.835494][ T9] kl5kusb105 4-1:3.88: KL5KUSB105D / PalmConnect converter detected [ 168.201715][ T9] usb 4-1: KL5KUSB105D / PalmConnect converter now attached to ttyUSB0 [ 168.297283][ T9] usb 4-1: USB disconnect, device number 6 [ 168.426586][ T9] kl5kusb105d ttyUSB0: KL5KUSB105D / PalmConnect converter now disconnected from ttyUSB0 [ 168.488518][ T9] kl5kusb105 4-1:3.88: device disconnected [ 168.979514][ T30] audit: type=1400 audit(1787192215.180:397): avc: denied { create } for pid=6763 comm="syz.1.247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 169.320877][ T30] audit: type=1400 audit(1787192215.440:398): avc: denied { connect } for pid=6763 comm="syz.1.247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 169.871244][ T6776] CIFS: Attempting to mount //127.0.0.1/share [ 169.892928][ T6776] CIFS: VFS: Error connecting to socket. Aborting operation. [ 169.900608][ T6776] CIFS: VFS: cifs_mount failed w/return code = -111 [ 170.322883][ T5809] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 170.541760][ T5809] usb 2-1: New USB device found, idVendor=9710, idProduct=7840, bcdDevice= 0.00 [ 170.580860][ T5809] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.600341][ T5809] usb 2-1: Product: syz [ 170.614670][ T5809] usb 2-1: Manufacturer: syz [ 170.624823][ T5809] usb 2-1: SerialNumber: syz [ 172.306280][ T5809] usb 2-1: can't set config #1, error -71 [ 172.314486][ T5809] usb 2-1: USB disconnect, device number 2 [ 172.725355][ T30] audit: type=1326 audit(1787192218.930:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6795 comm="syz.4.257" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48e719e0d9 code=0x7ffc0000 [ 173.056723][ T30] audit: type=1326 audit(1787192218.930:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6795 comm="syz.4.257" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48e719e0d9 code=0x7ffc0000 [ 173.086936][ T30] audit: type=1326 audit(1787192219.250:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6795 comm="syz.4.257" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f48e719e0d9 code=0x7ffc0000 [ 173.114964][ T30] audit: type=1326 audit(1787192219.250:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6795 comm="syz.4.257" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48e719e0d9 code=0x7ffc0000 [ 173.145565][ T30] audit: type=1326 audit(1787192219.250:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6795 comm="syz.4.257" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48e719e0d9 code=0x7ffc0000 [ 173.184201][ T5744] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 173.205710][ T30] audit: type=1326 audit(1787192219.250:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6795 comm="syz.4.257" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f48e719e0d9 code=0x7ffc0000 [ 173.248353][ T30] audit: type=1326 audit(1787192219.250:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6795 comm="syz.4.257" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48e719e0d9 code=0x7ffc0000 [ 173.304028][ T30] audit: type=1326 audit(1787192219.250:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6795 comm="syz.4.257" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48e719e0d9 code=0x7ffc0000 [ 173.421821][ T30] audit: type=1326 audit(1787192219.250:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6795 comm="syz.4.257" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f48e719e0d9 code=0x7ffc0000 [ 173.453170][ T5744] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 173.481944][ T5744] usb 4-1: config 0 has no interfaces? [ 173.487689][ T5744] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.504492][ T30] audit: type=1326 audit(1787192219.260:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6795 comm="syz.4.257" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48e719e0d9 code=0x7ffc0000 [ 173.549138][ T5744] usb 4-1: config 0 descriptor?? [ 173.558641][ T6808] hub 1-0:1.0: USB hub found [ 173.569151][ T6808] hub 1-0:1.0: 1 port detected [ 174.145000][ T6815] qnx6: unable to read the first superblock [ 174.154105][ T6815] qnx6: unable to read the first superblock [ 174.160132][ T6815] qnx6: unable to read the first superblock [ 174.522946][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 174.763382][ T942] usb 4-1: USB disconnect, device number 7 [ 175.155610][ T6829] netlink: 28 bytes leftover after parsing attributes in process `syz.2.264'. [ 175.177338][ T6829] netlink: 8 bytes leftover after parsing attributes in process `syz.2.264'. [ 176.083999][ T6846] trusted_key: syz.0.267 sent an empty control message without MSG_MORE. [ 177.634051][ T6862] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 177.647726][ T6862] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 177.662541][ T6862] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 177.679481][ T6862] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 177.708685][ T6862] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 177.724168][ T6862] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 177.737344][ T6862] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 177.758219][ T6862] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 177.771598][ T6862] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 177.784357][ T6862] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 178.152497][ T9] IPVS: starting estimator thread 0... [ 178.274967][ T6865] IPVS: using max 34 ests per chain, 81600 per kthread [ 179.138563][ T30] kauditd_printk_skb: 249 callbacks suppressed [ 179.138581][ T30] audit: type=1400 audit(1787192225.340:658): avc: denied { setopt } for pid=6867 comm="syz.4.274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 179.663179][ T5715] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 179.896417][ T5715] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 180.007781][ T5715] usb 4-1: config 0 has no interfaces? [ 180.075282][ T5715] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.356403][ T5715] usb 4-1: config 0 descriptor?? [ 181.282609][ T6877] Bluetooth: hci0: invalid length 0, exp 2 for type 9 [ 181.485177][ T5715] usb 4-1: USB disconnect, device number 8 [ 181.978891][ T30] audit: type=1400 audit(1787192228.180:659): avc: denied { unlink } for pid=6882 comm="syz.1.278" name="#1" dev="tmpfs" ino=291 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 182.068746][ T30] audit: type=1400 audit(1787192228.210:660): avc: denied { setopt } for pid=6881 comm="syz.0.277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 182.152122][ T30] audit: type=1400 audit(1787192228.300:661): avc: denied { mount } for pid=6882 comm="syz.1.278" name="/" dev="overlay" ino=284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 183.803453][ T30] audit: type=1400 audit(1787192230.010:662): avc: denied { read } for pid=6888 comm="syz.2.279" path="socket:[14142]" dev="sockfs" ino=14142 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 184.536656][ T30] audit: type=1400 audit(1787192230.080:663): avc: denied { append } for pid=6892 comm="syz.3.281" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 184.859842][ T6901] tipc: Started in network mode [ 184.859896][ T6901] tipc: Node identity 0e7bd034d585, cluster identity 4711 [ 184.860094][ T6901] tipc: Enabled bearer , priority 0 [ 184.861414][ T6901] syzkaller0: entered promiscuous mode [ 184.861432][ T6901] syzkaller0: entered allmulticast mode [ 184.898937][ T6901] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 185.045766][ T6901] netlink: 12 bytes leftover after parsing attributes in process `syz.1.283'. [ 185.161687][ T6902] tipc: Resetting bearer [ 185.395784][ T6900] tipc: Resetting bearer [ 185.553094][ T5744] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 185.737483][ T6900] tipc: Disabling bearer [ 185.815335][ T5744] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 185.960257][ T5744] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.038044][ T5744] usb 3-1: Product: syz [ 186.117685][ T5744] usb 3-1: Manufacturer: syz [ 186.168672][ T5744] usb 3-1: SerialNumber: syz [ 186.201787][ T5744] usb 3-1: config 0 descriptor?? [ 186.246072][ T5744] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 187.444699][ T5744] gspca_stk1135: reg_w 0x2 err -71 [ 187.463085][ T5744] gspca_stk1135: serial bus timeout: status=0x00 [ 187.477536][ T5744] gspca_stk1135: Sensor write failed [ 187.497690][ T5744] gspca_stk1135: serial bus timeout: status=0x00 [ 187.529471][ T5744] gspca_stk1135: Sensor write failed [ 187.612302][ T5744] gspca_stk1135: serial bus timeout: status=0x00 [ 187.704105][ T5744] gspca_stk1135: Sensor read failed [ 187.794772][ T5744] gspca_stk1135: serial bus timeout: status=0x00 [ 187.891655][ T5744] gspca_stk1135: Sensor read failed [ 187.958724][ T5744] gspca_stk1135: Detected sensor type unknown (0x0) [ 187.993151][ T5744] gspca_stk1135: serial bus timeout: status=0x00 [ 188.012031][ T5744] gspca_stk1135: Sensor read failed [ 188.031479][ T5744] gspca_stk1135: serial bus timeout: status=0x00 [ 188.051022][ T5744] gspca_stk1135: Sensor read failed [ 188.065550][ T5744] gspca_stk1135: serial bus timeout: status=0x00 [ 188.080301][ T5744] gspca_stk1135: Sensor write failed [ 188.107072][ T5744] gspca_stk1135: serial bus timeout: status=0x00 [ 188.139526][ T5744] gspca_stk1135: Sensor write failed [ 188.167361][ T5744] stk1135 3-1:0.0: probe with driver stk1135 failed with error -71 [ 188.241142][ T5744] usb 3-1: USB disconnect, device number 5 [ 189.056171][ T6929] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.623081][ T30] audit: type=1400 audit(1787192235.820:664): avc: denied { getopt } for pid=6942 comm="syz.1.294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 190.325163][ T6932] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.681055][ T6932] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.704028][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 190.862946][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 190.876058][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 191.336567][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 191.347308][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 191.359203][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 6144, setting to 1024 [ 191.379139][ T6932] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.389593][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 191.401147][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 191.435087][ T9] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 191.445262][ T6973] netlink: 4 bytes leftover after parsing attributes in process `syz.3.299'. [ 191.465241][ T9] usb 2-1: Manufacturer: syz [ 191.500784][ T9] usb 2-1: config 0 descriptor?? [ 191.751518][ T30] audit: type=1800 audit(1787192237.950:665): pid=6973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t op=collect_data cause=failed comm="syz.3.299" name="regulatory.db.p7s" dev="sda1" ino=449 res=0 errno=0 [ 191.776254][ T6973] faux_driver regulatory: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 191.809132][ T6973] faux_driver regulatory: Direct firmware load for regulatory.db.p7s failed with error -4 [ 191.846652][ T30] audit: type=1400 audit(1787192238.050:666): avc: denied { connect } for pid=6974 comm="syz.4.301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 191.872414][ T6973] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db.p7s [ 191.896743][ T30] audit: type=1400 audit(1787192238.100:667): avc: denied { setopt } for pid=6974 comm="syz.4.301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 192.044475][ T30] audit: type=1400 audit(1787192238.240:668): avc: denied { write } for pid=6955 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 192.068045][ T9] rc_core: IR keymap rc-hauppauge not found [ 192.076759][ T9] Registered IR keymap rc-empty [ 192.084420][ T9] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 192.093327][ T6983] netlink: 16 bytes leftover after parsing attributes in process `syz.4.301'. [ 192.114974][ T9] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 192.144441][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 192.190597][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input8 [ 192.248893][ T9] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 192.291364][ T9] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 192.322877][ T6415] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.323127][ T9] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 192.347280][ T30] audit: type=1400 audit(1787192238.530:669): avc: denied { write } for pid=6986 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 192.406707][ T9] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 192.457438][ T9] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 192.493000][ T6415] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.505519][ T9] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 192.578976][ T9] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 192.583125][ T6411] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.643482][ T9] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 192.694575][ T9] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 192.733216][ T9] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 192.742977][ T6415] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.795110][ T9] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 192.825962][ T9] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 192.871093][ T9] usb 2-1: USB disconnect, device number 3 [ 193.302167][ T30] audit: type=1400 audit(1787192239.500:670): avc: denied { wake_alarm } for pid=6998 comm="syz.0.303" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 194.147991][ T30] audit: type=1400 audit(1787192240.350:671): avc: denied { write } for pid=6989 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 194.160317][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.189505][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.483735][ T30] audit: type=1400 audit(1787192240.690:672): avc: denied { map } for pid=7012 comm="syz.2.305" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 194.606388][ T30] audit: type=1400 audit(1787192240.740:673): avc: denied { write } for pid=7015 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 194.682023][ T5613] Bluetooth: hci1: unexpected event for opcode 0x0c6d [ 195.054919][ T7026] warning: `syz.3.309' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 195.456873][ T30] audit: type=1400 audit(1787192241.660:674): avc: denied { ioctl } for pid=7012 comm="syz.2.305" path="/dev/nullb0" dev="devtmpfs" ino=694 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 195.795472][ T942] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 195.973678][ T942] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 196.007590][ T942] usb 2-1: config 0 has no interfaces? [ 196.036484][ T942] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.083123][ T942] usb 2-1: config 0 descriptor?? [ 196.221166][ T50] Bluetooth: hci0: command 0x0406 tx timeout [ 196.227325][ T5609] Bluetooth: hci3: command 0x0406 tx timeout [ 196.233839][ T5613] Bluetooth: hci2: command 0x0406 tx timeout [ 196.346754][ T5817] usb 2-1: USB disconnect, device number 4 [ 196.465202][ T30] audit: type=1400 audit(1787192242.670:675): avc: denied { shutdown } for pid=7042 comm="syz.0.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 196.500826][ T30] audit: type=1400 audit(1787192242.690:676): avc: denied { name_connect } for pid=7042 comm="syz.0.314" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 197.506907][ T7053] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=7053 comm=syz.0.316 [ 197.657497][ T30] audit: type=1400 audit(1787192243.860:677): avc: denied { mount } for pid=7059 comm="syz.1.319" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 197.701686][ T7053] netlink: 16 bytes leftover after parsing attributes in process `syz.0.316'. [ 198.145552][ T7062] zram0: detected capacity change from 0 to 24 [ 198.209866][ T7070] tipc: Started in network mode [ 198.222550][ T7070] tipc: Node identity d2ef78de8939, cluster identity 4711 [ 198.224000][ T30] audit: type=1400 audit(1787192244.430:678): avc: denied { unmount } for pid=5597 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 198.244751][ T7070] tipc: Enabled bearer , priority 0 [ 198.276734][ T7071] sch_tbf: burst 255 is lower than device syzkaller0 mtu (65589) ! [ 198.340869][ T5615] Bluetooth: hci1: unexpected event for opcode 0x200a [ 198.562116][ T7080] syz.0.324 uses obsolete (PF_INET,SOCK_PACKET) [ 198.667130][ T7083] loop0: detected capacity change from 0 to 4096 [ 198.762951][ T942] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 198.953398][ T7083] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 199.009862][ T7083] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 199.044629][ T7083] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 199.075398][ T7083] ldm_validate_privheads(): Cannot find PRIVHEAD 3. [ 199.102923][ T7083] ldm_validate_privheads(): Primary and backup PRIVHEADs don't match. [ 199.126183][ T7083] loop0: [ 199.203538][ T942] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 199.223561][ T942] usb 5-1: config 0 has no interfaces? [ 199.229990][ T942] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.235358][ T5715] tipc: Node number set to 1540782302 [ 199.240998][ T942] usb 5-1: config 0 descriptor?? [ 199.980030][ T5744] usb 5-1: USB disconnect, device number 6 [ 200.392831][ T7110] usb usb7: check_ctrlrecip: process 7110 (syz.3.331) requesting ep 01 but needs 81 [ 202.423800][ T7127] syzkaller0: entered promiscuous mode [ 202.446580][ T7127] syzkaller0: entered allmulticast mode [ 202.467023][ T7127] tipc: Started in network mode [ 202.496131][ T7127] tipc: Node identity 1eae38fab2bd, cluster identity 4711 [ 202.513080][ T7127] tipc: Enabled bearer , priority 0 [ 202.604757][ T7126] tipc: Resetting bearer [ 202.664231][ T7126] tipc: Disabling bearer [ 203.209289][ T7132] openvswitch: netlink: IP tunnel dst address not specified [ 204.206867][ T7161] netlink: 4 bytes leftover after parsing attributes in process `syz.2.346'. [ 204.228525][ T7160] syzkaller0: entered promiscuous mode [ 204.267666][ T30] audit: type=1400 audit(1787192250.470:679): avc: denied { listen } for pid=7152 comm="syz.4.348" lport=40513 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 204.311895][ T7160] syzkaller0: entered allmulticast mode [ 204.333605][ T7162] capability: warning: `syz.4.348' uses 32-bit capabilities (legacy support in use) [ 204.353077][ T942] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 204.477440][ T30] audit: type=1400 audit(1787192250.680:680): avc: denied { accept } for pid=7152 comm="syz.4.348" lport=40513 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 204.534460][ T942] usb 2-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 204.587059][ T942] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 204.615791][ T942] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 204.655699][ T942] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.702924][ T942] cxacru 2-1:1.0: usbatm_usb_probe: bind failed: -19! [ 204.738805][ T7165] bond0: option slaves: invalid value (-veth0) [ 204.836136][ T5744] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 205.136780][ T5744] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 205.303542][ T5744] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 205.342888][ T5744] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 205.397947][ T5744] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 205.433996][ T5744] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 205.457749][ T5775] usb 2-1: USB disconnect, device number 5 [ 205.463863][ T5744] usb 5-1: SerialNumber: syz [ 205.503724][ T5744] hub 5-1:1.0: bad descriptor, ignoring hub [ 205.517563][ T5744] hub 5-1:1.0: probe with driver hub failed with error -5 [ 205.552295][ T5744] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 205.553752][ T7178] overlayfs: failed to clone upperpath [ 205.568660][ T5744] cdc_acm 5-1:1.0: This needs exactly 3 endpoints [ 205.575915][ T5744] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -22 [ 206.145789][ T30] audit: type=1400 audit(1787192252.350:681): avc: denied { getopt } for pid=7152 comm="syz.4.348" lport=40513 faddr=255.255.255.254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 206.254222][ T5775] usb 5-1: USB disconnect, device number 7 [ 206.583988][ T7195] file system registered [ 206.976590][ T30] audit: type=1400 audit(1787192252.780:682): avc: denied { write } for pid=7190 comm="syz.2.360" name="functions" dev="configfs" ino=10868 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 208.556003][ T7202] bond0: option slaves: invalid value (-veth0) [ 208.601430][ T7211] bond0: option slaves: invalid value (-veth0) [ 208.623924][ T7214] netlink: NAT attribute has 4 unknown bytes [ 208.659468][ T7214] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 209.798025][ T7231] netlink: 8 bytes leftover after parsing attributes in process `syz.1.372'. [ 209.889826][ T7231] netlink: 'syz.1.372': attribute type 22 has an invalid length. [ 210.099661][ T7237] netlink: 4 bytes leftover after parsing attributes in process `syz.0.371'. [ 210.546354][ T7240] netlink: 'syz.2.374': attribute type 1 has an invalid length. [ 210.783677][ T7231] netlink: 4 bytes leftover after parsing attributes in process `syz.1.372'. [ 210.816944][ T30] audit: type=1400 audit(1787192257.000:683): avc: denied { ioctl } for pid=7238 comm="syz.2.374" path="socket:[16268]" dev="sockfs" ino=16268 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 210.868367][ T7240] 8021q: adding VLAN 0 to HW filter on device bond1 [ 211.167796][ T7241] bond1: (slave ip6gretap1): making interface the new active one [ 211.648165][ T7241] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 211.702102][ T7231] netlink: 8 bytes leftover after parsing attributes in process `syz.1.372'. [ 211.714361][ T6416] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.714606][ T6416] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.714668][ T6416] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.714709][ T6416] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.331231][ T7231] netlink: 'syz.1.372': attribute type 22 has an invalid length. [ 212.339161][ T7231] netlink: 4 bytes leftover after parsing attributes in process `syz.1.372'. [ 212.489861][ T7256] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 212.533055][ T7255] bond0: option slaves: invalid value (-veth0) [ 212.586995][ T7256] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 212.616527][ T7258] syzkaller0: entered promiscuous mode [ 212.629058][ T7258] syzkaller0: entered allmulticast mode [ 212.643477][ T7258] tipc: Started in network mode [ 212.648451][ T7258] tipc: Node identity 4e67ee7fee88, cluster identity 4711 [ 212.668727][ T7258] tipc: Enabled bearer , priority 0 [ 212.714895][ T7258] tipc: Resetting bearer [ 212.741703][ T7257] tipc: Resetting bearer [ 212.787457][ T7257] tipc: Disabling bearer [ 214.541019][ T30] audit: type=1400 audit(1787192260.740:684): avc: denied { setopt } for pid=7279 comm="syz.2.388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 215.014505][ T30] audit: type=1400 audit(1787192260.870:685): avc: denied { listen } for pid=7279 comm="syz.2.388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 215.061783][ T7281] netlink: 68 bytes leftover after parsing attributes in process `syz.2.388'. [ 215.131609][ T5615] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 215.262245][ T30] audit: type=1400 audit(1787192261.460:686): avc: denied { watch } for pid=7293 comm="syz.1.391" path="/75/file1" dev="tmpfs" ino=425 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 215.303792][ T30] audit: type=1400 audit(1787192261.460:687): avc: denied { mount } for pid=7293 comm="syz.1.391" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 215.392333][ T30] audit: type=1400 audit(1787192261.590:688): avc: denied { write } for pid=7293 comm="syz.1.391" name="os_desc" dev="configfs" ino=10871 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 215.490365][ T30] audit: type=1400 audit(1787192261.590:689): avc: denied { create } for pid=7293 comm="syz.1.391" name="c.1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 215.511296][ T30] audit: type=1400 audit(1787192261.590:690): avc: denied { write } for pid=7293 comm="syz.1.391" name="os_desc" dev="configfs" ino=10871 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 216.543818][ T30] audit: type=1400 audit(1787192262.750:691): avc: denied { unmount } for pid=5597 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 216.591874][ T30] audit: type=1400 audit(1787192262.750:692): avc: denied { mount } for pid=7307 comm="syz.2.396" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 216.656456][ T5615] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 216.672154][ T5615] CPU: 0 UID: 0 PID: 5615 Comm: kworker/u9:7 Tainted: G L syzkaller #0 PREEMPT(full) [ 216.672191][ T5615] Tainted: [L]=SOFTLOCKUP [ 216.672199][ T5615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 216.672217][ T5615] Workqueue: hci0 hci_rx_work [ 216.672271][ T5615] Call Trace: [ 216.672279][ T5615] [ 216.672288][ T5615] dump_stack_lvl+0x100/0x190 [ 216.672323][ T5615] sysfs_warn_dup.cold+0x1c/0x28 [ 216.672356][ T5615] sysfs_create_dir_ns+0x24b/0x2b0 [ 216.672386][ T5615] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 216.672414][ T5615] ? find_held_lock+0x2b/0x80 [ 216.672437][ T5615] ? kobject_add_internal+0x25f/0x930 [ 216.672458][ T5615] ? kobject_add_internal+0x25f/0x930 [ 216.672482][ T5615] ? do_raw_spin_unlock+0x145/0x1e0 [ 216.672504][ T5615] kobject_add_internal+0x2c8/0x930 [ 216.672531][ T5615] kobject_add+0x16a/0x1e0 [ 216.672552][ T5615] ? __pfx_kobject_add+0x10/0x10 [ 216.672572][ T5615] ? class_to_subsys+0x10f/0x150 [ 216.672604][ T5615] ? kobject_put+0xb9/0x640 [ 216.672621][ T5615] ? _raw_spin_unlock+0x28/0x50 [ 216.672653][ T5615] device_add+0x294/0x1970 [ 216.672683][ T5615] ? __pfx_dev_set_name+0x10/0x10 [ 216.672712][ T5615] ? __pfx_device_add+0x10/0x10 [ 216.672739][ T5615] ? mgmt_send_event_skb+0x2fb/0x460 [ 216.672770][ T5615] hci_conn_add_sysfs+0x1a3/0x260 [ 216.672796][ T5615] le_conn_complete_evt+0x11eb/0x1f60 [ 216.672828][ T5615] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 216.672852][ T5615] ? hci_event_packet+0x186/0xcd0 [ 216.672883][ T5615] hci_le_conn_complete_evt+0x23c/0x3a0 [ 216.672909][ T5615] ? skb_pull_data+0x15f/0x1e0 [ 216.672936][ T5615] hci_le_meta_evt+0x34a/0x5f0 [ 216.672964][ T5615] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 216.672993][ T5615] hci_event_packet+0x51c/0xcd0 [ 216.673018][ T5615] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 216.673045][ T5615] ? __pfx_hci_event_packet+0x10/0x10 [ 216.673073][ T5615] ? kcov_remote_start+0x387/0x670 [ 216.673099][ T5615] ? lockdep_hardirqs_on+0x7d/0x110 [ 216.673133][ T5615] hci_rx_work+0x451/0xfc0 [ 216.673164][ T5615] process_one_work+0xa23/0x1940 [ 216.673201][ T5615] ? __pfx_process_one_work+0x10/0x10 [ 216.673235][ T5615] ? __pfx_hci_rx_work+0x10/0x10 [ 216.673268][ T5615] worker_thread+0x5ef/0xe50 [ 216.673302][ T5615] ? __pfx_worker_thread+0x10/0x10 [ 216.673326][ T5615] ? kthread+0x13a/0x450 [ 216.673346][ T5615] ? __pfx_worker_thread+0x10/0x10 [ 216.673368][ T5615] kthread+0x373/0x450 [ 216.673388][ T5615] ? __pfx_kthread+0x10/0x10 [ 216.673413][ T5615] ret_from_fork+0x730/0xd60 [ 216.673444][ T5615] ? __pfx_ret_from_fork+0x10/0x10 [ 216.673474][ T5615] ? __switch_to+0x800/0x10f0 [ 216.673497][ T5615] ? __pfx_kthread+0x10/0x10 [ 216.673520][ T5615] ret_from_fork_asm+0x1a/0x30 [ 216.673566][ T5615] [ 216.951901][ T30] audit: type=1400 audit(1787192262.860:693): avc: denied { listen } for pid=7307 comm="syz.2.396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 216.969751][ T5615] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 216.986201][ T5615] Bluetooth: hci0: failed to register connection device [ 217.759290][ T30] audit: type=1400 audit(1787192263.960:694): avc: denied { unmount } for pid=5598 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 218.055345][ T30] audit: type=1400 audit(1787192264.250:695): avc: denied { read write } for pid=7329 comm="syz.2.404" name="uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 218.153847][ T7333] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 218.265716][ T30] audit: type=1400 audit(1787192264.250:696): avc: denied { open } for pid=7329 comm="syz.2.404" path="/dev/uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 218.730446][ T5600] Bluetooth: Wrong link type (-57) [ 221.992068][ T7351] bond0: option slaves: invalid value (-veth0) [ 222.092212][ T7353] netlink: 8 bytes leftover after parsing attributes in process `syz.4.410'. [ 222.120575][ T7353] netlink: 24 bytes leftover after parsing attributes in process `syz.4.410'. [ 222.160066][ T30] audit: type=1400 audit(1787192268.360:697): avc: denied { create } for pid=7352 comm="syz.4.410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 222.231322][ T30] audit: type=1400 audit(1787192268.430:698): avc: denied { write } for pid=7352 comm="syz.4.410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 222.317657][ T30] audit: type=1400 audit(1787192268.520:699): avc: denied { setopt } for pid=7352 comm="syz.4.410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 222.766221][ T5715] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 222.944909][ T5715] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 222.970443][ T5715] usb 5-1: config 0 has no interfaces? [ 222.981774][ T5715] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.038752][ T5715] usb 5-1: config 0 descriptor?? [ 223.770152][ T5744] usb 5-1: USB disconnect, device number 8 [ 224.966354][ T29] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 225.162896][ T7392] netlink: 'syz.3.421': attribute type 10 has an invalid length. [ 225.174063][ T7392] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.185317][ T7392] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.256979][ T7392] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.264267][ T7392] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.272204][ T7392] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.279675][ T7392] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.344864][ T7392] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 225.542586][ T29] usb 2-1: unable to get BOS descriptor or descriptor too short [ 225.583390][ T29] usb 2-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 225.643461][ T29] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 226.982151][ T29] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 226.993544][ T29] usb 2-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 227.014727][ T29] usb 2-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 227.028125][ T29] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 227.039156][ T29] usb 2-1: config 1 interface 1 has no altsetting 0 [ 227.133528][ T29] usb 2-1: string descriptor 0 read error: -71 [ 227.149849][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.185097][ T29] usb 2-1: can't set config #1, error -71 [ 227.200624][ T29] usb 2-1: USB disconnect, device number 6 [ 228.030133][ T30] audit: type=1400 audit(1787192274.220:700): avc: denied { write } for pid=7409 comm="syz.1.429" path="socket:[17746]" dev="sockfs" ino=17746 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 229.103009][ T29] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 229.336834][ T29] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 229.487507][ T29] usb 5-1: config 0 has no interfaces? [ 229.494228][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.534740][ T29] usb 5-1: config 0 descriptor?? [ 229.598696][ T7429] netlink: 'syz.1.433': attribute type 1 has an invalid length. [ 229.775124][ T10] usb 5-1: USB disconnect, device number 9 [ 229.863813][ T7433] fuse: fd is not a fuse device [ 230.093082][ T7441] syzkaller0: entered promiscuous mode [ 230.113224][ T7441] syzkaller0: entered allmulticast mode [ 230.150141][ T7441] tipc: Started in network mode [ 230.164008][ T7441] tipc: Node identity 22e19fb2f6c2, cluster identity 4711 [ 230.175202][ T7441] tipc: Enabled bearer , priority 0 [ 230.197198][ T7441] tipc: Resetting bearer [ 230.204923][ T7440] tipc: Resetting bearer [ 230.267925][ T7440] tipc: Disabling bearer [ 230.352028][ T7447] netlink: 11870 bytes leftover after parsing attributes in process `syz.1.440'. [ 233.354470][ T7458] binder: 7457:7458 ioctl c0306201 200000000040 returned -14 [ 233.520366][ T30] audit: type=1400 audit(1787192279.720:701): avc: denied { read } for pid=7450 comm="syz.4.443" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 233.549653][ T30] audit: type=1400 audit(1787192279.750:702): avc: denied { open } for pid=7450 comm="syz.4.443" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 233.588204][ T30] audit: type=1400 audit(1787192279.750:703): avc: denied { ioctl } for pid=7450 comm="syz.4.443" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9378 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 233.694607][ T7465] ubi0: attaching mtd0 [ 233.710888][ T7465] ubi0: scanning is finished [ 233.715638][ T7465] ubi0: empty MTD device detected [ 234.236184][ T7465] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 234.335808][ T7471] netlink: 4 bytes leftover after parsing attributes in process `syz.0.449'. [ 235.719947][ T7501] PKCS7: Unknown OID: [4] 0.0 [ 235.726095][ T7501] PKCS7: Only support pkcs7_signedData type [ 239.230802][ T7521] bond0: option slaves: invalid value (-veth0) [ 241.289031][ T5817] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 241.423389][ T5817] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 241.963450][ T5817] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 243.086576][ T5817] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 243.114410][ T5817] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 243.131525][ T5817] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 243.155711][ T5817] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 243.168605][ T5817] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.183405][ T5817] usb 5-1: config 0 descriptor?? [ 243.273317][ T7563] bond0: option slaves: invalid value (-veth0) [ 243.723927][ T5817] usbhid 5-1:0.0: can't add hid device: -71 [ 243.755240][ T5817] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 243.799845][ T5817] usb 5-1: USB disconnect, device number 10 [ 243.953136][ T30] audit: type=1400 audit(1787192290.150:704): avc: denied { read } for pid=7567 comm="syz.2.477" name="sg0" dev="devtmpfs" ino=803 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 243.993068][ T30] audit: type=1400 audit(1787192290.150:705): avc: denied { open } for pid=7567 comm="syz.2.477" path="/dev/sg0" dev="devtmpfs" ino=803 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 244.635752][ T30] audit: type=1800 audit(1787192290.790:706): pid=7589 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.483" name="file0" dev="overlay" ino=494 res=0 errno=0 [ 244.904226][ T30] audit: type=1400 audit(1787192291.090:707): avc: denied { read } for pid=7591 comm="syz.0.484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 245.378408][ T7603] bond0: option slaves: invalid value (-veth0) [ 246.341418][ T30] audit: type=1400 audit(1787192291.900:708): avc: denied { accept } for pid=7599 comm="syz.1.489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 248.627858][ T7613] netlink: 64 bytes leftover after parsing attributes in process `syz.0.490'. [ 249.127415][ T7623] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7623 comm=syz.1.495 [ 249.316392][ T30] audit: type=1400 audit(1787192295.520:709): avc: denied { read } for pid=7627 comm="syz.3.498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 249.364247][ T30] audit: type=1400 audit(1787192295.570:710): avc: denied { bind } for pid=7627 comm="syz.3.498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 250.387304][ T30] audit: type=1400 audit(1787192295.610:711): avc: denied { write } for pid=7627 comm="syz.3.498" name="ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 250.416859][ T30] audit: type=1400 audit(1787192295.610:712): avc: denied { open } for pid=7627 comm="syz.3.498" path="/dev/ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 250.440340][ T30] audit: type=1400 audit(1787192295.610:713): avc: denied { ioctl } for pid=7627 comm="syz.3.498" path="/dev/ppp" dev="devtmpfs" ino=708 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 250.472894][ T10] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 250.540379][ T7645] netlink: 'syz.1.503': attribute type 1 has an invalid length. [ 250.617514][ T7645] 8021q: adding VLAN 0 to HW filter on device bond1 [ 250.642865][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 250.649364][ T10] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 250.691263][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 250.705626][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 250.727544][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 250.760524][ T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 250.773134][ T30] audit: type=1400 audit(1787192296.970:714): avc: denied { ioctl } for pid=7644 comm="syz.1.503" path="socket:[19206]" dev="sockfs" ino=19206 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 250.835609][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 250.904177][ T10] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 250.967141][ T10] usb 5-1: Manufacturer: syz [ 251.104140][ T10] usb 5-1: config 0 descriptor?? [ 251.129293][ T7645] 8021q: adding VLAN 0 to HW filter on device bond1 [ 251.214209][ T7645] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 251.265664][ T7645] bond1: (slave vti0): Error -95 calling set_mac_address [ 251.492842][ T10] rc_core: IR keymap rc-hauppauge not found [ 251.501633][ T10] Registered IR keymap rc-empty [ 251.510854][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 251.545644][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 251.554303][ T7648] gretap1: entered promiscuous mode [ 251.574383][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 251.623566][ T30] audit: type=1400 audit(1787192297.830:715): avc: denied { getopt } for pid=7654 comm="syz.2.504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 251.647713][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input9 [ 251.662988][ T7659] netlink: 8 bytes leftover after parsing attributes in process `syz.2.504'. [ 251.678577][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 251.687809][ T30] audit: type=1400 audit(1787192297.880:716): avc: denied { read } for pid=4954 comm="acpid" name="event4" dev="devtmpfs" ino=2873 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 251.720643][ T7662] netlink: 20 bytes leftover after parsing attributes in process `syz.2.504'. [ 251.735272][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 251.745716][ T30] audit: type=1400 audit(1787192297.880:717): avc: denied { open } for pid=4954 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2873 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 251.770222][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 251.790850][ T7648] bond1: (slave gretap1): making interface the new active one [ 251.791423][ T30] audit: type=1400 audit(1787192297.880:718): avc: denied { ioctl } for pid=4954 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2873 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 251.824213][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 251.852910][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 251.872895][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 251.887955][ T7648] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 251.897174][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 251.922950][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 251.952891][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 251.966051][ T7651] macvlan2: entered promiscuous mode [ 251.978179][ T7651] macvlan2: entered allmulticast mode [ 251.984080][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 251.993508][ T7651] bond1: entered promiscuous mode [ 252.005509][ T10] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 252.017055][ T10] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 252.026275][ T7651] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 252.096762][ T7651] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 252.147714][ T7651] bond1: left promiscuous mode [ 252.242414][ T5744] usb 5-1: USB disconnect, device number 11 [ 253.732945][ T10] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 253.813703][ T5600] Bluetooth: hci0: command 0x0406 tx timeout [ 253.934274][ T10] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 254.091760][ T10] usb 5-1: config 0 has no interfaces? [ 254.092902][ T942] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 254.105503][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.567366][ T10] usb 5-1: config 0 descriptor?? [ 254.707877][ T942] usb 4-1: unable to get BOS descriptor or descriptor too short [ 254.727860][ T942] usb 4-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 254.737178][ T7702] bond0: option slaves: invalid value (-veth0) [ 254.767062][ T942] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 254.868066][ T942] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 254.886248][ T942] usb 4-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 254.899442][ T942] usb 4-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 254.915653][ T942] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 254.929797][ T942] usb 4-1: config 1 interface 1 has no altsetting 0 [ 254.947075][ T942] usb 4-1: string descriptor 0 read error: -22 [ 254.949148][ T5715] usb 5-1: USB disconnect, device number 12 [ 254.957962][ T942] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.230523][ T942] usb 4-1: 2:0: failed to get current value for ch 0 (-32) [ 255.287327][ T942] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2) [ 255.296129][ T942] usb 4-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 255.306626][ T942] usb 4-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/1/1 [ 255.633841][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.640415][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.922327][ T942] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2) [ 256.093760][ T942] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2) [ 256.206570][ T942] usb 4-1: USB disconnect, device number 9 [ 257.714913][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 257.714946][ T30] audit: type=1400 audit(1787192303.920:722): avc: denied { audit_read } for pid=7719 comm="syz.2.523" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 258.868279][ T5600] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 258.882988][ T942] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 259.212028][ T942] usb 2-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 259.238995][ T942] usb 2-1: config 0 has no interfaces? [ 259.259114][ T942] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.282146][ T942] usb 2-1: config 0 descriptor?? [ 259.460474][ T7748] xt_hashlimit: size too large, truncated to 1048576 [ 259.602199][ T7749] netlink: 'syz.4.531': attribute type 27 has an invalid length. [ 260.252866][ T7749] bond0: (slave bond_slave_1): Releasing backup interface [ 261.151846][ T30] audit: type=1400 audit(1787192307.350:723): avc: denied { ioctl } for pid=7765 comm="syz.2.536" path="socket:[19445]" dev="sockfs" ino=19445 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 261.418742][ T942] usb 2-1: USB disconnect, device number 7 [ 261.882717][ T7766] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.891824][ T7766] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.012675][ T7759] mmap: syz.0.534 (7759) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 264.025686][ T30] audit: type=1400 audit(1787192310.230:724): avc: denied { mount } for pid=7804 comm="syz.4.543" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 264.188867][ T30] audit: type=1400 audit(1787192310.350:725): avc: denied { getopt } for pid=7804 comm="syz.4.543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 264.210292][ T30] audit: type=1400 audit(1787192310.410:726): avc: denied { unmount } for pid=7804 comm="syz.4.543" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 264.712299][ T30] audit: type=1400 audit(1787192310.910:727): avc: denied { read } for pid=7807 comm="syz.3.545" name="ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 265.312894][ T5775] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 265.449553][ T30] audit: type=1400 audit(1787192311.650:728): avc: denied { write } for pid=7806 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 265.512921][ T5775] usb 5-1: Using ep0 maxpacket: 8 [ 265.570472][ T5775] usb 5-1: unable to get BOS descriptor or descriptor too short [ 265.592409][ T5775] usb 5-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 0.40 [ 265.676982][ T5775] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.693318][ T5775] usb 5-1: Product: syz [ 265.707671][ T5775] usb 5-1: Manufacturer: syz [ 265.739493][ T30] audit: type=1400 audit(1787192311.930:729): avc: denied { write } for pid=7837 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 265.766816][ T5775] usb 5-1: SerialNumber: syz [ 265.771880][ T7818] faux_driver vgem: [drm] Unknown color mode 3; guessing buffer size. [ 266.006547][ T5264] veth1_vlan: left promiscuous mode [ 266.056167][ T30] audit: type=1400 audit(1787192311.970:730): avc: denied { ioctl } for pid=7814 comm="syz.1.546" path="/dev/dri/card0" dev="devtmpfs" ino=627 ioctlcmd=0x64b2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 266.306742][ T30] audit: type=1400 audit(1787192311.990:731): avc: denied { map } for pid=7814 comm="syz.1.546" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 266.489387][ T7847] sctp: [Deprecated]: syz.2.559 (pid 7847) Use of int in max_burst socket option. [ 266.489387][ T7847] Use struct sctp_assoc_value instead [ 267.022464][ T30] audit: type=1400 audit(1787192313.220:732): avc: denied { append } for pid=7855 comm="syz.1.550" name="001" dev="devtmpfs" ino=741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 267.068803][ T7857] netlink: 4 bytes leftover after parsing attributes in process `syz.1.550'. [ 267.545454][ T7866] syz_tun: entered promiscuous mode [ 267.606548][ T7865] syz_tun: left promiscuous mode [ 267.690580][ T30] audit: type=1400 audit(1787192313.890:733): avc: denied { write } for pid=7848 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 267.942975][ T7873] bond0: option slaves: invalid value (-veth0) [ 268.335863][ T5264] veth1_vlan: entered promiscuous mode [ 269.123180][ T5775] usb 5-1: USB disconnect, device number 13 [ 269.327248][ T7891] netlink: 20 bytes leftover after parsing attributes in process `syz.4.558'. [ 269.362667][ T5605] udevd[5605]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 269.460339][ T7900] bond0: option slaves: invalid value (-veth0) [ 269.497246][ T7895] syzkaller0: entered promiscuous mode [ 269.547567][ T7895] syzkaller0: entered allmulticast mode [ 269.581164][ T7899] tipc: Enabled bearer , priority 0 [ 269.709822][ T7895] tipc: Resetting bearer [ 269.723260][ T5775] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 269.771087][ T7892] tipc: Resetting bearer [ 269.840718][ T7892] tipc: Disabling bearer [ 269.917530][ T5775] usb 5-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.00 [ 269.964895][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 269.964928][ T30] audit: type=1400 audit(1787192316.170:735): avc: denied { ioctl } for pid=7906 comm="syz.1.562" path="socket:[20235]" dev="sockfs" ino=20235 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 270.017718][ T5775] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 270.040310][ T5775] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.100393][ T30] audit: type=1400 audit(1787192316.220:736): avc: denied { write } for pid=7906 comm="syz.1.562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 270.859795][ T7916] bond0: option slaves: invalid value (-veth0) [ 270.971741][ T30] audit: type=1400 audit(1787192317.170:737): avc: denied { write } for pid=7893 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 271.102794][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 271.769012][ T942] usb 5-1: USB disconnect, device number 14 [ 271.775204][ T5600] Bluetooth: hci5: Reading Intel version command failed (-71) [ 272.139217][ T30] audit: type=1400 audit(1787192318.200:738): avc: denied { write } for pid=7925 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 272.907930][ T30] audit: type=1400 audit(1787192319.110:739): avc: denied { read write } for pid=7928 comm="syz.3.569" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 272.939640][ T30] audit: type=1400 audit(1787192319.110:740): avc: denied { open } for pid=7928 comm="syz.3.569" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 273.303641][ T7942] netlink: 12 bytes leftover after parsing attributes in process `syz.3.571'. [ 273.348074][ T7942] netlink: 12 bytes leftover after parsing attributes in process `syz.3.571'. [ 274.103430][ T7971] bond0: option slaves: invalid value (-veth0) [ 274.149732][ T30] audit: type=1400 audit(1787192320.350:741): avc: denied { append } for pid=7972 comm="syz.1.577" name="comedi0" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 274.246485][ T30] audit: type=1400 audit(1787192320.390:742): avc: denied { write } for pid=7939 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 275.440446][ T7981] comedi comedi0: ni_at_a2150: a I/O base address must be specified [ 275.475513][ T7978] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 275.636679][ T30] audit: type=1400 audit(1787192321.840:743): avc: denied { write } for pid=7982 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 275.747771][ T30] audit: type=1400 audit(1787192321.840:744): avc: denied { create } for pid=7972 comm="syz.1.577" name="#9" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 275.847288][ T30] audit: type=1400 audit(1787192321.880:745): avc: denied { link } for pid=7972 comm="syz.1.577" name="#9" dev="tmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 275.935157][ T30] audit: type=1400 audit(1787192321.950:746): avc: denied { rename } for pid=7972 comm="syz.1.577" name="#a" dev="tmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 276.027903][ T30] audit: type=1400 audit(1787192322.080:747): avc: denied { write } for pid=7986 comm="syz.2.582" name="usb_gadget" dev="configfs" ino=2906 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 276.029011][ T7989] Config c/1 of g_uac2 needs at least one function. [ 276.125886][ T7989] udc usbip-vudc.0: failed to start g_uac2: -22 [ 276.132179][ T7989] configfs-gadget.g_uac2 gadget.32: probe with driver configfs-gadget.g_uac2 failed with error -22 [ 276.166751][ T30] audit: type=1400 audit(1787192322.100:748): avc: denied { write } for pid=7986 comm="syz.2.582" name="functions" dev="configfs" ino=21563 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 276.207723][ T7989] UDC core: g_uac2: couldn't find an available UDC or it's busy [ 276.251256][ T7997] overlayfs: failed to clone upperpath [ 276.259084][ T10] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 276.266891][ T30] audit: type=1400 audit(1787192322.180:749): avc: denied { write } for pid=7986 comm="syz.2.582" name="configs" dev="configfs" ino=21564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 276.444631][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 276.467571][ T10] usb 5-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 276.498063][ T10] usb 5-1: config 0 has no interfaces? [ 276.510311][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.549986][ T10] usb 5-1: config 0 descriptor?? [ 276.711400][ T30] audit: type=1400 audit(1787192322.910:750): avc: denied { mount } for pid=8006 comm="syz.2.586" name="/" dev="ramfs" ino=21579 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 276.795345][ T7988] netlink: 12 bytes leftover after parsing attributes in process `syz.4.581'. [ 276.812831][ T30] audit: type=1804 audit(1787192323.010:751): pid=8007 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.586" name="bus" dev="ramfs" ino=21581 res=1 errno=0 [ 276.857696][ T30] audit: type=1804 audit(1787192323.040:752): pid=8007 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.2.586" name="bus" dev="ramfs" ino=21581 res=1 errno=0 [ 276.894663][ T5817] usb 5-1: USB disconnect, device number 15 [ 277.094753][ T8012] bond0: option slaves: invalid value (-veth0) [ 277.856335][ T8032] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59 sclass=netlink_route_socket pid=8032 comm=syz.4.589 [ 278.005635][ T5744] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 278.185765][ T5744] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 278.192983][ T10] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 278.205056][ T5744] usb 2-1: config 0 has no interfaces? [ 278.221993][ T5744] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.231259][ T8049] bond0: option slaves: invalid value (-veth0) [ 278.247458][ T5744] usb 2-1: config 0 descriptor?? [ 278.295409][ T8050] netlink: 4 bytes leftover after parsing attributes in process `syz.0.593'. [ 278.366026][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 278.374822][ T10] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 278.419255][ T10] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 278.438240][ T10] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 278.469821][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 278.481496][ T10] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 278.482034][ T5744] usb 2-1: USB disconnect, device number 8 [ 278.504860][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 278.516301][ T10] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 278.531923][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.757298][ T10] usb 5-1: usb_control_msg returned -32 [ 278.763008][ T10] usbtmc 5-1:16.0: can't read capabilities [ 278.763495][ T8063] netlink: 8 bytes leftover after parsing attributes in process `syz.3.597'. [ 279.076779][ T8070] input: syz1 as /devices/virtual/input/input11 [ 279.194371][ T8032] usbtmc 5-1:16.0: send_request_dev_dep_msg_in returned -71 [ 279.223223][ T8032] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 279.238755][ T5715] usb 5-1: USB disconnect, device number 16 [ 279.298017][ T8072] netlink: 4 bytes leftover after parsing attributes in process `syz.1.600'. [ 280.675500][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 280.675516][ T30] audit: type=1400 audit(1787192326.880:756): avc: denied { name_bind } for pid=8085 comm="syz.2.605" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 280.717125][ T8086] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 280.881721][ T8091] bond0: option slaves: invalid value (-veth0) [ 280.896458][ T8092] netlink: 'syz.2.607': attribute type 1 has an invalid length. [ 280.944704][ T8092] 8021q: adding VLAN 0 to HW filter on device bond2 [ 280.979045][ T8094] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 282.409373][ T8114] bridge0: port 3(veth0) entered blocking state [ 282.416353][ T8114] bridge0: port 3(veth0) entered disabled state [ 282.423558][ T8114] veth0: entered allmulticast mode [ 282.430719][ T8114] veth0: entered promiscuous mode [ 282.440169][ T8115] trusted_key: encrypted_key: key user:syz not found [ 282.447903][ T8114] bridge0: port 3(veth0) entered blocking state [ 282.461053][ T8114] bridge0: port 3(veth0) entered forwarding state [ 282.489680][ T8116] netlink: 20 bytes leftover after parsing attributes in process `syz.3.611'. [ 284.301515][ T5775] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 284.514635][ T8141] tipc: Enabling of bearer rejected, failed to enable media [ 284.728284][ T5775] usb 2-1: unable to get BOS descriptor or descriptor too short [ 284.762580][ T5775] usb 2-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 284.920049][ T5775] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 285.126189][ T5775] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 285.229072][ T8139] syzkaller0: entered promiscuous mode [ 285.238715][ T5775] usb 2-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 285.259522][ T8139] syzkaller0: entered allmulticast mode [ 285.272426][ T5775] usb 2-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 285.286749][ T5775] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 285.299327][ T5775] usb 2-1: config 1 interface 1 has no altsetting 0 [ 285.326344][ T5775] usb 2-1: string descriptor 0 read error: -22 [ 285.327956][ T8151] netlink: 20 bytes leftover after parsing attributes in process `syz.3.620'. [ 285.357845][ T5775] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.064056][ T5775] usb 2-1: 2:0: failed to get current value for ch 0 (-32) [ 286.220978][ T8151] team0 (unregistering): Port device team_slave_0 removed [ 286.266222][ T8151] team0 (unregistering): Port device team_slave_1 removed [ 286.423764][ T5775] usb 2-1: 2:0: cannot get min/max values for control 2 (id 2) [ 286.436781][ T5775] usb 2-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 286.451853][ T5775] usb 2-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/1/1 [ 286.653226][ T30] audit: type=1400 audit(1787192332.730:757): avc: denied { append } for pid=8163 comm="syz.2.624" name="sg0" dev="devtmpfs" ino=803 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 286.931353][ T5775] usb 2-1: 2:0: cannot get min/max values for control 2 (id 2) [ 286.949704][ T30] audit: type=1400 audit(1787192332.730:758): avc: denied { ioctl } for pid=8163 comm="syz.2.624" path="/dev/sg0" dev="devtmpfs" ino=803 ioctlcmd=0x943e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 286.989177][ T30] audit: type=1400 audit(1787192333.120:759): avc: denied { getopt } for pid=8168 comm="syz.0.625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 287.020617][ T5775] usb 2-1: 2:0: cannot get min/max values for control 2 (id 2) [ 287.026520][ T30] audit: type=1400 audit(1787192333.180:760): avc: denied { connect } for pid=8168 comm="syz.0.625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 287.049831][ T30] audit: type=1400 audit(1787192333.180:761): avc: denied { bind } for pid=8168 comm="syz.0.625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 287.093722][ T5775] usb 2-1: USB disconnect, device number 9 [ 287.146736][ T30] audit: type=1400 audit(1787192333.190:762): avc: denied { write } for pid=8168 comm="syz.0.625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 287.207727][ T30] audit: type=1400 audit(1787192333.280:763): avc: denied { read append } for pid=8172 comm="syz.3.626" name="ptp0" dev="devtmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 287.287523][ T30] audit: type=1400 audit(1787192333.280:764): avc: denied { open } for pid=8172 comm="syz.3.626" path="/dev/ptp0" dev="devtmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 287.364497][ T8173] netlink: 4 bytes leftover after parsing attributes in process `syz.3.626'. [ 287.725807][ T8182] kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 288.702020][ T8195] netlink: 28 bytes leftover after parsing attributes in process `syz.4.631'. [ 288.892069][ T8195] netlink: 8 bytes leftover after parsing attributes in process `syz.4.631'. [ 289.018443][ T30] audit: type=1400 audit(1787192335.220:765): avc: denied { map } for pid=8200 comm="syz.1.632" path="socket:[21461]" dev="sockfs" ino=21461 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 289.097452][ T8201] netlink: 'syz.1.632': attribute type 1 has an invalid length. [ 289.209381][ T30] audit: type=1400 audit(1787192335.270:766): avc: denied { write } for pid=8174 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 289.439417][ T8208] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 290.179808][ T8208] bond3 (unregistering): Released all slaves [ 290.463059][ T942] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 290.838275][ T8211] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 291.282868][ T942] usb 5-1: Using ep0 maxpacket: 16 [ 291.306100][ T8201] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 291.329671][ T942] usb 5-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 291.388086][ T8215] bridge1: entered promiscuous mode [ 291.441909][ T942] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 291.496782][ T8232] misc userio: The device must be registered before sending interrupts [ 291.522064][ T8232] misc userio: The device must be registered before sending interrupts [ 291.574567][ T942] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 291.585450][ T942] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 291.626360][ T942] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.629731][ T8228] bond0: option slaves: invalid value (-veth0) [ 291.730569][ T942] usb 5-1: config 0 descriptor?? [ 291.802079][ T942] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input13 [ 291.945222][ T4954] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 292.048678][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 292.048695][ T30] audit: type=1400 audit(1787192338.250:768): avc: denied { append } for pid=8216 comm="syz.4.635" name="loop8" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 292.120119][ T4954] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 292.219160][ T30] audit: type=1400 audit(1787192338.420:769): avc: denied { watch_sb watch_reads } for pid=8234 comm="syz.0.639" path="/155/file0" dev="tmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 292.404864][ T7740] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 292.466675][ T4954] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 292.531374][ T4954] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 292.583375][ T4954] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 292.640627][ T4954] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 292.722868][ T5715] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 292.797519][ T8256] bond0: option slaves: invalid value (-veth0) [ 292.896638][ T5715] usb 3-1: unable to get BOS descriptor or descriptor too short [ 292.917787][ T5715] usb 3-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 292.944835][ T5715] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 292.965458][ T5715] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 292.995720][ T5715] usb 3-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 293.048569][ T5715] usb 3-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 293.104843][ T5715] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 293.147514][ T5715] usb 3-1: config 1 interface 1 has no altsetting 0 [ 293.166009][ T5715] usb 3-1: string descriptor 0 read error: -22 [ 293.184021][ T5715] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.944964][ T30] audit: type=1400 audit(1787192340.150:770): avc: denied { write } for pid=8233 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 293.980247][ T5715] usb 3-1: 2:0: failed to get current value for ch 0 (-32) [ 294.041157][ T5775] usb 5-1: USB disconnect, device number 17 [ 294.242131][ T5715] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2) [ 294.313821][ T5715] usb 3-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 294.342969][ T5715] usb 3-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/1/1 [ 294.407235][ T30] audit: type=1400 audit(1787192340.610:771): avc: denied { write } for pid=8272 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 295.026293][ T5715] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2) [ 295.230189][ T5715] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2) [ 295.314518][ T5715] usb 3-1: USB disconnect, device number 6 [ 295.511081][ T5600] Bluetooth: hci0: unexpected event for opcode 0x0c25 [ 295.527770][ T8294] netlink: 4 bytes leftover after parsing attributes in process `syz.2.652'. [ 295.685331][ T8301] bond0: option slaves: invalid value (-veth0) [ 295.874452][ T5715] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 295.971669][ T30] audit: type=1400 audit(1787192342.170:772): avc: denied { write } for pid=8286 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 296.043084][ T5715] usb 3-1: device descriptor read/64, error -71 [ 296.433050][ T5715] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 296.739353][ T30] audit: type=1400 audit(1787192342.940:773): avc: denied { write } for pid=8321 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 296.763460][ T5715] usb 3-1: device descriptor read/64, error -71 [ 296.910589][ T5715] usb usb3-port1: attempt power cycle [ 297.352873][ T5715] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 297.413612][ T5715] usb 3-1: device descriptor read/8, error -71 [ 298.142895][ T5715] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 298.266713][ T5715] usb 3-1: device descriptor read/8, error -71 [ 298.397487][ T5715] usb usb3-port1: unable to enumerate USB device [ 298.479167][ T8344] netlink: 28 bytes leftover after parsing attributes in process `syz.3.661'. [ 298.552654][ T8344] netlink: 64 bytes leftover after parsing attributes in process `syz.3.661'. [ 298.596194][ T8344] netlink: 20 bytes leftover after parsing attributes in process `syz.3.661'. [ 298.699859][ T5600] Bluetooth: hci4: command 0x0406 tx timeout [ 298.862918][ T5715] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 299.055598][ T5715] usb 2-1: unable to get BOS descriptor or descriptor too short [ 299.159286][ T30] audit: type=1400 audit(1787192345.350:774): avc: denied { ioctl } for pid=8357 comm="syz.3.665" path="socket:[22707]" dev="sockfs" ino=22707 ioctlcmd=0x89fa scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 299.501589][ T5715] usb 2-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 299.539328][ T5715] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 299.550375][ T30] audit: type=1400 audit(1787192345.730:775): avc: denied { write } for pid=8335 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 299.599376][ T8365] bond0: option slaves: invalid value (-veth0) [ 299.606169][ T5715] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 299.641598][ T5715] usb 2-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 299.707683][ T5715] usb 2-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 299.845935][ T5715] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 299.904054][ T5715] usb 2-1: config 1 interface 1 has no altsetting 0 [ 299.925700][ T30] audit: type=1400 audit(1787192346.120:776): avc: denied { write } for pid=8367 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 299.985951][ T5715] usb 2-1: string descriptor 0 read error: -22 [ 300.016435][ T5715] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.294430][ T8376] netlink: 4 bytes leftover after parsing attributes in process `syz.4.670'. [ 300.340082][ T5715] usb 2-1: 2:0: failed to get current value for ch 0 (-32) [ 301.055466][ T5715] usb 2-1: 2:0: cannot get min/max values for control 2 (id 2) [ 301.081949][ T5715] usb 2-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 301.127702][ T5715] usb 2-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/1/1 [ 301.302921][ T5715] usb 2-1: 2:0: cannot get min/max values for control 2 (id 2) [ 301.421328][ T5715] usb 2-1: 2:0: cannot get min/max values for control 2 (id 2) [ 301.613743][ T5715] usb 2-1: USB disconnect, device number 10 [ 303.140442][ T8404] netlink: 4 bytes leftover after parsing attributes in process `syz.1.675'. [ 304.862877][ T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 304.991442][ T8439] bond0: option slaves: invalid value (-veth0) [ 305.103494][ T9] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 305.131483][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 305.148593][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 305.173125][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.551226][ T9] usb 2-1: config 0 descriptor?? [ 306.698033][ T9] input: HID 1b1c:1b02 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:1B1C:1B02.0002/input/input14 [ 306.934189][ T9] corsair 0003:1B1C:1B02.0002: input,hidraw0: USB HID v0.00 Joystick [HID 1b1c:1b02] on usb-dummy_hcd.1-1/input0 [ 307.004984][ T9] corsair 0003:1B1C:1B02.0002: Failed to get K90 initial state (error -71). [ 307.042904][ T5715] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 307.064337][ T9] usb 2-1: USB disconnect, device number 11 [ 307.203926][ T5715] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 307.308557][ T8454] overlayfs: failed to clone upperpath [ 307.673963][ T5715] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 307.690571][ T5715] usb 3-1: config 0 has no interface number 0 [ 307.725341][ T5715] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.756660][ T9] ------------[ cut here ]------------ [ 307.762159][ T9] ODEBUG: free active (active state 0) object: ffff888032cf3ac8 object type: work_struct hint: k90_record_led_work+0x0/0x1f0 [ 307.775535][ T9] WARNING: lib/debugobjects.c:629 at debug_print_object+0x198/0x2b0, CPU#0: kworker/0:0/9 [ 307.785725][ T9] Modules linked in: [ 307.790395][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 307.801248][ T9] Tainted: [L]=SOFTLOCKUP [ 307.805653][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 307.815901][ T9] Workqueue: usb_hub_wq hub_event [ 307.820961][ T9] RIP: 0010:debug_print_object+0x1a5/0x2b0 [ 307.827399][ T9] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d 48 cd 23 0c 41 56 48 8b 14 ed 40 38 60 8c 4c 89 e6 <67> 48 0f b9 3a 58 83 05 62 e6 18 0c 01 48 83 c4 18 5b 5d 41 5c 41 [ 307.848161][ T9] RSP: 0018:ffffc900000e7208 EFLAGS: 00010246 [ 307.855419][ T9] RAX: dffffc0000000000 RBX: ffffc900000e72f0 RCX: 0000000000000000 [ 307.863464][ T9] RDX: ffffffff8c603780 RSI: ffffffff8c603320 RDI: ffffffff914d7f60 [ 307.871436][ T9] RBP: 0000000000000003 R08: ffff888032cf3ac8 R09: ffffffff8bee2560 [ 307.879451][ T9] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8c603320 [ 307.887940][ T9] R13: ffffffff8bee25a0 R14: ffffffff88faf3a0 R15: ffffc900000e7308 [ 307.896998][ T9] FS: 0000000000000000(0000) GS:ffff888123bc8000(0000) knlGS:0000000000000000 [ 307.906207][ T9] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 307.912830][ T9] CR2: 000055ed8e1f8680 CR3: 0000000096746000 CR4: 00000000003526f0 [ 307.920904][ T9] Call Trace: [ 307.924414][ T9] [ 307.927682][ T9] ? __pfx_k90_record_led_work+0x10/0x10 [ 307.934974][ T9] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 307.940894][ T9] debug_check_no_obj_freed+0x4da/0x630 [ 307.946492][ T9] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 307.953275][ T9] ? kasan_quarantine_put+0x104/0x240 [ 307.958650][ T9] ? lockdep_hardirqs_on+0x7d/0x110 [ 307.964686][ T9] ? corsair_remove+0xfa/0x2f0 [ 307.969483][ T9] ? corsair_remove+0x20/0x2f0 [ 307.974281][ T9] kfree+0x3d6/0x6c0 [ 307.978433][ T9] ? mutex_is_locked+0x17/0x60 [ 307.983257][ T9] corsair_remove+0xfa/0x2f0 [ 307.987887][ T9] ? __pfx_corsair_remove+0x10/0x10 [ 307.993519][ T9] hid_device_remove+0xd1/0x200 [ 307.998393][ T9] ? __pfx_hid_device_remove+0x10/0x10 [ 308.004582][ T9] device_remove+0xcb/0x180 [ 308.009081][ T9] device_release_driver_internal+0x44e/0x620 [ 308.016229][ T9] bus_remove_device+0x2bc/0x560 [ 308.021158][ T9] ? __pfx_bus_remove_device+0x10/0x10 [ 308.026646][ T9] ? __pfx_device_remove_attrs+0x10/0x10 [ 308.032272][ T9] device_del+0x376/0x9b0 [ 308.036644][ T9] ? __pfx_device_del+0x10/0x10 [ 308.041481][ T9] ? do_raw_spin_lock+0x128/0x260 [ 308.046524][ T9] ? find_held_lock+0x2b/0x80 [ 308.051483][ T9] hid_destroy_device+0x19c/0x240 [ 308.058573][ T9] usbhid_disconnect+0xa0/0xe0 [ 308.064065][ T9] usb_unbind_interface+0x1dd/0x9e0 [ 308.069308][ T9] ? __pfx_usb_unbind_interface+0x10/0x10 [ 308.075075][ T9] device_remove+0x12a/0x180 [ 308.079777][ T9] device_release_driver_internal+0x44e/0x620 [ 308.085897][ T9] bus_remove_device+0x2bc/0x560 [ 308.090944][ T9] ? __pfx_bus_remove_device+0x10/0x10 [ 308.096454][ T9] ? __pfx_device_remove_attrs+0x10/0x10 [ 308.102559][ T9] device_del+0x376/0x9b0 [ 308.106972][ T9] ? __pfx_device_del+0x10/0x10 [ 308.111842][ T9] ? kobject_put+0xb9/0x640 [ 308.116439][ T9] usb_disable_device+0x367/0x810 [ 308.121494][ T9] usb_disconnect+0x2e2/0x9a0 [ 308.126360][ T9] hub_event+0x1bb1/0x4420 [ 308.130804][ T9] ? __lock_acquire+0x4c5/0x1ec0 [ 308.135781][ T9] ? do_raw_spin_unlock+0x145/0x1e0 [ 308.140984][ T9] ? __pfx_hub_event+0x10/0x10 [ 308.145795][ T9] ? debug_object_deactivate+0x2e4/0x3b0 [ 308.151427][ T9] ? rcu_is_watching+0x13/0xc0 [ 308.156893][ T9] process_one_work+0xa23/0x1940 [ 308.161840][ T9] ? __pfx_process_one_work+0x10/0x10 [ 308.168211][ T9] ? __pfx_hub_event+0x10/0x10 [ 308.173058][ T9] worker_thread+0x5ef/0xe50 [ 308.178183][ T9] ? kthread+0x13a/0x450 [ 308.182415][ T9] ? __pfx_worker_thread+0x10/0x10 [ 308.187753][ T9] kthread+0x373/0x450 [ 308.191816][ T9] ? __pfx_kthread+0x10/0x10 [ 308.196507][ T9] ret_from_fork+0x730/0xd60 [ 308.201118][ T9] ? __pfx_ret_from_fork+0x10/0x10 [ 308.206464][ T9] ? __switch_to+0x800/0x10f0 [ 308.211140][ T9] ? __pfx_kthread+0x10/0x10 [ 308.216303][ T9] ret_from_fork_asm+0x1a/0x30 [ 308.221720][ T9] [ 308.225383][ T9] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 308.232775][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 308.243466][ T9] Tainted: [L]=SOFTLOCKUP [ 308.247942][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 308.257985][ T9] Workqueue: usb_hub_wq hub_event [ 308.263008][ T9] Call Trace: [ 308.266271][ T9] [ 308.269343][ T9] dump_stack_lvl+0x100/0x190 [ 308.274029][ T9] vpanic+0x553/0x970 [ 308.278170][ T9] ? __pfx_vpanic+0x10/0x10 [ 308.283014][ T9] panic+0xd1/0xe0 [ 308.286731][ T9] ? __pfx_panic+0x10/0x10 [ 308.291137][ T9] check_panic_on_warn.cold+0x19/0x34 [ 308.296489][ T9] ? debug_print_object+0x198/0x2b0 [ 308.301667][ T9] __warn.cold+0x191/0x318 [ 308.306068][ T9] __report_bug+0x30f/0x440 [ 308.310652][ T9] ? debug_print_object+0x198/0x2b0 [ 308.315835][ T9] ? __pfx___report_bug+0x10/0x10 [ 308.320845][ T9] ? lock_acquire+0x1b9/0x370 [ 308.325596][ T9] ? mark_held_locks+0x40/0x70 [ 308.330346][ T9] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 308.336244][ T9] ? lockdep_hardirqs_on+0x7d/0x110 [ 308.341431][ T9] report_bug_entry+0xe2/0x290 [ 308.346291][ T9] ? debug_print_object+0x1a5/0x2b0 [ 308.351491][ T9] handle_bug+0x1cd/0x2a0 [ 308.355814][ T9] exc_invalid_op+0x17/0x50 [ 308.360570][ T9] asm_exc_invalid_op+0x1a/0x20 [ 308.365739][ T9] RIP: 0010:debug_print_object+0x1a5/0x2b0 [ 308.371542][ T9] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d 48 cd 23 0c 41 56 48 8b 14 ed 40 38 60 8c 4c 89 e6 <67> 48 0f b9 3a 58 83 05 62 e6 18 0c 01 48 83 c4 18 5b 5d 41 5c 41 [ 308.391722][ T9] RSP: 0018:ffffc900000e7208 EFLAGS: 00010246 [ 308.397771][ T9] RAX: dffffc0000000000 RBX: ffffc900000e72f0 RCX: 0000000000000000 [ 308.405726][ T9] RDX: ffffffff8c603780 RSI: ffffffff8c603320 RDI: ffffffff914d7f60 [ 308.413765][ T9] RBP: 0000000000000003 R08: ffff888032cf3ac8 R09: ffffffff8bee2560 [ 308.421720][ T9] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8c603320 [ 308.429755][ T9] R13: ffffffff8bee25a0 R14: ffffffff88faf3a0 R15: ffffc900000e7308 [ 308.437714][ T9] ? __pfx_k90_record_led_work+0x10/0x10 [ 308.448306][ T9] ? __pfx_k90_record_led_work+0x10/0x10 [ 308.453946][ T9] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 308.460697][ T9] debug_check_no_obj_freed+0x4da/0x630 [ 308.466682][ T9] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 308.473020][ T9] ? kasan_quarantine_put+0x104/0x240 [ 308.478584][ T9] ? lockdep_hardirqs_on+0x7d/0x110 [ 308.484254][ T9] ? corsair_remove+0xfa/0x2f0 [ 308.489155][ T9] ? corsair_remove+0x20/0x2f0 [ 308.493945][ T9] kfree+0x3d6/0x6c0 [ 308.497854][ T9] ? mutex_is_locked+0x17/0x60 [ 308.502614][ T9] corsair_remove+0xfa/0x2f0 [ 308.507430][ T9] ? __pfx_corsair_remove+0x10/0x10 [ 308.512744][ T9] hid_device_remove+0xd1/0x200 [ 308.517592][ T9] ? __pfx_hid_device_remove+0x10/0x10 [ 308.523121][ T9] device_remove+0xcb/0x180 [ 308.527627][ T9] device_release_driver_internal+0x44e/0x620 [ 308.533680][ T9] bus_remove_device+0x2bc/0x560 [ 308.538605][ T9] ? __pfx_bus_remove_device+0x10/0x10 [ 308.544074][ T9] ? __pfx_device_remove_attrs+0x10/0x10 [ 308.549693][ T9] device_del+0x376/0x9b0 [ 308.554004][ T9] ? __pfx_device_del+0x10/0x10 [ 308.559649][ T9] ? do_raw_spin_lock+0x128/0x260 [ 308.564669][ T9] ? find_held_lock+0x2b/0x80 [ 308.569363][ T9] hid_destroy_device+0x19c/0x240 [ 308.574395][ T9] usbhid_disconnect+0xa0/0xe0 [ 308.579157][ T9] usb_unbind_interface+0x1dd/0x9e0 [ 308.584381][ T9] ? __pfx_usb_unbind_interface+0x10/0x10 [ 308.590106][ T9] device_remove+0x12a/0x180 [ 308.595069][ T9] device_release_driver_internal+0x44e/0x620 [ 308.601149][ T9] bus_remove_device+0x2bc/0x560 [ 308.606073][ T9] ? __pfx_bus_remove_device+0x10/0x10 [ 308.611513][ T9] ? __pfx_device_remove_attrs+0x10/0x10 [ 308.617139][ T9] device_del+0x376/0x9b0 [ 308.621455][ T9] ? __pfx_device_del+0x10/0x10 [ 308.626310][ T9] ? kobject_put+0xb9/0x640 [ 308.630801][ T9] usb_disable_device+0x367/0x810 [ 308.635864][ T9] usb_disconnect+0x2e2/0x9a0 [ 308.640641][ T9] hub_event+0x1bb1/0x4420 [ 308.645053][ T9] ? __lock_acquire+0x4c5/0x1ec0 [ 308.650073][ T9] ? do_raw_spin_unlock+0x145/0x1e0 [ 308.655269][ T9] ? __pfx_hub_event+0x10/0x10 [ 308.660028][ T9] ? debug_object_deactivate+0x2e4/0x3b0 [ 308.665746][ T9] ? rcu_is_watching+0x13/0xc0 [ 308.670599][ T9] process_one_work+0xa23/0x1940 [ 308.675889][ T9] ? __pfx_process_one_work+0x10/0x10 [ 308.681252][ T9] ? __pfx_hub_event+0x10/0x10 [ 308.686467][ T9] worker_thread+0x5ef/0xe50 [ 308.691064][ T9] ? kthread+0x13a/0x450 [ 308.695304][ T9] ? __pfx_worker_thread+0x10/0x10 [ 308.701000][ T9] kthread+0x373/0x450 [ 308.705073][ T9] ? __pfx_kthread+0x10/0x10 [ 308.709658][ T9] ret_from_fork+0x730/0xd60 [ 308.714250][ T9] ? __pfx_ret_from_fork+0x10/0x10 [ 308.719378][ T9] ? __switch_to+0x800/0x10f0 [ 308.724743][ T9] ? __pfx_kthread+0x10/0x10 [ 308.729458][ T9] ret_from_fork_asm+0x1a/0x30 [ 308.734348][ T9] [ 308.737594][ T9] Kernel Offset: disabled [ 308.742227][ T9] Rebooting in 86400 seconds..