last executing test programs: 11.876285271s ago: executing program 2 (id=437): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a0000070800024000000002090001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00220f000000560900a1004daf25cee2d5d1c1"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCAPPLICATION(r1, 0x4802, 0x9) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, 0xb, 0x6, 0x101, 0x0, 0x0, {0xa}, [@IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}, @IPSET_ATTR_LINENO={0x8}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x14000000}, 0x8010) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='projid_map\x00') read$FUSE(r4, &(0x7f0000004840)={0x2020}, 0x2020) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c000000180001002cbd7000000000000a100000fc02ff000000000008000400", @ANYRES32=r3, @ANYBLOB="060015000800000010001680"], 0x3c}}, 0x0) 8.395390503s ago: executing program 2 (id=449): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket(0x2, 0x80805, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1000000000a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000025300)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0xa000200) r3 = semget$private(0x0, 0x3, 0x34) semtimedop(r3, 0x0, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, 0x0, 0x20, 0x1) acct(0x0) sendmsg$BATADV_CMD_TP_METER(r1, 0x0, 0x4004855) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}], 0x1, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a0500"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}}, 0x90) 7.764470914s ago: executing program 1 (id=451): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) close(0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./dev/cpu_dma_latency\x00', 0x0, 0x0) read(r2, 0x0, 0x0) 6.254121736s ago: executing program 2 (id=453): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x28843, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r1, 0xaea2, 0xffffffffffffffff) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@gid}, {@mode={'mode', 0x3d, 0xd}}, {@uid={'uid', 0x3d, 0xee01}}]}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mount$bpf(0x200000002000, &(0x7f0000000440)='./file0/../file0\x00', &(0x7f0000000000), 0x40, 0x0) ioctl$KVM_SET_TSC_KHZ_cpu(r2, 0xaea2, 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.606845856s ago: executing program 1 (id=457): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket(0x2, 0x80805, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1000000000a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000025300)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0xa000200) r3 = semget$private(0x0, 0x3, 0x34) semtimedop(r3, 0x0, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, 0x0, 0x20, 0x1) acct(0x0) sendmsg$BATADV_CMD_TP_METER(r1, 0x0, 0x4004855) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}], 0x1, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a05000100"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}}, 0x90) 5.487799867s ago: executing program 4 (id=458): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/ipc\x00') setns(r0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_clone(0x80, &(0x7f0000000000)="1065c4ca530650d2af5b6f7ec8bfbbebca6fde5ada7d942aa5b31a25a3897ab8b8f3586eb8a16fb56d952d4872d3dcc9e8bd2cee319ab12cd95a6bcc46b85c2dc5a24e86dffdf44bf89547ab368cb36c96769cbcb20b412866b2ca2576359cd82edb83744fbfbc263b8a73ad4707732873bbce0bb370ed39c7", 0x79, &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000140)="0be620cf4de168595c6d1d1104941c757ddc26d112b0b90d6bbff3090880dbb31e70ffaa86737b6dd5c970c22d5831fa5a435282e43e344cea13f544567dcffd22114ed9bfab6412ebb9dc104176caaef8bf9339120c390e629f8c16b40669190142bbcf4a2fdbb40acb03cee037a192776d5a28f11d3adddea000c87deb7f22c6bcc310b80962f3fc7db7f813e8287e6666c4380dc6c1137445716e77f86afcb5b8254b85b7a73c96917965df4dcd99b2ae1a5e1a33334ffdbdf8f8d075b4cb1193df4cd8e4c69e2c9e33db27c8f9") r2 = syz_open_procfs(r1, &(0x7f0000000280)='fdinfo/3\x00') read$msr(r2, &(0x7f0000025300)=""/102366, 0x18fde) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) 5.051949379s ago: executing program 2 (id=460): openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000100000007"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="882f1242a03c3f98722780b605a7", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1df) mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='myproc\x00', 0x0, 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x2140280, 0x0, 0x0, 0x0, {0x20080021}, 0x0, 0x0, 0x0, &(0x7f0000000340)}, 0x58) openat(0xffffffffffffff9c, &(0x7f00000001c0)='myproc\x00', 0x280, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r2, 0x0, 0x0) r3 = openat(r2, &(0x7f0000000140)='myproc\x00', 0x8103, 0xa) write(r3, &(0x7f0000000240)='2\n', 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi.usb0/out_ports\x00', 0x1, 0x0) write(r4, &(0x7f00000002c0)='2', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000400)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r5, &(0x7f00000003c0)='dummy_udc.0\n', 0xc) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) 4.972172073s ago: executing program 1 (id=463): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x8000}) r0 = socket(0xf, 0x5, 0x0) socket$unix(0x1, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) openat$uhid(0xffffff9c, 0x0, 0x2, 0x0) (async) openat$uhid(0xffffff9c, 0x0, 0x2, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xa8442, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xa8442, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'ip6gretap0\x00', 0x2}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x7ffe}, {0x6, 0xffff}, {0xffe0, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'pimreg\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x24, 0x24, 0x20, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xfff3, 0x9}, {0xb, 0x9}, {0x7, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000054}, 0x4000000) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r5, &(0x7f0000000280)=[{&(0x7f0000000300)="94", 0x1}, {0x0}], 0x2) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r6, r6, 0x0, 0x200600) (async) sendfile(r6, r6, 0x0, 0x200600) sendmsg$sock(0xffffffffffffffff, 0xfffffffffffffffc, 0x0) (async) sendmsg$sock(0xffffffffffffffff, 0xfffffffffffffffc, 0x0) io_uring_setup(0x3a63, &(0x7f0000000180)={0x0, 0x8274, 0x40, 0x1, 0x846}) (async) r7 = io_uring_setup(0x3a63, &(0x7f0000000180)={0x0, 0x8274, 0x40, 0x1, 0x846}) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f00000017c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001700)=""/152, 0x98}], 0x4) (async) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f00000017c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001700)=""/152, 0x98}], 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x3, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) io_uring_register$IORING_REGISTER_FILES(r7, 0x1e, &(0x7f0000000000)=[r7], 0x1) 4.971996864s ago: executing program 4 (id=464): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c00000015000103"], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x6b7e369c4a37b0ea) (fail_nth: 2) 4.538842596s ago: executing program 4 (id=465): r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0xfffffffffffffef1, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x7d1d674c378b327c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100"], 0xb0}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000102505a1a44000000001010902440001fd00000009040000ff0202ffff052406000005240000000d240f010000000000000000000905810320000000000905820220000000000905030208"], 0x0) socket$inet6_sctp(0xa, 0x2, 0x84) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_open_dev$media(0x0, 0x4, 0x10000) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x0, 0xffff}, 0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') pread64(r3, &(0x7f0000000280)=""/172, 0xac, 0xe0) 4.336968112s ago: executing program 1 (id=466): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000001840)) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x6, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r2, 0x0, &(0x7f0000000200)={0x2e, 0x70, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000040)=@new_dev={0x4, 0x4d3, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) socket(0x2000000015, 0x80005, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x1, 0x121000) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x4, 0x1000002, 0x238}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x8, 0x2, 0x134}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x1000, 0x40050001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6, 0x200, 0x2, 0xf7ffffff, 0x0, r7}}], 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setresgid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 3.179863076s ago: executing program 2 (id=469): socket$nl_route(0x10, 0x3, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) socket$netlink(0x10, 0x3, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x2000004, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nvmet\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/nvmet/subsystems\x00', 0x1ff) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000000)={0x0, 0x1, 0x4, 0x8}) removexattr(&(0x7f0000000280)='./config/nvmet/subsystems/testnqn/attr_allow_any_host\x00', &(0x7f00000002c0)=@random={'osx.', 'fd'}) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f00000001c0)={0x1, 0x2, 0x3, 0xea}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/testnqn/attr_allow_any_host\x00', 0x2, 0x0) write(r1, &(0x7f0000000180)='1', 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r2, &(0x7f0000006840)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$AUTOFS_IOC_READY(r1, 0x9360, 0x3675) syz_fuse_handle_req(r2, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r2, &(0x7f0000004200)={0x50, 0x0, r3, {0x7, 0x29, 0x0, 0x0, 0x2000, 0x200, 0xfffffffe, 0x5b, 0x0, 0x0, 0x0, 0x3}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0x1, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, 0x4000002, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000, 0x0, r4, r5, 0x440}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) getpid() ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x545c, 0x0) landlock_restrict_self(r0, 0xe) 3.071083001s ago: executing program 2 (id=470): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x5, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$packet(0x11, 0x3, 0x300) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2081, 0x0) open_by_handle_at(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="20000000f1000100", @ANYRES64=r1], 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYRES64=r2, @ANYRES64=r0], 0x1c}, 0x1, 0x0, 0x0, 0x4000064}, 0x20000004) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r10], 0x1c}}, 0x840) sendmsg$NFC_CMD_LLC_SDREQ(r3, &(0x7f0000000900)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000008c0)={&(0x7f0000000600)={0x2b8, r4, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_LLC_SDP={0x3c, 0x13, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [{0x4}, {0x5, 0x1, '['}, {0xa, 0x1, ':[)\xea!.'}, {0x5, 0x1, '\x9b'}, {0x4}, {0x5, 0x1, '+'}, {0x6, 0x1, ')}'}]}]}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_LLC_SDP={0xe0, 0x13, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [{0x5, 0x1, ','}, {0xe, 0x1, '\xe7,,:#$%--,'}, {0x8, 0x1, '!^)\\'}, {0x6, 0x1, '\xfa^'}, {0x4}, {0xa, 0x1, ')-:{.\xe3'}]}, {0x30, 0x0, 0x0, 0x1, [{0xc, 0x1, '.::$/.?$'}, {0xb, 0x1, '-*@})%['}, {0xa, 0x1, '!]&^!)'}, {0x4}, {0x4}]}, {0x34, 0x0, 0x0, 0x1, [{0xb, 0x1, '+\x9e$+-{$'}, {0x9, 0x1, '$-(\\&'}, {0x6, 0x1, '^}'}, {0x7, 0x1, '::@'}, {0x8, 0x1, '^[)$'}]}, {0x20, 0x0, 0x0, 0x1, [{0x5, 0x1, '\\'}, {0x5, 0x1, '^'}, {0x4}, {0x6, 0x1, '{&'}]}, {0x1c, 0x0, 0x0, 0x1, [{0x8, 0x1, '.$]-'}, {0x4}, {0xa, 0x1, '\xa9+\xc4}\xae%'}]}]}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_LLC_SDP={0x30, 0x13, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [{0x5, 0x1, '$'}, {0x5, 0x1, '+'}, {0xa, 0x1, '{.\'{%%'}, {0x9, 0x1, '..\\\'#'}]}]}, @NFC_ATTR_LLC_SDP={0x50, 0x13, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [{0x9, 0x1, '{#%[\''}, {0x4}, {0x6, 0x1, '[{'}]}, {0x30, 0x0, 0x0, 0x1, [{0x10, 0x1, '/!\x04:]:/$[$!:'}, {0xb, 0x1, './#}(,]'}, {0x8, 0x1, ':\\&\xfd'}, {0x7, 0x1, '&!%'}]}]}, @NFC_ATTR_LLC_SDP={0x10, 0x13, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [{0x5, 0x1, ','}]}]}, @NFC_ATTR_LLC_SDP={0xe0, 0x13, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [{0x4}, {0x4}, {0x4}, {0x8, 0x1, '}#:+'}, {0x7, 0x1, '[{*'}, {0x5, 0x1, '+'}, {0x5, 0x1, '$'}, {0x6, 0x1, '%^'}, {0x4}, {0x6, 0x1, 'p\x87'}]}, {0x24, 0x0, 0x0, 0x1, [{0x4}, {0x4}, {0x6, 0x1, '[\''}, {0xd, 0x1, ' !?\xb75%H\x11\xa4'}]}, {0x10, 0x0, 0x0, 0x1, [{0xc, 0x1, '-&/^[^[!'}]}, {0x58, 0x0, 0x0, 0x1, [{0xa, 0x1, '$\xa0}\\/*'}, {0x6, 0x1, '.@'}, {0x13, 0x1, '#\xb1&$+\xb2R}\'&-=\v(@'}, {0x4}, {0x4}, {0x5, 0x1, '!'}, {0x5, 0x1, '\\'}, {0x6, 0x1, '-%'}, {0x4}, {0x7, 0x1, '/{&'}]}, {0xc, 0x0, 0x0, 0x1, [{0x5, 0x1, '-'}]}]}]}, 0x2b8}, 0x1, 0x0, 0x0, 0x10}, 0x4000) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x40040}, 0x6b7e369c4a37b06a) 2.321601745s ago: executing program 0 (id=472): r0 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='secret\x00', &(0x7f0000000100)='=qAAAAAAAAAAAAAA=BAAA+AAAAAAAAAACAAAAA==\x00', 0x0) (fail_nth: 2) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, 0x0, 0x10000, 0x0) ioctl$KDGKBENT(r1, 0x4b46, 0x0) bind(r1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$kcm(0x23, 0x5, 0x0) listen(r3, 0x800) listen(r3, 0x10000) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="000c00000000000014001280090001007663616e0000000016577b7357d793382c0400028008004040", @ANYRESDEC=r3, @ANYBLOB="14cfd61d13da3454a2a65012ebcfde082710c9b9cf291d730a969b2ada2673c285429f0cb4eec1a2bfe9c7ed7f4548c55300b80d98e0694d0921a6b9db41c1a93a0c564febfaae795fae2192c19f0c5b140794c8cd3fdd3de34dd7f05d7314c5267cfba7a5400fc2eafa62099602003a28bcf114efe8199171daeffa24d6a125c150795d5ca43d381644feb10f645e97061029811be27dbb5c77eb4b1f8d77be38e0424b38cdb6c335b85059994c97c228c2e8e808ba59ce85a4196ec19a813a63"], 0x3c}}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) gettid() fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f00000004c0), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_ECN={0x8, 0x6, 0x1}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x51}, 0x0) r6 = eventfd2(0x74a6, 0x0) writev(r6, &(0x7f0000001780)=[{&(0x7f0000000280)}], 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0xf}, 0x1c) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x180) 1.999831963s ago: executing program 0 (id=473): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket(0x2, 0x80805, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1000000000a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000025300)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0xa000200) r3 = semget$private(0x0, 0x3, 0x34) semtimedop(r3, 0x0, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, 0x0, 0x20, 0x1) acct(0x0) sendmsg$BATADV_CMD_TP_METER(r1, 0x0, 0x4004855) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}], 0x1, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a05000100"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}}, 0x90) 1.62580077s ago: executing program 3 (id=474): r0 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='secret\x00', &(0x7f0000000100)='=qAAAAAAAAAAAAAA=BAAA+AAAAAAAAAACAAAAA==\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, 0x0, 0x10000, 0x0) ioctl$KDGKBENT(r1, 0x4b46, 0x0) bind(r1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$kcm(0x23, 0x5, 0x0) listen(r2, 0x800) listen(r2, 0x10000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x102100, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f00000004c0)={0x1, 0x0, [{0x6e0, 0x0, 0x400000000000000}]}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000017c0)=@newtaction={0x1444, 0x30, 0x4, 0x70bd29, 0x25dfdbfd, {}, [{0x1430, 0x1, [@m_pedit={0x110c, 0x12, 0x0, 0x0, {{0xa}, {0x1050, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x13c, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x54, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}, @TCA_PEDIT_PARMS={0xf10, 0x2, {{{0x1, 0x3, 0x2, 0xffff5897, 0x7}, 0x64, 0x1, [{0x7, 0x0, 0x124, 0x0, 0xb, 0x3853}, {0x1, 0x7fffffff, 0x0, 0x7fffffff, 0x100, 0x7}, {0xc000000, 0x1, 0x80000000, 0x3, 0xa3, 0x1bd}, {0x7, 0x4, 0x8000, 0x8, 0x9, 0x5}, {0x7, 0x2, 0x7, 0x7, 0xffffffff, 0x9}, {0xe, 0x86d6, 0xffff, 0x0, 0x4, 0x9}, {0xfd, 0x5, 0x9, 0xfffffffe, 0x9, 0xb842}, {0x7, 0x10, 0x7fffffff, 0xfffffffd, 0xff}, {0x2, 0x4, 0xf, 0x0, 0x7, 0xe}, {0x2, 0x6, 0x6, 0x2, 0x7a, 0x40}]}, [{0xe822, 0x1000, 0xf, 0x4, 0x3, 0x3}, {0x108, 0x9, 0x2, 0x3, 0x1, 0x8}, {0x8, 0xfce, 0x1, 0x7, 0x5, 0x6}, {0x0, 0x2, 0xf1, 0xf, 0xe, 0x8}, {0x5, 0x400, 0x7, 0x1000, 0x40, 0x2}, {0xffffffff, 0x6, 0x1, 0x9, 0x67, 0xca8}, {0x922556f4, 0x7ff, 0x1, 0x0, 0x400, 0x8}, {0x1, 0x0, 0x86, 0x8, 0x1, 0x9}, {0x8, 0x46bc, 0x7fff, 0x5, 0xa}, {0x20f, 0x7, 0x4, 0xf, 0x5, 0x81}, {0x1, 0x7f, 0xf6d, 0x2, 0x6ba8, 0x1}, {0x7fffffff, 0x9, 0xfff, 0x4, 0xfffffff7, 0x81}, {0x800, 0x0, 0x4, 0x2, 0x9, 0x2b}, {0x2, 0x7, 0x9, 0xd52b, 0x7, 0x400}, {0x1, 0x9, 0x6, 0x5, 0x7, 0x7d}, {0x9, 0x1200000, 0x6, 0x9, 0x6, 0x401}, {0xfffffc01, 0x4, 0x3, 0x6, 0x6, 0x6}, {0x1c3, 0x9, 0x0, 0x6, 0xe4b4, 0x400}, {0x4c, 0x4, 0x9, 0x1000, 0xffff, 0x9}, {0x9, 0x7, 0x62, 0xc4ac, 0x5, 0x5}, {0x8001, 0x3bdb, 0x6, 0x0, 0x0, 0x7}, {0x6, 0x5, 0xcf53, 0x5c8f0393, 0x5, 0x7}, {0x3, 0x6, 0xff, 0xffffffff, 0x2, 0x101}, {0xd9, 0x10000, 0x0, 0x84a, 0x8, 0x3}, {0x1, 0x5, 0x1, 0xc, 0x1}, {0x18d, 0x8, 0x40, 0x1, 0x800, 0x7fff}, {0xfffffffb, 0x9, 0x107, 0x7, 0x40, 0x3}, {0x401, 0x66c1, 0x8001, 0x7fff, 0x3, 0xafa}, {0x4, 0x3, 0x5, 0xc, 0x100, 0x8}, {0x8, 0x10001, 0xaa68, 0x1ff, 0x10, 0xfffffe01}, {0x6, 0x3, 0x1, 0xf, 0xcf4b, 0x3}, {0x3, 0x8001, 0x5, 0xe, 0x6, 0x9}, {0xfffffffd, 0x4, 0x1, 0x7, 0x7, 0x9}, {0x8000, 0x3, 0x61, 0x10000, 0x0, 0x2}, {0x1, 0x8, 0xf, 0x1, 0x3, 0x4}, {0xa, 0x4, 0x1, 0x1ff, 0x7, 0x8}, {0x81, 0x800, 0x5, 0x5, 0x0, 0x85c0}, {0x6, 0xc66, 0x7, 0xfffffffd, 0x5, 0x4}, {0xc7, 0x8, 0x9, 0x7ff, 0x8, 0x3}, {0xa7, 0x1c7a47f3, 0x5, 0x7, 0x9, 0x45d}, {0x21, 0x9, 0x7fff, 0x7f, 0x6}, {0x2, 0x1, 0x7fffffff, 0x3, 0x1, 0xad7f}, {0x401, 0x10, 0x0, 0x10001, 0xff, 0x3}, {0x5, 0x5, 0x1, 0x9, 0x0, 0xfffffeff}, {0x8, 0x10001, 0x6, 0xb, 0x1c1, 0x2}, {0x8, 0x7, 0x7f, 0x6, 0x2, 0x400}, {0x5, 0x100, 0x911, 0x8, 0x7, 0x1}, {0x3, 0xf2, 0x100, 0x9, 0xb, 0x3}, {0x8, 0x9, 0x7fff, 0x9, 0x0, 0xfffffff7}, {0x3, 0x0, 0x2, 0x1, 0xfffffffd, 0x8001}, {0x3a87, 0xf29, 0x9, 0x7, 0xf}, {0xf47, 0x3, 0xffffc47c, 0x1000, 0x4, 0x80000001}, {0x58e, 0x6, 0xfffffffe, 0x3, 0x5, 0xa}, {0x0, 0x100, 0x3d3, 0x100, 0x10000000, 0x102}, {0x1ff, 0xc, 0xe1f5, 0x3, 0xe, 0x1ff}, {0x7fffffff, 0xb27, 0x9, 0x80000000, 0xc, 0x6}, {0x7, 0x6, 0x3, 0xfffffff9, 0x6, 0x6}, {0x3, 0x6, 0x1, 0xe, 0xbf, 0xfd8}, {0x80000001, 0x0, 0x3, 0x4, 0xb, 0x5}, {0x0, 0x1, 0x6a9, 0x1000, 0x7, 0x8}, {0x81, 0x0, 0x3, 0x9, 0x1, 0x7}, {0x9, 0x8, 0x332, 0x10, 0x757c0fdf}, {0x8001, 0xffff}, {0x7, 0x9, 0x0, 0x80000001, 0x5}, {0x5, 0xbf83, 0x9f3, 0x6, 0x6, 0x8}, {0x9, 0x0, 0x3, 0x0, 0x5, 0x3}, {0x3, 0x2, 0x8000, 0x5, 0x4, 0x8001}, {0xffffffff, 0x0, 0x6, 0x0, 0x400000, 0x6}, {0xff, 0xcbd, 0x8, 0x9, 0x2, 0x6}, {0x8, 0x3, 0x10001, 0x0, 0x3, 0xa}, {0x9, 0x3, 0xd68a, 0x2, 0x4, 0x9}, {0x9, 0xbf87, 0x0, 0x400, 0x3, 0x2}, {0x0, 0x1, 0xfffff001, 0x4, 0x7ff, 0x8}, {0x3, 0x8, 0x3ff, 0x4, 0x800, 0x3}, {0x4, 0x1e0b, 0x1000, 0x5, 0x10000, 0x7}, {0x1, 0x7fff, 0x1, 0x2, 0x9, 0x2}, {0x0, 0x9, 0x3, 0x8, 0xebba, 0x2}, {0x5, 0x3, 0x539b0050, 0x10000, 0x5, 0x7bc}, {0x0, 0xd, 0x3, 0x5, 0x2, 0x3}, {0x872, 0xc710, 0x1, 0x8, 0xffff, 0x2}, {0x1, 0xf1, 0xa0b, 0x1, 0x8, 0xc}, {0x8, 0x2, 0x9, 0x1f5587de, 0x7ff, 0x8}, {0x6, 0x4, 0x86, 0x1ff, 0x9, 0x5}, {0x34, 0x507, 0x8, 0x4, 0x3c00, 0x3}, {0x7, 0x4, 0x5, 0x8, 0x9, 0x95f4}, {0x2, 0x2, 0x40, 0x5, 0x4, 0xc466}, {0x3, 0xf9, 0x80, 0x6, 0x7ff, 0xa7}, {0x2, 0x101, 0x5ad5, 0xbf9, 0x8, 0x5}, {0xfffffffe, 0x8, 0x82, 0x55, 0x3, 0x6}, {0x30b, 0x7fffffff, 0x4, 0xafe, 0x80000000, 0x80}, {0x4, 0x5d99, 0x2, 0x4, 0x1, 0x3}, {0x0, 0x7, 0x200, 0x40000, 0x43d, 0x8}, {0x2, 0x5, 0x4, 0xead9, 0x0, 0x2}, {0x4, 0x800, 0x1000, 0x4800000, 0x2, 0x6b8}, {0xf98, 0x5, 0x1f821622, 0x8, 0x8, 0xd}, {0x1, 0x401, 0x1, 0xf2, 0xb}, {0x5, 0x1, 0x7, 0x8dc, 0x6, 0x7}, {0x42, 0x10, 0x1, 0x0, 0x73, 0x7}, {0x1, 0x7fff, 0x7, 0x4, 0x1, 0x36}, {0xfffffeff, 0x3, 0x9, 0xf, 0x9, 0xc}, {0x0, 0x8001, 0x139, 0x8000, 0x4, 0x3}, {0xf0, 0x9, 0x6, 0x6, 0x0, 0x7fe00}, {0x55aacdbd, 0x2, 0x5, 0x7, 0x80000000, 0xfffffffd}, {0x2a47, 0x8, 0x3, 0x101, 0x1, 0x2}, {0x3, 0x1, 0x5, 0x30141d1d, 0x7fff, 0xc4}, {0x7, 0x2, 0x2, 0x400, 0x3, 0x7}, {0x2, 0x100, 0xfcb7, 0x3ff, 0x81, 0x6}, {0x7, 0x7fffffff, 0x1, 0x8001, 0xd65, 0x4}, {0x0, 0x9, 0x0, 0x7, 0xe000, 0x7da}, {0x3ff, 0x10, 0x58cf397e, 0x2, 0x8, 0x41}, {0xfffffffe, 0x311e, 0xad37, 0xffff0000, 0xfffffffc, 0x6}, {0xf, 0x7ff, 0x6, 0x0, 0x81}, {0x8, 0x3664, 0x7fffffff, 0x7fff, 0x8, 0x7fff}, {0x2, 0x3, 0x2, 0xe1ac, 0xad}, {0x9, 0x753, 0x8, 0xffff0606, 0x8, 0x9}, {0xffffffff, 0x8, 0x8, 0x3, 0xfffffffe}, {0x5, 0x4, 0x3ff, 0xffffff91, 0x1ff, 0x4}, {0xbc67, 0x0, 0x57, 0x3, 0xc2af, 0x100}, {0x9, 0x4a8, 0x82ef, 0x6, 0x3686, 0xd}, {0x0, 0x40, 0x1, 0x7ff, 0x8000, 0x2}, {0x0, 0x5861, 0x4, 0x4, 0x2, 0x390}, {0x3ff, 0x800, 0x80, 0x2, 0x1, 0x80000000}, {0x9, 0x0, 0x7, 0x4, 0x2, 0x9}, {0x2, 0xf, 0xfe21, 0x1d, 0x9, 0x5}, {0xcbc5, 0x80000001, 0x5b67, 0x0, 0xd88c, 0x1}, {0x9, 0x10000, 0x100, 0x8, 0xffffd68a, 0x7}, {0x40, 0x7, 0x3, 0x8, 0x2, 0x6}, {0x80000000, 0xe188, 0x0, 0x3, 0xffff8000, 0x6}], [{0x2, 0x1}, {0x1}, {0x5}, {0x0, 0x1}, {0x1}, {0x3}, {0x3}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x1}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {0x4}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x0, 0x43317f2991037b50}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x1}, {0x1}, {0x1}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x2}, {}, {0x5}, {0x3}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {}, {}, {0x4}, {0x1, 0x1}, {0x4}, {0x3}, {0x1, 0x394287c2d5135934}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {}, {0x1}, {0x1, 0x1}, {0x2}, {0x2}, {0x2}, {0x3}, {0x5, 0x1}, {0x1}, {0x1}, {0x2, 0x1}, {0x1}, {0x3}, {0x4}, {0x5}, {0x5}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x3, 0x1e54e8e033aae562}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x2}, {0x1}, {}, {0x0, 0x1}, {0x5}, {0x5}, {0x3, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {}, {0x0, 0x1}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x5, 0x1}, {0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x1ef8b87220ad6bb3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x1, 0x1}, {0x2}, {0x5}, {0x5}, {0x4, 0x1}, {0x4}, {0x1}, {0x2}, {0x0, 0x1}, {0x2}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x5}]}}]}, {0x92, 0x6, "e7587323459a41ef5a335165cae7082944312d5469271cc2900740523891eed5a225a5ff56d76e6e5da91185aabac61b9ae7c1b437c90060c9268b1e8678fd103f137304265c6ef00ee77d2b678cd4a29ca81e4525d986e8ddee62bb7da505a50f020d7871f8c2440eede33477ed4627bd480cb26e7f43f452800a9891eee4dc22d868fabb9136e96301b1bc9035"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_mirred={0x194, 0x10, 0x0, 0x0, {{0xb}, {0xc4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1de3, 0x0, 0x1, 0x283597fe, 0x5}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x2, 0x2, 0x4}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0xab4, 0x5, 0x8000, 0x7fff}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7cc7, 0x80, 0x4, 0x6, 0xff}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xffffff7f, 0x20, 0x20000000, 0x7, 0x9}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x9, 0x6, 0x9, 0xffff}, 0x2}}]}, {0xa8, 0x6, "67d2c36c2f1b5729c5c83aa8569f0450bf7a5f1df41d28da1312d1bac73b041bbc4f600f15358b2d5f533d4db97d1140865150190cf86b5d83d0d42203d5ee193af7693c7e4a4298e4cf9e5c27ef394273ab314b0805d21c8c13a7c5e26d7678c7a0806b2f27950c92a40dbe60d9e7d3ca6a4248f985bf895f7abe5aef15a7ef1a5cdd72b30f72ac5cbb20da6f2628bbbc290e41f69677d192ca8b00f3b3ab75a8958513"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_sample={0x18c, 0x15, 0x0, 0x0, {{0xb}, {0x6c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0xfffff587, 0x8, 0x2, 0x57, 0x4}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0xa8, 0x5, 0x2, 0x2cad1325, 0x27c}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0xdf1, 0x2, 0xc, 0x7}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x9, 0x5, 0x2, 0x3}}]}, {0xf6, 0x6, "62432eca82e79eca7279c921b0b144964e3eb026c0fad61a880dec2bafb92dea4aa0e25b65fedd4e6253d13ca87c532d678ed3c1355e02d1ca913bde6e49988211dda4d4c3f57349272d5805cd79918ad1eb677f0a351780db5270014af38d88a69ff64c27634783e1d02077807558af1d33f9897c4bcfafbcf1b574059c3bfb61449ae6418315f65c0e346829c778fc2bdceba1dd3d2879da09be76dd60d66c3a85c82a66c216516757b7eda3bdc701739bb2d359e7dd0c20344b3f2da12e0d25d699ef9d6903f1c62443fa70c6a66addf8942f42857f47a1958744f6eb324ca57f935de3f5546bde3d33df07d6d771214f"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x1444}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10010}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r6 = socket$netlink(0x10, 0x3, 0x8) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) gettid() fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f00000004c0), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socket$nl_route(0x10, 0x3, 0x0) 1.621835124s ago: executing program 4 (id=475): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x4}}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x5c}, 0x1, 0x0, 0x0, 0x4040844}, 0x40) 1.563851688s ago: executing program 0 (id=476): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a400000010000104080000000300000000000000", @ANYRES32=0x0, @ANYBLOB="fab0817dbcb5f31a70001280110001006272696467655f736c6176650000000058000580050019a103000000050005000000000005000c000000000005000700a100000005000a00000000000500080000000000040018000500060001000000060002000100000005001e00000000000500010003000000140003006272696467655f736c6176655f30"], 0xa4}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) 1.540004266s ago: executing program 4 (id=477): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001480)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000010000000000000008000000180500002020702500000000002020207b1af8ff00000000bfa10000000000000701000000feffffb7020000080000f038a9037bafabef549edd00b7030000010000008500006b36de9c0095"], &(0x7f0000000000)='GPL\x00', 0x7, 0xff5, &(0x7f0000001540)=""/4085, 0x40f00, 0x60}, 0x94) r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000180)=0x8000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r2, &(0x7f00000003c0)={0xa, 0x0, 0x9, @loopback, 0x40}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f00000001c0)=@ccm_128={{0x304}, "7a0afacb1ba30ef3", "a3966a9c2c799501471a53222718e691", "b728f3ff", "0d461df8b401a3a2"}, 0x28) socketpair$unix(0x1, 0x0, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x11a, 0x4, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1000) pwritev(r1, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000300)}], 0x5, 0x8, 0x20000006) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f000087a000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r6 = memfd_create(&(0x7f0000000700)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05', 0x2) ftruncate(r6, 0xffff) fcntl$addseals(r6, 0x409, 0x3) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000000)={r6, 0x1, 0x0, 0x2000}) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000280)=0x0) syz_open_procfs(r8, &(0x7f00000002c0)='net/udp6\x00') ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0xe9b, 0x2, 0xd, 0x7f, 0x44233, 0x9, 0x80, 0x941, 0x8001, 0x1005, 0x4, 0x4, 0x0, 0xfffffdfffffffffd], 0xb000, 0x84340}) 1.431970282s ago: executing program 0 (id=478): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) setns(0xc9, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x10f) r3 = socket$inet(0x2, 0x2, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYRES16, @ANYBLOB="60005080110001004abee339084eeef16f162471"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r4, &(0x7f0000000100), 0x12) listen(r4, 0x1) write$tun(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="000008050000010b"], 0x88) r5 = dup3(r1, r0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000680)=[@acquire], 0x0, 0x0, 0x0}) r7 = syz_usb_connect(0x5, 0x58, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x8e, 0x3a, 0xc6, 0x20, 0x694, 0x1, 0x7813, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x2, 0xe, 0x6, 0x10, 0x3, "", [{{0x9, 0x4, 0x39, 0xd8, 0x1, 0x1a, 0xda, 0xa8, 0x8, [], [{{0x9, 0x5, 0x8, 0x10, 0x20, 0x7, 0x9, 0x80}}]}}, {{0x9, 0x4, 0xe4, 0x5, 0x3, 0xb9, 0x56, 0xda, 0x2, [], [{{0x9, 0x5, 0x8, 0x0, 0x400, 0x1, 0x12, 0xfc}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x7, 0x3, 0x9a, [@generic={0x7, 0x5, "d15b89f26d"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0x7a, 0xa, 0x84}}]}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r7, &(0x7f0000000bc0)={0x14, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r7, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000001600)={0x24, 0x0, &(0x7f0000001540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_control_io$hid(r7, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="400808000000fde61e0ee4a63b9e929e5cf2688c30a91a82"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r7, 0x0, &(0x7f0000002280)={0x84, &(0x7f0000001e00)={0x20, 0xd, 0x4, "348b35e5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) 1.427758867s ago: executing program 4 (id=479): syz_usb_connect(0x0, 0x3d, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) gettid() timer_create(0x0, 0x0, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x151400, 0xea) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) lseek(0xffffffffffffffff, 0xab0b, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000000040)) syz_80211_inject_frame(0x0, 0x0, 0x3a) syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) 1.361217384s ago: executing program 3 (id=480): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000f00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x1}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.316959069s ago: executing program 3 (id=481): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000680)}], 0x5, 0x4, 0x5) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)=[{0x0}, {0x0}, {&(0x7f00000002c0)}], 0x3}, 0x40000c4) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x1, 0xfffffff8, 0x0, 0xff, 0xff}) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@newqdisc={0x1ac, 0x24, 0xf0b, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x689aece2b491f820}, {0xffff, 0xffff}, {0xfff2, 0xffe5}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x17c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x98, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x36}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x3}]}, {0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xb}]}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x5000000}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x6}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xc}]}, {0x3c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x7}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x5}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xfc}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xd4}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xffffffff}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x2}]}]}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x20000}, @TCA_TAPRIO_ATTR_FLAGS={0x8}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7ce00000}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x100000001}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0xb4, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4}]}, {0x34, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x89}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x6}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x9}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x7}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x200}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x4a8}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xec}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xff}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x2}]}, {0x2c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xa437}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xef}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x7}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xf98}]}]}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x7ff}]}}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x40000}, 0x800) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.15229412s ago: executing program 3 (id=482): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00004c2000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000150000/0x1000)=nil, &(0x7f0000b21000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00004c2000/0x1000)=nil, &(0x7f000069c000/0x2000)=nil, &(0x7f0000184000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x10) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4}) r1 = io_uring_setup(0xc01, &(0x7f0000000000)={0x0, 0x1e78, 0x40, 0x2, 0x20b}) writev(r1, &(0x7f0000000000)=[{&(0x7f0000001480)}, {0x0}], 0x2) io_uring_enter(r0, 0x2219, 0x1adf, 0x16, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000060400000000000000000000010500000008000000000000000000000300000000010000000200000004000000000000000000000b"], 0x0, 0x5a}, 0x28) socket$alg(0x26, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x28, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/mnt\x00') r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x3e8, 0xf, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68888a887", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) 1.061960875s ago: executing program 3 (id=483): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='numa_maps\x00') socket$inet(0xa, 0x801, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) msgget(0x1, 0x501) r3 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r3, &(0x7f0000000040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x28}}], 0x1, 0x4008040) r4 = socket$inet(0x2, 0xa, 0x200000) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000d, 0x13, r5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000080)={'lo\x00', {0x2, 0x4e23, @local}}) r6 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r6) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r7, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) 227.791214ms ago: executing program 0 (id=484): r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0xd, @pix={0x8, 0x5, 0x32314742, 0x6, 0xd, 0x7, 0x7, 0x0, 0x1, 0x3, 0x0, 0x5}}) 180.010697ms ago: executing program 1 (id=485): r0 = syz_open_dev$sg(&(0x7f0000000000), 0xfffffffffffffffd, 0x104000) ioctl$SG_BLKTRACETEARDOWN(r0, 0x1276, 0x0) socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x1, @local, 'ip_vti0\x00'}}, 0x1e) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x1, @empty, 'ip_vti0\x00'}}, 0x1e) close(0x4) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x8044) r4 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f00000001c0)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000006000000000000000005"], 0x310) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f00000005c0)={0x1, {{0xa, 0x4e20, 0x0, @mcast1, 0xffff}}, {{0xa, 0x0, 0x94, @remote}}}, 0x108) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x2000c000) 168.324371ms ago: executing program 0 (id=486): r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0xfffffffffffffef1, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x7d1d674c378b327c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000008c0)=ANY=[@ANYBLOB="14000000100001000000000000000000010000"], 0xb0}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000102505a1a44000000001010902440001fd00000009040000ff0202ffff052406000005240000000d240f010000000000000000000905810320000000000905820220000000000905030208"], 0x0) socket$inet6_sctp(0xa, 0x2, 0x84) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_open_dev$media(0x0, 0x4, 0x10000) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x0, 0xffff}, 0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') pread64(r3, &(0x7f0000000280)=""/172, 0xac, 0xe0) 47.526601ms ago: executing program 1 (id=487): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket(0x2, 0x80805, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1000000000a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000025300)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0xa000200) r3 = semget$private(0x0, 0x3, 0x34) semtimedop(r3, 0x0, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, 0x0, 0x20, 0x1) acct(0x0) sendmsg$BATADV_CMD_TP_METER(r1, 0x0, 0x4004855) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}], 0x1, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a05000100"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}}, 0x90) 0s ago: executing program 3 (id=488): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x4}}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x5c}, 0x1, 0x0, 0x0, 0x4040844}, 0x40) kernel console output (not intermixed with test programs): ype=1400 audit(1786479744.273:339): avc: denied { bind } for pid=6114 comm="syz.0.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 99.077801][ T30] audit: type=1400 audit(1786479744.402:340): avc: denied { bind } for pid=6118 comm="syz.3.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 99.103729][ T6119] binder: 6118:6119 ioctl c0306201 200000000540 returned -22 [ 99.144908][ T30] audit: type=1400 audit(1786479744.421:341): avc: denied { setopt } for pid=6118 comm="syz.3.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 99.204749][ T30] audit: type=1400 audit(1786479744.421:342): avc: denied { accept } for pid=6118 comm="syz.3.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 99.288651][ T30] audit: type=1400 audit(1786479744.421:343): avc: denied { create } for pid=6118 comm="syz.3.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 99.401381][ T30] audit: type=1400 audit(1786479744.421:344): avc: denied { connect } for pid=6118 comm="syz.3.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 99.459893][ T30] audit: type=1400 audit(1786479744.421:345): avc: denied { ioctl } for pid=6118 comm="syz.3.91" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 99.850397][ T6135] sctp_transport_update_pmtu: 106 callbacks suppressed [ 99.850442][ T6135] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 99.870154][ T6135] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 99.881929][ T6135] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 99.893618][ T6135] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 99.915132][ T6135] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 99.926624][ T6135] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 99.938137][ T6135] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 99.963864][ T6135] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 99.975457][ T6135] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 99.987223][ T6135] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 100.615483][ T6140] overlayfs: conflicting options: nfs_export=on,index=off [ 100.721627][ T6141] netlink: 'syz.3.95': attribute type 11 has an invalid length. [ 100.729398][ T6141] netlink: 220 bytes leftover after parsing attributes in process `syz.3.95'. [ 101.624991][ T6147] netlink: 20 bytes leftover after parsing attributes in process `syz.4.99'. [ 101.662955][ T6149] netlink: 'syz.2.101': attribute type 39 has an invalid length. [ 102.310258][ T5725] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 102.326753][ T5704] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 102.349371][ T6151] overlayfs: conflicting options: nfs_export=on,index=off [ 102.692977][ T30] audit: type=1400 audit(1786479747.717:346): avc: denied { create } for pid=6161 comm="syz.2.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 102.743437][ T5725] usb 4-1: device descriptor read/64, error -71 [ 102.758241][ T6162] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 103.003929][ T5725] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 103.020017][ T30] audit: type=1400 audit(1786479748.040:347): avc: denied { write } for pid=6165 comm="syz.4.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 103.209350][ T5725] usb 4-1: device descriptor read/64, error -71 [ 103.328771][ T5725] usb usb4-port1: attempt power cycle [ 103.339328][ T24] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 103.552968][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 103.588278][ T5697] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 103.694723][ T24] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 103.743252][ T5725] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 103.851373][ T5725] usb 4-1: device descriptor read/8, error -71 [ 103.879445][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 103.947447][ T24] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 104.042497][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.112492][ T24] usb 3-1: Product: syz [ 104.153139][ T5725] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 104.166496][ T24] usb 3-1: Manufacturer: syz [ 104.186281][ T5725] usb 4-1: device descriptor read/8, error -71 [ 104.212444][ T24] usb 3-1: SerialNumber: syz [ 104.236086][ T24] usb 3-1: config 0 descriptor?? [ 104.315061][ T5725] usb usb4-port1: unable to enumerate USB device [ 104.485557][ T5725] usb 3-1: USB disconnect, device number 3 [ 104.578556][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 104.578571][ T30] audit: type=1400 audit(1786479749.480:355): avc: denied { bind } for pid=6246 comm="syz.0.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 104.605277][ T30] audit: type=1400 audit(1786479749.508:356): avc: denied { map } for pid=6246 comm="syz.0.111" path="socket:[10158]" dev="sockfs" ino=10158 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 105.035557][ T30] audit: type=1400 audit(1786479749.905:357): avc: denied { write } for pid=6252 comm="syz.4.112" name="mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 105.105329][ T30] audit: type=1400 audit(1786479749.933:358): avc: denied { open } for pid=6252 comm="syz.4.112" path="/dev/mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 105.154381][ T6256] binder: 6255:6256 ioctl c0306201 0 returned -14 [ 105.187450][ T30] audit: type=1400 audit(1786479749.933:359): avc: denied { ioctl } for pid=6252 comm="syz.4.112" path="/dev/mtd0" dev="devtmpfs" ino=702 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 105.621381][ T6266] sctp_transport_update_pmtu: 106 callbacks suppressed [ 105.621453][ T6266] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 105.641036][ T6266] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 105.681682][ T6266] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 105.694049][ T6266] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 105.719768][ T6266] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 105.732041][ T6266] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 105.801094][ T6268] overlayfs: conflicting options: nfs_export=on,index=off [ 105.811091][ T6266] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 105.822739][ T6266] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 105.833985][ T6266] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 105.845287][ T6266] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 106.638382][ T30] audit: type=1400 audit(1786479750.773:360): avc: denied { create } for pid=6270 comm="syz.1.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 106.735372][ T30] audit: type=1400 audit(1786479750.948:361): avc: denied { write } for pid=6270 comm="syz.1.117" name="usb_gadget" dev="configfs" ino=2535 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 106.767145][ T6282] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 106.791738][ T30] audit: type=1400 audit(1786479750.958:362): avc: denied { add_name } for pid=6270 comm="syz.1.117" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 106.802710][ T6282] CIFS: Attempting to mount //127.0.0.1/share [ 106.813777][ T30] audit: type=1400 audit(1786479750.958:363): avc: denied { create } for pid=6270 comm="syz.1.117" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 106.867196][ T30] audit: type=1400 audit(1786479750.967:364): avc: denied { write } for pid=6270 comm="syz.1.117" name="functions" dev="configfs" ino=10383 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 107.464344][ T6291] netlink: 16 bytes leftover after parsing attributes in process `syz.3.121'. [ 107.480230][ T6292] syzkaller0: entered promiscuous mode [ 107.486076][ T6292] syzkaller0: entered allmulticast mode [ 107.671468][ T6282] CIFS: VFS: Error connecting to socket. Aborting operation. [ 107.695205][ T6282] CIFS: VFS: cifs_mount failed w/return code = -4 [ 107.771796][ T6301] netlink: 'syz.4.125': attribute type 10 has an invalid length. [ 107.828394][ T6301] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 107.880527][ T6301] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 108.149085][ T5725] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 108.267935][ T6319] netlink: 332 bytes leftover after parsing attributes in process `syz.2.131'. [ 108.317500][ T6314] syz.2.131 (6314) used greatest stack depth: 18560 bytes left [ 108.327549][ T6320] netlink: 8 bytes leftover after parsing attributes in process `syz.4.129'. [ 108.354177][ T5725] usb 2-1: Using ep0 maxpacket: 32 [ 108.362127][ T5725] usb 2-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice= e.22 [ 108.387324][ T5725] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.410833][ T5725] usb 2-1: Product: syz [ 108.447150][ T5725] usb 2-1: Manufacturer: syz [ 108.469779][ T5725] usb 2-1: SerialNumber: syz [ 108.496985][ T5725] usb 2-1: config 0 descriptor?? [ 108.516680][ T24] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 108.605656][ T5725] usb 2-1: selecting invalid altsetting 3 [ 108.622513][ T5725] comedi comedi5: could not set alternate setting 3 in high speed [ 108.637449][ T5725] usbdux 2-1:0.0: driver 'usbdux' failed to auto-configure device. [ 108.670706][ T5725] usbdux 2-1:0.0: probe with driver usbdux failed with error -22 [ 108.700813][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 108.715817][ T24] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 108.743734][ T24] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 108.759090][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 108.791972][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.801565][ T24] usb 4-1: Product: syz [ 108.806056][ T24] usb 4-1: Manufacturer: syz [ 108.814368][ T24] usb 4-1: SerialNumber: syz [ 108.825507][ T24] usb 4-1: config 0 descriptor?? [ 108.835647][ T24] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 108.845959][ T24] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 108.853308][ T5697] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 109.026703][ T5697] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 109.041063][ T5697] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.063536][ T5697] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.077979][ T5697] usb 3-1: config 0 descriptor?? [ 109.315241][ T6328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.326511][ T5697] usbhid 3-1:0.0: can't add hid device: -71 [ 109.340963][ T6328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.351457][ T5697] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 109.376322][ T5697] usb 3-1: USB disconnect, device number 4 [ 109.394602][ T6332] netlink: 4 bytes leftover after parsing attributes in process `syz.0.137'. [ 109.443392][ T6332] tipc: Started in network mode [ 109.459871][ T6332] tipc: Node identity 4, cluster identity 4711 [ 109.473303][ T6332] tipc: Node number set to 4 [ 109.490483][ T24] em28xx 4-1:0.0: unknown em28xx chip ID (240) [ 109.829192][ T6347] usb usb8: usbfs: process 6347 (syz.4.142) did not claim interface 0 before use [ 110.398526][ T24] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 110.419581][ T24] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 110.442043][ T24] em28xx 4-1:0.0: No AC97 audio processor [ 110.484733][ T24] usb 4-1: USB disconnect, device number 9 [ 110.512618][ T24] em28xx 4-1:0.0: Disconnecting em28xx [ 110.569595][ T24] em28xx 4-1:0.0: Freeing device [ 110.769207][ T6354] binder: 6353:6354 ioctl c0306201 0 returned -14 [ 111.154937][ T5725] usb 2-1: USB disconnect, device number 4 [ 111.398033][ T24] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 111.808006][ T6373] IPv6: NLM_F_CREATE should be specified when creating new route [ 111.820377][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 112.007612][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 112.007650][ T30] audit: type=1326 audit(1786479756.340:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6372 comm="syz.2.150" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fee5739e0d9 code=0x0 [ 112.718199][ T24] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 112.729003][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.740210][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.750138][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 112.763316][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.810432][ T6379] fuse: Bad value for 'fd' [ 112.833614][ T24] usb 4-1: config 0 descriptor?? [ 113.403556][ T5725] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 113.484896][ T24] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.0003/input/input8 [ 113.597164][ T5725] usb 2-1: Using ep0 maxpacket: 32 [ 113.607631][ T5725] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 113.621610][ T24] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.0003/input/input9 [ 113.634361][ T5725] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.650777][ T30] audit: type=1400 audit(1786479757.854:382): avc: denied { bind } for pid=6396 comm="syz.2.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 113.685730][ T6402] tipc: Started in network mode [ 113.691096][ T5725] usb 2-1: Product: syz [ 113.709386][ T5725] usb 2-1: Manufacturer: syz [ 113.714157][ T6402] tipc: Node identity aa2958616b59, cluster identity 4711 [ 113.723289][ T5725] usb 2-1: SerialNumber: syz [ 113.728546][ T6402] tipc: Enabled bearer , priority 0 [ 113.736700][ T30] audit: type=1400 audit(1786479757.882:383): avc: denied { getopt } for pid=6396 comm="syz.2.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 114.100628][ T6406] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=58 sclass=netlink_audit_socket pid=6406 comm=syz.2.157 [ 114.117510][ T30] audit: type=1400 audit(1786479757.946:384): avc: denied { shutdown } for pid=6364 comm="syz.3.148" lport=47462 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 114.138204][ T30] audit: type=1400 audit(1786479758.039:385): avc: denied { read } for pid=6364 comm="syz.3.148" lport=47462 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 114.182894][ T5725] usb 2-1: config 0 descriptor?? [ 114.207968][ T24] kye 0003:0458:5011.0003: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.3-1/input0 [ 114.221419][ T5725] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 114.231889][ T30] audit: type=1400 audit(1786479758.334:386): avc: denied { write } for pid=6396 comm="syz.2.157" name="rootcell" dev="proc" ino=4026533589 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 114.437320][ T6399] tipc: Disabling bearer [ 114.846917][ C0] kye 0003:0458:5011.0003: usb_submit_urb(ctrl) failed: -1 [ 115.014521][ T30] audit: type=1400 audit(1786479759.109:387): avc: denied { mount } for pid=6418 comm="syz.2.164" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 115.049348][ T24] usb 4-1: reset high-speed USB device number 10 using dummy_hcd [ 115.103785][ T30] audit: type=1400 audit(1786479759.137:388): avc: denied { setopt } for pid=6418 comm="syz.2.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 115.126360][ T30] audit: type=1400 audit(1786479759.165:389): avc: denied { bind } for pid=6418 comm="syz.2.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 115.216753][ T5725] gspca_ov534_9: reg_w failed -71 [ 115.310939][ T24] usb 4-1: device descriptor read/64, error -32 [ 115.325188][ T6423] fuse: Bad value for 'fd' [ 115.345787][ T30] audit: type=1400 audit(1786479759.423:390): avc: denied { unmount } for pid=5593 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 115.499699][ T6427] overlayfs: missing 'lowerdir' [ 115.517244][ T6429] netlink: 8 bytes leftover after parsing attributes in process `syz.2.168'. [ 115.619309][ T5725] gspca_ov534_9: Unknown sensor 0000 [ 115.622626][ T5725] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22 [ 115.864368][ T5725] usb 2-1: USB disconnect, device number 5 [ 116.147814][ T6436] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 116.319805][ T5726] usb 4-1: USB disconnect, device number 10 [ 116.356036][ T6438] batman_adv: batadv0: Adding interface: veth0 [ 116.432965][ T6438] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 116.483413][ T6444] sctp_transport_update_pmtu: 47 callbacks suppressed [ 116.483463][ T6444] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 116.502538][ T6444] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 116.515771][ T6444] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 116.527482][ T6444] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 116.541777][ T6444] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 116.555176][ T6444] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 116.566547][ T6444] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 116.580716][ T6444] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 116.592005][ T6444] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 116.603310][ T6444] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 116.738462][ T6438] batman_adv: batadv0: Interface activated: veth0 [ 116.818215][ T6445] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.907347][ T6445] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.967488][ T6447] overlayfs: conflicting options: nfs_export=on,index=off [ 117.122441][ T6445] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.156984][ T6445] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.216912][ T6445] batman_adv: batadv0: Interface deactivated: veth0 [ 117.304072][ T6445] batman_adv: batadv0: Removing interface: veth0 [ 117.467135][ T6453] IPv6: sit1: Disabled Multicast RS [ 117.480674][ T6453] sit1: entered allmulticast mode [ 117.490247][ T6457] netlink: 116 bytes leftover after parsing attributes in process `syz.2.175'. [ 117.493163][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 117.493177][ T30] audit: type=1400 audit(1786479761.399:396): avc: denied { mount } for pid=6451 comm="syz.3.173" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 117.728435][ T6465] fuse: Bad value for 'fd' [ 118.189910][ T6473] overlayfs: conflicting options: nfs_export=on,index=off [ 118.297246][ T6470] netlink: 'syz.4.179': attribute type 11 has an invalid length. [ 118.305158][ T6470] netlink: 220 bytes leftover after parsing attributes in process `syz.4.179'. [ 118.375633][ T30] audit: type=1400 audit(1786479762.202:397): avc: denied { sqpoll } for pid=6472 comm="syz.3.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 118.791899][ T30] audit: type=1400 audit(1786479762.599:398): avc: denied { read } for pid=6481 comm="syz.0.181" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 118.915208][ T6483] faux_driver vgem: [drm] Unknown color mode 265; guessing buffer size. [ 118.993642][ T30] audit: type=1400 audit(1786479762.599:399): avc: denied { open } for pid=6481 comm="syz.0.181" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 119.303700][ T30] audit: type=1400 audit(1786479762.599:400): avc: denied { ioctl } for pid=6482 comm="syz.1.182" path="socket:[11611]" dev="sockfs" ino=11611 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 119.405342][ T30] audit: type=1400 audit(1786479762.710:401): avc: denied { ioctl } for pid=6481 comm="syz.0.181" path="/dev/dri/card0" dev="devtmpfs" ino=627 ioctlcmd=0x64b2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 119.545452][ T5725] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 119.802302][ T30] audit: type=1400 audit(1786479762.765:402): avc: denied { map } for pid=6481 comm="syz.0.181" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 119.868654][ T5725] usb 2-1: Using ep0 maxpacket: 16 [ 119.925536][ T5725] usb 2-1: unable to get BOS descriptor or descriptor too short [ 120.004062][ T5725] usb 2-1: New USB device found, idVendor=1410, idProduct=7004, bcdDevice= 6.a2 [ 120.054473][ T30] audit: type=1400 audit(1786479762.765:403): avc: denied { execute } for pid=6481 comm="syz.0.181" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 120.136294][ T5725] usb 2-1: config 1 has an invalid interface number: 232 but max is 0 [ 120.208926][ T5725] usb 2-1: config 1 has no interface number 0 [ 120.291387][ T5725] usb 2-1: config 1 interface 232 altsetting 93 bulk endpoint 0xE has invalid maxpacket 64 [ 120.400114][ T5725] usb 2-1: config 1 interface 232 has no altsetting 0 [ 120.470372][ T30] audit: type=1400 audit(1786479764.150:404): avc: denied { read } for pid=6481 comm="syz.0.181" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 120.523924][ T30] audit: type=1400 audit(1786479764.150:405): avc: denied { open } for pid=6481 comm="syz.0.181" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 120.549711][ T6483] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 120.552843][ T5725] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.566296][ T5725] usb 2-1: Product: syz [ 120.570955][ T5725] usb 2-1: Manufacturer: syz [ 120.575940][ T5725] usb 2-1: SerialNumber: syz [ 120.584097][ T6485] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 120.735035][ T24] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 120.810397][ T6485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.819150][ T6485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.106723][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 121.123187][ T24] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 121.148986][ T24] usb 4-1: config index 0 descriptor too short (expected 51443, got 18) [ 121.205613][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.259034][ T24] usb 4-1: Product: syz [ 121.279779][ T6512] overlayfs: conflicting options: nfs_export=on,index=off [ 121.297592][ T24] usb 4-1: Manufacturer: syz [ 121.346638][ T24] usb 4-1: SerialNumber: syz [ 121.474860][ T24] r8152-cfgselector 4-1: Unknown version 0x0000 [ 121.520578][ T24] r8152-cfgselector 4-1: config 0 descriptor?? [ 122.182013][ T5725] hub 2-1:1.232: bad descriptor, ignoring hub [ 122.218272][ T5725] hub 2-1:1.232: probe with driver hub failed with error -5 [ 122.256371][ T5725] option 2-1:1.232: GSM modem (1-port) converter detected [ 122.296661][ T5725] usb 2-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 122.369253][ T5725] usb 2-1: USB disconnect, device number 6 [ 122.451292][ T5725] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 122.483312][ T5725] option 2-1:1.232: device disconnected [ 123.075610][ T6549] jffs2: notice: (6549) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 123.840257][ T6560] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 123.952170][ T6560] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 124.289185][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 124.289197][ T30] audit: type=1400 audit(1786479767.677:413): avc: denied { bind } for pid=6562 comm="syz.1.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 125.717079][ T6573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.726298][ T30] audit: type=1400 audit(1786479768.997:414): avc: denied { ioctl } for pid=6569 comm="syz.1.205" path="/dev/nullb0" dev="devtmpfs" ino=694 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 125.756424][ T6573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.836264][ T24] r8152-cfgselector 4-1: Unknown version 0x0000 [ 125.845589][ T24] r8152-cfgselector 4-1: No union descriptors [ 125.906183][ T24] r8152-cfgselector 4-1: USB disconnect, device number 11 [ 125.954615][ T30] audit: type=1400 audit(1786479769.209:415): avc: denied { create } for pid=6582 comm="syz.1.209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 125.985039][ T6583] netlink: 12 bytes leftover after parsing attributes in process `syz.1.209'. [ 125.994902][ T6583] netlink: 12 bytes leftover after parsing attributes in process `syz.1.209'. [ 126.009341][ T30] audit: type=1400 audit(1786479769.228:416): avc: denied { read } for pid=6582 comm="syz.1.209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 126.031151][ T6583] netlink: 20 bytes leftover after parsing attributes in process `syz.1.209'. [ 126.042784][ T30] audit: type=1400 audit(1786479769.237:417): avc: denied { read write } for pid=6582 comm="syz.1.209" name="vbi6" dev="devtmpfs" ino=992 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 126.160766][ T6590] syzkaller1: entered promiscuous mode [ 126.165312][ T30] audit: type=1400 audit(1786479769.237:418): avc: denied { open } for pid=6582 comm="syz.1.209" path="/dev/vbi6" dev="devtmpfs" ino=992 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 126.166642][ T6590] syzkaller1: entered allmulticast mode [ 126.239471][ T30] audit: type=1400 audit(1786479769.237:419): avc: denied { mount } for pid=6582 comm="syz.1.209" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 126.303227][ T30] audit: type=1400 audit(1786479769.292:420): avc: denied { ioctl } for pid=6582 comm="syz.1.209" path="/dev/vbi6" dev="devtmpfs" ino=992 ioctlcmd=0x5615 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 126.360271][ T30] audit: type=1400 audit(1786479769.394:421): avc: denied { bind } for pid=6589 comm="syz.4.211" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 126.426160][ T30] audit: type=1400 audit(1786479769.394:422): avc: denied { name_bind } for pid=6589 comm="syz.4.211" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 126.932583][ T6605] overlayfs: conflicting options: nfs_export=on,index=off [ 126.999762][ T6605] netlink: 'syz.0.213': attribute type 11 has an invalid length. [ 127.007997][ T6605] netlink: 220 bytes leftover after parsing attributes in process `syz.0.213'. [ 128.007831][ T6619] overlayfs: missing 'lowerdir' [ 128.099732][ T6622] netlink: 24 bytes leftover after parsing attributes in process `syz.1.219'. [ 128.466591][ T6628] Bluetooth: MGMT ver 1.23 [ 128.871523][ T6632] Illegal XDP return value 4294967274 on prog (id 42) dev syz_tun, expect packet loss! [ 128.963009][ T6632] loop4: detected capacity change from 0 to 7 [ 128.988765][ T6632] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 129.000969][ T6632] loop4: partition table partially beyond EOD, truncated [ 129.015992][ T6632] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 129.098700][ T24] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 129.144117][ T6024] udevd[6024]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 129.293136][ T24] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 129.314198][ T5707] usb 4-1: new low-speed USB device number 12 using dummy_hcd [ 129.327471][ T24] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 129.341667][ T24] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 129.355017][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 129.366076][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 129.384423][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 129.404125][ T24] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 129.415557][ T24] usb 5-1: Product: syz [ 129.420666][ T24] usb 5-1: Manufacturer: syz [ 129.435815][ T24] cdc_wdm 5-1:1.0: skipping garbage [ 129.441406][ T24] cdc_wdm 5-1:1.0: skipping garbage [ 129.478290][ T24] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 129.486316][ T24] cdc_wdm 5-1:1.0: Unknown control protocol [ 129.512987][ T5707] usb 4-1: Invalid ep0 maxpacket: 16 [ 129.671427][ T5707] usb 4-1: new low-speed USB device number 13 using dummy_hcd [ 129.754034][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 129.754072][ T30] audit: type=1400 audit(1786479772.717:431): avc: denied { ioctl } for pid=6633 comm="syz.4.223" path="/dev/cdc-wdm0" dev="devtmpfs" ino=2888 ioctlcmd=0x48a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 129.833878][ T9] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 129.835086][ T24] usb 5-1: USB disconnect, device number 5 [ 129.877435][ T5707] usb 4-1: Invalid ep0 maxpacket: 16 [ 129.891152][ T5707] usb usb4-port1: attempt power cycle [ 129.952218][ T6667] sctp_transport_update_pmtu: 104 callbacks suppressed [ 129.952268][ T6667] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 130.024022][ T6667] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 130.036999][ T6667] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 130.050276][ T6667] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 130.075267][ T6667] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 130.131020][ T6667] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 130.144058][ T6667] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 130.156243][ T6667] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 130.169128][ T6667] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 130.253531][ T6670] overlayfs: conflicting options: nfs_export=on,index=off [ 130.261418][ T6667] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 130.530474][ T5707] usb 4-1: new low-speed USB device number 14 using dummy_hcd [ 130.682495][ T5707] usb 4-1: Invalid ep0 maxpacket: 16 [ 131.012301][ T5707] usb 4-1: new low-speed USB device number 15 using dummy_hcd [ 131.023202][ T6673] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input10 [ 131.034052][ T30] audit: type=1400 audit(1786479773.881:432): avc: denied { listen } for pid=6674 comm="syz.4.235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 131.061842][ T30] audit: type=1400 audit(1786479773.927:433): avc: denied { connect } for pid=6674 comm="syz.4.235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 131.084318][ T30] audit: type=1400 audit(1786479773.927:434): avc: denied { accept } for pid=6674 comm="syz.4.235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 131.095812][ T5707] usb 4-1: Invalid ep0 maxpacket: 16 [ 131.104602][ T30] audit: type=1400 audit(1786479773.927:435): avc: denied { read } for pid=4949 comm="acpid" name="mouse1" dev="devtmpfs" ino=2892 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 131.111162][ T5707] usb usb4-port1: unable to enumerate USB device [ 131.132975][ T30] audit: type=1400 audit(1786479773.927:436): avc: denied { open } for pid=4949 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=2892 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 131.169741][ T30] audit: type=1400 audit(1786479773.927:437): avc: denied { ioctl } for pid=4949 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=2892 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 131.215428][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 131.271821][ T9] usb 3-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 131.284981][ T9] usb 3-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 131.335278][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.344177][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 131.351799][ T30] audit: type=1400 audit(1786479773.927:438): avc: denied { mount } for pid=6672 comm="syz.0.234" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 131.384271][ T9] usb 3-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 131.416928][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 131.425278][ T9] usb 3-1: SerialNumber: syz [ 131.435399][ T30] audit: type=1400 audit(1786479774.028:439): avc: denied { write } for pid=6674 comm="syz.4.235" path="socket:[12352]" dev="sockfs" ino=12352 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 131.461373][ T6684] overlayfs: missing 'lowerdir' [ 133.165769][ T9] rndis_host 3-1:253.0: RNDIS init failed, -71 [ 133.175749][ T9] rndis_host 3-1:253.0: probe with driver rndis_host failed with error -71 [ 133.240967][ T9] usb 3-1: USB disconnect, device number 5 [ 133.357547][ T30] audit: type=1400 audit(1786479776.041:440): avc: denied { ioctl } for pid=6696 comm="syz.3.239" path="socket:[12123]" dev="sockfs" ino=12123 ioctlcmd=0x587c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 134.850360][ T5726] IPVS: starting estimator thread 0... [ 134.989818][ T6730] IPVS: using max 50 ests per chain, 120000 per kthread [ 135.152795][ T5707] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 135.229765][ T6740] netlink: 12 bytes leftover after parsing attributes in process `syz.1.252'. [ 135.347463][ T5707] usb 1-1: Using ep0 maxpacket: 8 [ 135.353094][ T5707] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 135.363603][ T5707] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.377663][ T5707] pvrusb2: Hardware description: Terratec Grabster AV400 [ 135.401989][ T9] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 135.411185][ T5697] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 135.814147][ T5707] pvrusb2: ********** [ 135.818161][ T5707] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 135.828687][ T5707] pvrusb2: Important functionality might not be entirely working. [ 135.830157][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 135.836938][ T5707] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 135.836968][ T5707] pvrusb2: ********** [ 135.882713][ T9] usb 4-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 135.896163][ T9] usb 4-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 135.898834][ T2351] pvrusb2: Invalid write control endpoint [ 135.907507][ T9] usb 4-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 135.930038][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 135.942431][ T9] usb 4-1: SerialNumber: syz [ 136.037573][ T2351] pvrusb2: Invalid write control endpoint [ 136.041588][ T5697] usb 3-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 136.044925][ T2351] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 136.056131][ T5697] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 136.078133][ T5697] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 136.087360][ T5697] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.098390][ T2351] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 136.128190][ T2351] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 136.162993][ T2351] pvrusb2: Device being rendered inoperable [ 136.291279][ T6731] netlink: 'syz.0.248': attribute type 21 has an invalid length. [ 136.329048][ T6731] netlink: 156 bytes leftover after parsing attributes in process `syz.0.248'. [ 136.346779][ T2351] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 136.869306][ T2351] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 137.022123][ T5753] usb 1-1: USB disconnect, device number 3 [ 137.791312][ T2351] pvrusb2: Attached sub-driver cx25840 [ 137.900816][ T2351] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 138.104203][ T2351] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 138.406326][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 138.406341][ T30] audit: type=1400 audit(1786479780.712:443): avc: denied { mounton } for pid=6758 comm="syz.1.255" path="/51/file0" dev="tmpfs" ino=294 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 138.437938][ T6760] fuse: Bad value for 'group_id' [ 138.464345][ T6760] fuse: Bad value for 'group_id' [ 138.474126][ T9] rndis_host 4-1:253.0: RNDIS init failed, -71 [ 138.485504][ T6763] capability: warning: `syz.1.255' uses deprecated v2 capabilities in a way that may be insecure [ 138.508734][ T9] rndis_host 4-1:253.0: probe with driver rndis_host failed with error -71 [ 138.511990][ T5726] usb 3-1: USB disconnect, device number 6 [ 138.541221][ T30] audit: type=1400 audit(1786479780.832:444): avc: denied { write } for pid=6758 comm="syz.1.255" name="ptp0" dev="devtmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 138.600035][ T9] usb 4-1: USB disconnect, device number 16 [ 138.656711][ T30] audit: type=1400 audit(1786479780.943:445): avc: denied { search } for pid=6761 comm="syz.0.256" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 138.688420][ T30] audit: type=1400 audit(1786479780.943:446): avc: denied { write } for pid=6761 comm="syz.0.256" name="nfsv4leasetime" dev="nfsd" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 138.712693][ T30] audit: type=1400 audit(1786479780.943:447): avc: denied { open } for pid=6761 comm="syz.0.256" path="/37/nfsd/nfsv4leasetime" dev="nfsd" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 138.856106][ T30] audit: type=1400 audit(1786479781.119:448): avc: denied { unmount } for pid=5591 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 138.983448][ T6773] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 139.456023][ T9] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 139.543592][ T6782] netlink: 'syz.2.259': attribute type 11 has an invalid length. [ 139.551450][ T6782] netlink: 220 bytes leftover after parsing attributes in process `syz.2.259'. [ 139.815938][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 139.895142][ T9] usb 4-1: not running at top speed; connect to a high speed hub [ 139.952487][ T9] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 140.047183][ T9] usb 4-1: config 14 has an invalid interface number: 57 but max is 1 [ 140.134904][ T9] usb 4-1: config 14 has an invalid interface number: 228 but max is 1 [ 140.151720][ T30] audit: type=1400 audit(1786479782.263:449): avc: denied { create } for pid=6784 comm="syz.0.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 140.177007][ T6785] netlink: 'syz.0.261': attribute type 3 has an invalid length. [ 140.193348][ T9] usb 4-1: config 14 has no interface number 0 [ 140.211732][ T9] usb 4-1: config 14 has no interface number 1 [ 140.221019][ T6785] netlink: 'syz.0.261': attribute type 4 has an invalid length. [ 140.240789][ T9] usb 4-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 140.254335][ T6785] netlink: 11575 bytes leftover after parsing attributes in process `syz.0.261'. [ 140.263509][ T30] audit: type=1400 audit(1786479782.300:450): avc: denied { create } for pid=6784 comm="syz.0.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 140.294221][ T9] usb 4-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0x1B, changing to 0xB [ 140.326165][ T30] audit: type=1400 audit(1786479782.300:451): avc: denied { listen } for pid=6784 comm="syz.0.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 140.347690][ T9] usb 4-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 140.359571][ T9] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64 [ 140.379695][ T30] audit: type=1400 audit(1786479782.300:452): avc: denied { create } for pid=6784 comm="syz.0.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 140.405708][ T9] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 10 [ 140.437158][ T9] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0 [ 140.525651][ T5707] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 140.639178][ T9] usb 4-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 140.710082][ T9] usb 4-1: config 14 interface 57 has no altsetting 0 [ 140.752312][ T9] usb 4-1: config 14 interface 228 has no altsetting 0 [ 140.763498][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.780022][ T9] usb 4-1: Product: syz [ 140.796031][ T5707] usb 5-1: Using ep0 maxpacket: 32 [ 140.797764][ T9] usb 4-1: Manufacturer: syz [ 140.814190][ T5707] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 140.823288][ T9] usb 4-1: SerialNumber: syz [ 140.841348][ T5707] usb 5-1: config index 0 descriptor too short (expected 27632, got 27) [ 140.850120][ T5707] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 140.868745][ T5707] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 140.888286][ T5707] usb 5-1: config 1 has no interface number 0 [ 140.901090][ T5707] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 140.927102][ T5707] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 140.959738][ T5707] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.026052][ T5707] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 141.271763][ T5707] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 141.281628][ T9] legousbtower 4-1:14.57: interrupt endpoints not found [ 141.758902][ T9] legousbtower 4-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 141.792267][ T24] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 141.855167][ T9] legousbtower 4-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 141.962561][ T24] usb 1-1: device descriptor read/64, error -71 [ 142.258085][ T24] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 142.322982][ T9] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 142.338293][ T6821] usb 4-1: LEGO USB Tower reset control request failed [ 142.346920][ T6778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.356543][ T6778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.365571][ T5726] usb 4-1: USB disconnect, device number 17 [ 142.378160][ T5726] legousbtower 4-1:14.228: LEGO USB Tower #-160 now disconnected [ 142.411950][ T24] usb 1-1: device descriptor read/64, error -71 [ 142.434247][ T5707] snd_usb_pod 5-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 142.485993][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 142.502954][ T6823] capability: warning: `syz.2.271' uses 32-bit capabilities (legacy support in use) [ 142.505162][ T9] usb 2-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 142.525552][ T9] usb 2-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 142.536943][ T9] usb 2-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 142.540258][ T24] usb usb1-port1: attempt power cycle [ 142.551507][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 142.564102][ T9] usb 2-1: SerialNumber: syz [ 142.693179][ T6826] busy [ 143.441301][ T24] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 144.121774][ T6838] overlayfs: conflicting options: nfs_export=on,index=off [ 145.284002][ T9] rndis_host 2-1:253.0: RNDIS init failed, -71 [ 145.294071][ T5697] usb 5-1: USB disconnect, device number 6 [ 145.310942][ T24] usb 1-1: device descriptor read/8, error -71 [ 145.312216][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 145.312231][ T30] audit: type=1400 audit(1786479787.082:458): avc: denied { append } for pid=6841 comm="syz.3.275" name="usbmon5" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 145.352457][ T9] rndis_host 2-1:253.0: probe with driver rndis_host failed with error -71 [ 145.366311][ T5697] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 145.428076][ T9] usb 2-1: USB disconnect, device number 7 [ 145.444230][ T30] audit: type=1400 audit(1786479787.082:459): avc: denied { open } for pid=6841 comm="syz.3.275" path="/dev/usbmon5" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 147.156538][ T6863] overlayfs: conflicting options: nfs_export=on,index=off [ 147.289205][ T6857] netlink: 'syz.0.278': attribute type 11 has an invalid length. [ 147.297178][ T6857] netlink: 220 bytes leftover after parsing attributes in process `syz.0.278'. [ 147.873959][ T30] audit: type=1400 audit(1786479789.437:460): avc: denied { write } for pid=6870 comm="syz.1.282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 148.143443][ T6876] FAULT_INJECTION: forcing a failure. [ 148.143443][ T6876] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 148.173776][ T6876] CPU: 1 UID: 0 PID: 6876 Comm: syz.1.283 Tainted: G L syzkaller #0 PREEMPT(full) [ 148.173798][ T6876] Tainted: [L]=SOFTLOCKUP [ 148.173802][ T6876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 148.173809][ T6876] Call Trace: [ 148.173813][ T6876] [ 148.173818][ T6876] dump_stack_lvl+0x100/0x190 [ 148.173838][ T6876] should_fail_ex.cold+0x5/0xa [ 148.173853][ T6876] _copy_from_user+0x2e/0xd0 [ 148.173870][ T6876] do_ip6t_set_ctl+0xa15/0xd00 [ 148.173886][ T6876] ? nf_sockopt_find.isra.0+0x222/0x290 [ 148.173901][ T6876] ? nf_sockopt_find.isra.0+0x222/0x290 [ 148.173916][ T6876] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 148.173931][ T6876] ? __mutex_unlock_slowpath+0x35d/0x930 [ 148.173948][ T6876] ? get_pid_task+0x106/0x250 [ 148.173960][ T6876] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 148.173981][ T6876] ? nf_sockopt_find.isra.0+0x222/0x290 [ 148.173996][ T6876] nf_setsockopt+0x8d/0xf0 [ 148.174011][ T6876] ipv6_setsockopt+0x135/0x170 [ 148.174032][ T6876] udpv6_setsockopt+0x64/0xb0 [ 148.174050][ T6876] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 148.174069][ T6876] do_sock_setsockopt+0xf3/0x1d0 [ 148.174088][ T6876] __sys_setsockopt+0x195/0x220 [ 148.174105][ T6876] __x64_sys_setsockopt+0xbd/0x160 [ 148.174118][ T6876] ? do_syscall_64+0x90/0x870 [ 148.174133][ T6876] ? lockdep_hardirqs_on+0x78/0x100 [ 148.174148][ T6876] do_syscall_64+0x115/0x870 [ 148.174162][ T6876] ? clear_bhb_loop+0x70/0xc0 [ 148.174176][ T6876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.174187][ T6876] RIP: 0033:0x7f0d1b39e0d9 [ 148.174198][ T6876] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.174209][ T6876] RSP: 002b:00007f0d1c228028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 148.174221][ T6876] RAX: ffffffffffffffda RBX: 00007f0d1b625fa0 RCX: 00007f0d1b39e0d9 [ 148.174227][ T6876] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 148.174234][ T6876] RBP: 00007f0d1c228090 R08: 0000000000000328 R09: 0000000000000000 [ 148.174240][ T6876] R10: 0000200000000340 R11: 0000000000000246 R12: 0000000000000001 [ 148.174246][ T6876] R13: 00007f0d1b626038 R14: 00007f0d1b625fa0 R15: 00007fffd6384388 [ 148.174260][ T6876] [ 148.439571][ T6878] SET target dimension over the limit! [ 148.769773][ T29] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 148.955501][ T29] usb 2-1: not running at top speed; connect to a high speed hub [ 149.245053][ T6886] overlayfs: conflicting options: nfs_export=on,index=off [ 149.319319][ T6887] netlink: 'syz.2.285': attribute type 11 has an invalid length. [ 149.332089][ T6887] netlink: 220 bytes leftover after parsing attributes in process `syz.2.285'. [ 149.764526][ T29] usb 2-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 149.779581][ T29] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 149.791549][ T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.813316][ T29] uvcvideo 2-1:1.0: Found UVC 1.00 device (046d:0825) [ 150.499605][ T6896] sctp_transport_update_pmtu: 48 callbacks suppressed [ 150.499684][ T6896] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 150.518138][ T6896] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 150.529497][ T6896] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 150.546504][ T6896] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 150.562415][ T6896] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 150.574186][ T6896] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 150.585659][ T6896] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 150.600893][ T6896] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 150.612390][ T6896] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 150.623900][ T6896] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 150.625404][ T6897] overlayfs: conflicting options: nfs_export=on,index=off [ 150.710801][ T6893] netlink: 'syz.0.287': attribute type 11 has an invalid length. [ 150.718713][ T6893] netlink: 220 bytes leftover after parsing attributes in process `syz.0.287'. [ 151.237997][ T6899] overlayfs: conflicting options: nfs_export=on,index=off [ 151.524456][ T29] uvcvideo 2-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 151.558632][ T29] videodev: could not get a free minor [ 151.570749][ T29] uvcvideo 2-1:1.1: Failed to register meta-cap device (-23). [ 151.715114][ T9] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 151.917112][ T6915] overlayfs: conflicting options: nfs_export=on,index=off [ 151.972127][ T6915] netlink: 'syz.2.291': attribute type 11 has an invalid length. [ 151.980538][ T6915] netlink: 220 bytes leftover after parsing attributes in process `syz.2.291'. [ 152.119968][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 152.199455][ T9] usb 4-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 152.311216][ T9] usb 4-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 152.426544][ T9] usb 4-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 152.576604][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 152.641224][ T9] usb 4-1: SerialNumber: syz [ 152.798525][ T30] audit: type=1400 audit(1786479793.988:461): avc: denied { read } for pid=6920 comm="syz.4.295" path="socket:[12979]" dev="sockfs" ino=12979 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 152.867775][ T6924] hub 8-0:1.0: USB hub found [ 152.875828][ T6924] hub 8-0:1.0: 1 port detected [ 153.122484][ T5697] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 153.328111][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 153.490572][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 153.642212][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 153.893498][ T5697] usb 1-1: Using ep0 maxpacket: 32 [ 153.946902][ T5697] usb 1-1: unable to get BOS descriptor or descriptor too short [ 154.093623][ T5697] usb 1-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 154.131039][ T6932] binder: 6931:6932 ioctl c018620c 200000000040 returned -1 [ 154.140240][ T6932] binder: 6931:6932 ioctl 4142 0 returned -22 [ 154.398575][ T5697] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 154.527865][ T5697] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 154.546354][ T5753] usb 2-1: USB disconnect, device number 8 [ 154.615720][ T9] rndis_host 4-1:253.0: RNDIS init failed, -71 [ 154.622566][ T9] rndis_host 4-1:253.0: probe with driver rndis_host failed with error -71 [ 154.908293][ T5697] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.114973][ T6952] overlayfs: conflicting options: nfs_export=on,index=off [ 155.128210][ T6952] netlink: 'syz.4.298': attribute type 11 has an invalid length. [ 155.136006][ T6952] netlink: 220 bytes leftover after parsing attributes in process `syz.4.298'. [ 155.594405][ T9] usb 4-1: USB disconnect, device number 18 [ 155.601515][ T5697] usb 1-1: Product: syz [ 155.612709][ T5697] usb 1-1: Manufacturer: syz [ 155.635497][ T5697] usb 1-1: SerialNumber: syz [ 155.953158][ T30] audit: type=1400 audit(1786479796.887:462): avc: denied { create } for pid=6921 comm="syz.0.294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 155.960577][ T9] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 155.980989][ T5753] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 156.033305][ T6958] sctp_transport_update_pmtu: 102 callbacks suppressed [ 156.033330][ T6958] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 156.085545][ T6958] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 156.098883][ T6958] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 156.110261][ T6958] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 156.125091][ T6958] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 156.137656][ T6958] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 156.178886][ T6963] overlayfs: conflicting options: nfs_export=on,index=off [ 156.187570][ T6958] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 156.199229][ T6958] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 156.211333][ T6958] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 156.223005][ T6958] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 156.488696][ T6923] netlink: 12 bytes leftover after parsing attributes in process `syz.0.294'. [ 156.848520][ T5753] usb 2-1: Using ep0 maxpacket: 16 [ 156.856408][ T5753] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 156.866119][ T5697] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 156.873922][ T5697] usb 1-1: MIDIStreaming interface descriptor not found [ 156.882547][ T9] usb 4-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 156.894190][ T5753] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 156.905019][ T9] usb 4-1: config 0 has an invalid interface number: 214 but max is 0 [ 156.916023][ T5753] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 156.930833][ T9] usb 4-1: config 0 has no interface number 0 [ 156.937456][ T9] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 156.949524][ T5753] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 156.959962][ T9] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 156.977305][ T5753] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 156.991113][ T5753] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 157.016746][ T9] usb 4-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 157.027589][ T9] usb 4-1: Manufacturer: syz [ 157.041062][ T5697] usb 1-1: USB disconnect, device number 8 [ 157.047844][ T9] usb 4-1: SerialNumber: syz [ 157.059652][ T5753] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 157.079462][ T5753] usb 2-1: Manufacturer: syz [ 157.087861][ T9] usb 4-1: config 0 descriptor?? [ 157.113481][ T5753] usb 2-1: config 0 descriptor?? [ 157.321922][ T30] audit: type=1400 audit(1786479798.170:463): avc: denied { read } for pid=6977 comm="syz.4.306" path="socket:[13077]" dev="sockfs" ino=13077 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 157.401044][ T5753] rc_core: IR keymap rc-hauppauge not found [ 157.407125][ T5753] Registered IR keymap rc-empty [ 157.412462][ T5753] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 157.434613][ T5753] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 157.460514][ T5753] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 157.496216][ T5753] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input12 [ 157.531259][ T5753] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 157.563733][ T5753] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 157.585335][ T10] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 157.608997][ T5753] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 157.639609][ T5753] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 157.663887][ T6990] pi3usb30532 0-0059: Error reading config register -5 [ 157.672193][ T5753] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 157.680973][ T6990] pi3usb30532 0-0059: probe with driver pi3usb30532 failed with error -5 [ 157.695251][ T6990] i2c i2c-0: new_device: Instantiated device pi3usb30532 at 0x59 [ 157.705517][ T6990] netlink: 44 bytes leftover after parsing attributes in process `syz.0.309'. [ 157.715191][ T5753] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 157.726007][ T10] usb 3-1: device descriptor read/64, error -71 [ 157.737069][ T5753] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 157.749912][ T30] audit: type=1400 audit(1786479798.567:464): avc: denied { setopt } for pid=6989 comm="syz.0.309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 157.769291][ T5753] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 157.791002][ T5753] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 157.817131][ T9] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.214/input/input11 [ 157.834347][ T5753] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 157.896065][ T5753] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 157.921299][ T5753] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 157.955998][ T5753] usb 2-1: USB disconnect, device number 9 [ 157.997329][ T10] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 158.040637][ T30] audit: type=1400 audit(1786479798.835:465): avc: denied { map } for pid=6994 comm="syz.0.310" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 158.072698][ T6995] new mount options do not match the existing superblock, will be ignored [ 158.090210][ T6995] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 158.098874][ T30] audit: type=1400 audit(1786479798.862:466): avc: denied { execute } for pid=6994 comm="syz.0.310" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 158.123732][ T30] audit: type=1400 audit(1786479798.881:467): avc: denied { remount } for pid=6994 comm="syz.0.310" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 158.157911][ T10] usb 3-1: device descriptor read/64, error -71 [ 158.174285][ T6954] netlink: 4 bytes leftover after parsing attributes in process `syz.3.301'. [ 158.278800][ T10] usb usb3-port1: attempt power cycle [ 158.894735][ T30] audit: type=1400 audit(1786479799.149:468): avc: denied { read write } for pid=6997 comm="syz.0.311" name="control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 159.111341][ T30] audit: type=1400 audit(1786479799.158:469): avc: denied { open } for pid=6997 comm="syz.0.311" path="/52/dev/mapper/control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 159.145723][ T5707] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 159.315325][ T30] audit: type=1400 audit(1786479799.158:470): avc: denied { ioctl } for pid=6997 comm="syz.0.311" path="/52/dev/mapper/control" dev="devtmpfs" ino=1266 ioctlcmd=0xfd03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 159.394033][ T10] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 159.450777][ T5707] usb 1-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 159.565288][ T5707] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 159.675723][ T5707] usb 1-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 159.824286][ T5707] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.882570][ T5707] usb 1-1: Product: syz [ 159.918707][ T5707] usb 1-1: Manufacturer: syz [ 159.951958][ T5707] usb 1-1: SerialNumber: syz [ 160.005564][ T29] usb 4-1: USB disconnect, device number 19 [ 160.429429][ T5707] usb-storage 1-1:1.0: USB Mass Storage device detected [ 160.880694][ T5712] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 160.978193][ T30] audit: type=1400 audit(1786479801.549:471): avc: denied { mounton } for pid=7014 comm="syz.3.314" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 160.979074][ T7015] zonefs (nullb0) ERROR: Not a zoned block device [ 161.023512][ T10] usb 3-1: device descriptor read/8, error -71 [ 161.048585][ T5707] usb-storage 1-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 161.122252][ T5707] scsi host1: usb-storage 1-1:1.0 [ 161.171317][ T5712] usb 2-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 161.189375][ T5712] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 64 [ 161.205043][ T5712] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 64 [ 161.222736][ T5712] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 161.232877][ T5712] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 161.254675][ T5712] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 64 [ 161.278043][ T5712] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0xD has invalid maxpacket 64 [ 161.295790][ T5712] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 161.315238][ T5712] usb 2-1: Product: syz [ 161.326177][ T5712] usb 2-1: Manufacturer: syz [ 161.341571][ T30] audit: type=1400 audit(1786479801.881:472): avc: denied { setopt } for pid=7021 comm="syz.4.316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 161.363523][ T7009] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 161.371778][ T7009] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 161.380347][ T7009] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 161.380644][ T7022] netlink: 16 bytes leftover after parsing attributes in process `syz.4.316'. [ 161.388697][ T7009] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 161.406489][ T7009] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 161.423503][ T7009] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 161.439277][ T7022] netlink: 24 bytes leftover after parsing attributes in process `syz.4.316'. [ 161.459099][ T5712] usb 2-1: USB2VGA dongle found at address 10 [ 161.485428][ T5712] usb 2-1: Allocated 8 output buffers [ 161.506449][ T5712] usb 2-1: Failed to early initialize device [ 161.591858][ T7028] binder: 7027:7028 ioctl c0306201 0 returned -14 [ 161.619448][ T5604] Bluetooth: hci3: Malformed HCI Event: 0x22 [ 161.629453][ T30] audit: type=1400 audit(1786479802.149:473): avc: denied { write } for pid=7029 comm="syz.4.319" name="attr_allow_any_host" dev="configfs" ino=13900 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 161.655292][ T30] audit: type=1400 audit(1786479802.149:474): avc: denied { setattr } for pid=7029 comm="syz.4.319" name="attr_allow_any_host" dev="configfs" ino=13900 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 161.690517][ T30] audit: type=1400 audit(1786479802.158:475): avc: denied { read } for pid=7029 comm="syz.4.319" name="attr_allow_any_host" dev="configfs" ino=13901 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 161.714958][ T30] audit: type=1400 audit(1786479802.158:476): avc: denied { open } for pid=7029 comm="syz.4.319" path="/72/config/nvmet/subsystems/testnqn/attr_allow_any_host" dev="configfs" ino=13901 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 161.797239][ T30] audit: type=1800 audit(1786479802.158:477): pid=7030 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.319" name="attr_allow_any_host" dev="configfs" ino=13901 res=0 errno=0 [ 161.892694][ T7033] hub 8-0:1.0: USB hub found [ 161.897746][ T7033] hub 8-0:1.0: 1 port detected [ 162.072748][ T29] usb 1-1: USB disconnect, device number 9 [ 162.221189][ T5712] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 163.059666][ T5707] usb 2-1: USB disconnect, device number 10 [ 163.196029][ T5712] usb 5-1: device descriptor read/64, error -71 [ 163.316654][ T29] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 163.477934][ T5712] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 163.511087][ T29] usb 1-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 163.530911][ T29] usb 1-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 163.546443][ T7049] ip6gre1: entered allmulticast mode [ 163.553624][ T29] usb 1-1: Product: syz [ 163.561119][ T29] usb 1-1: Manufacturer: syz [ 163.562104][ T6206] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 163.583447][ T29] usb 1-1: SerialNumber: syz [ 163.607245][ T29] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 163.629324][ T5712] usb 5-1: device descriptor read/64, error -71 [ 163.732972][ T7055] netlink: 8 bytes leftover after parsing attributes in process `syz.3.327'. [ 163.742861][ T7055] netlink: 24 bytes leftover after parsing attributes in process `syz.3.327'. [ 163.753303][ T7055] netlink: 8 bytes leftover after parsing attributes in process `syz.3.327'. [ 163.759623][ T5712] usb usb5-port1: attempt power cycle [ 163.762328][ T7055] netlink: 24 bytes leftover after parsing attributes in process `syz.3.327'. [ 163.826034][ T29] vp7045: USB control message 'out' went wrong. [ 163.835835][ T29] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 163.848136][ T29] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 163.861142][ T29] usb 1-1: USB disconnect, device number 10 [ 164.073455][ T5707] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 164.104812][ T7063] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 164.160108][ T5712] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 164.181830][ T24] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 164.569519][ T10] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 164.591732][ T5707] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 164.758472][ T10] usb 2-1: not running at top speed; connect to a high speed hub [ 164.796952][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice= 1.00 [ 164.837696][ T10] usb 2-1: config 1 has an invalid descriptor of length 112, skipping remainder of the config [ 164.877541][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.040322][ T10] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 165.990635][ T5712] usb 5-1: device not accepting address 9, error -71 [ 166.198211][ T10] gspca_vc032x: reg_w err -110 [ 166.216598][ T10] vc032x 2-1:1.0: probe with driver vc032x failed with error -110 [ 166.232073][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 166.232110][ T30] audit: type=1400 audit(1786479806.405:483): avc: denied { watch watch_reads } for pid=7065 comm="syz.4.331" path="pipe:[4623]" dev="pipefs" ino=4623 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 166.264447][ T5707] usb 4-1: config 253 has an invalid descriptor of length 0, skipping remainder of the config [ 166.274996][ T5707] usb 4-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 166.286320][ T5707] usb 4-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 166.297626][ T24] usb 3-1: device descriptor read/64, error -71 [ 166.304174][ T5707] usb 4-1: config 253 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 255 [ 166.320589][ T5707] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 166.328832][ T5707] usb 4-1: SerialNumber: syz [ 166.377635][ T30] audit: type=1400 audit(1786479806.433:484): avc: denied { write } for pid=7065 comm="syz.4.331" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 166.387206][ T7068] fuse: Unknown parameter '0x0000000000000007' [ 166.417330][ T9] usb 2-1: USB disconnect, device number 11 [ 166.467202][ T30] audit: type=1400 audit(1786479806.534:485): avc: denied { create } for pid=7067 comm="syz.4.332" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 166.514463][ T30] audit: type=1400 audit(1786479806.534:486): avc: denied { mounton } for pid=7067 comm="syz.4.332" path="/75/file0" dev="tmpfs" ino=444 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 166.716402][ T24] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 167.396624][ T5707] rndis_host 4-1:253.0: probe with driver rndis_host failed with error -22 [ 167.413787][ T5707] usb 4-1: USB disconnect, device number 20 [ 167.983783][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 168.036702][ T30] audit: type=1800 audit(1786479808.058:487): pid=7091 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.336" name="attr_allow_any_host" dev="configfs" ino=13247 res=0 errno=0 [ 168.054508][ T7093] vti0: entered promiscuous mode [ 168.151160][ T30] audit: type=1400 audit(1786479808.168:488): avc: denied { name_bind } for pid=7094 comm="syz.2.338" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 168.257094][ T7100] syzkaller0: entered promiscuous mode [ 168.262596][ T7100] syzkaller0: entered allmulticast mode [ 168.403876][ T30] audit: type=1400 audit(1786479808.399:489): avc: denied { search } for pid=7095 comm="syz.4.339" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 168.491562][ T30] audit: type=1400 audit(1786479808.427:490): avc: denied { search } for pid=7095 comm="syz.4.339" name="events" dev="tracefs" ino=1075 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 168.529028][ T7106] warning: `syz.3.341' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 169.177461][ T7105] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 169.194932][ T30] audit: type=1400 audit(1786479808.445:491): avc: denied { search } for pid=7095 comm="syz.4.339" name="kvm" dev="tracefs" ino=14083 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 169.217364][ T30] audit: type=1400 audit(1786479808.445:492): avc: denied { search } for pid=7095 comm="syz.4.339" name="kvm_hv_stimer_cleanup" dev="tracefs" ino=14085 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 169.903160][ T7111] netlink: 8 bytes leftover after parsing attributes in process `syz.2.342'. [ 170.984412][ T10] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 171.200901][ T10] usb 3-1: device descriptor read/64, error -71 [ 171.482433][ T24] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 171.483054][ T10] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 171.504193][ T5753] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 171.635723][ T10] usb 3-1: device descriptor read/64, error -71 [ 171.666502][ T5753] usb 1-1: Using ep0 maxpacket: 32 [ 171.672118][ T5753] usb 1-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 171.682045][ T24] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 171.682585][ T5753] usb 1-1: config 2 has an invalid interface number: 88 but max is 0 [ 171.699740][ T5753] usb 1-1: config 2 has no interface number 0 [ 171.705932][ T5753] usb 1-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256 [ 171.716324][ T5753] usb 1-1: config 2 interface 88 has no altsetting 0 [ 171.724398][ T24] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 171.725683][ T5753] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 171.742761][ T5753] usb 1-1: Product: syz [ 171.743244][ T24] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 171.746949][ T5753] usb 1-1: Manufacturer: syz [ 171.746966][ T5753] usb 1-1: SerialNumber: syz [ 171.753835][ T10] usb usb3-port1: attempt power cycle [ 171.760252][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.766832][ T7117] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 172.012537][ T24] usb 2-1: usb_control_msg returned -32 [ 172.021762][ T24] usbtmc 2-1:16.0: can't read capabilities [ 172.028060][ T7117] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 172.164897][ T10] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 172.186903][ T10] usb 3-1: device descriptor read/8, error -71 [ 172.250818][ T9] usb 2-1: USB disconnect, device number 12 [ 172.362138][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 172.362155][ T30] audit: type=1400 audit(1786479812.055:496): avc: denied { unmount } for pid=5595 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 172.470391][ T10] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 172.494064][ T30] audit: type=1800 audit(1786479812.184:497): pid=7132 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.348" name="attr_allow_any_host" dev="configfs" ino=14391 res=0 errno=0 [ 172.521297][ T7127] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR [ 172.524700][ T10] usb 3-1: device descriptor read/8, error -71 [ 172.653770][ T10] usb usb3-port1: unable to enumerate USB device [ 172.714543][ T30] audit: type=1400 audit(1786479812.378:498): avc: denied { set_context_mgr } for pid=7142 comm="syz.4.350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 173.268076][ T5753] asix 1-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 173.278839][ T5753] asix 1-1:2.88 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9 [ 173.290600][ T5753] asix 1-1:2.88: probe with driver asix failed with error -71 [ 173.309055][ T5753] usb 1-1: USB disconnect, device number 11 [ 173.330096][ T7147] syzkaller0: entered promiscuous mode [ 173.337281][ T7147] syzkaller0: entered allmulticast mode [ 173.381155][ T30] audit: type=1400 audit(1786479812.997:499): avc: denied { write } for pid=7148 comm="syz.2.352" name="/" dev="ocfs2_dlmfs" ino=14133 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 173.387194][ T7149] o2cb: This node has not been configured. [ 173.403901][ T30] audit: type=1400 audit(1786479812.997:500): avc: denied { add_name } for pid=7148 comm="syz.2.352" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 173.412098][ T7149] o2cb: Cluster check failed. Fix errors before retrying. [ 173.433309][ T30] audit: type=1400 audit(1786479812.997:501): avc: denied { create } for pid=7148 comm="syz.2.352" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 173.439446][ T10] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 173.458611][ T7149] (syz.2.352,7149,1):user_dlm_register:674 ERROR: status = -22 [ 173.458647][ T7149] (syz.2.352,7149,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 173.459629][ T30] audit: type=1400 audit(1786479812.997:502): avc: denied { associate } for pid=7148 comm="syz.2.352" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 173.543868][ T30] audit: type=1400 audit(1786479813.144:503): avc: denied { create } for pid=7148 comm="syz.2.352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 173.593804][ T30] audit: type=1400 audit(1786479813.154:504): avc: denied { ioctl } for pid=7148 comm="syz.2.352" path="socket:[14139]" dev="sockfs" ino=14139 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 173.715097][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 173.762322][ T10] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 173.896103][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.899032][ T7149] ipvlan2: entered promiscuous mode [ 173.933412][ T7149] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 174.007079][ T10] usb 5-1: config 0 descriptor?? [ 174.070065][ T7149] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 174.088107][ T10] as10x_usb: device has been detected [ 174.115526][ T10] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 174.124833][ T7149] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 174.485458][ T5598] Bluetooth: hci4: command 0x0405 tx timeout [ 174.773275][ T7171] overlayfs: conflicting options: nfs_export=on,index=off [ 174.866489][ T7172] netlink: 'syz.3.356': attribute type 11 has an invalid length. [ 174.874355][ T7172] netlink: 220 bytes leftover after parsing attributes in process `syz.3.356'. [ 174.992187][ T30] audit: type=1400 audit(1786479814.058:505): avc: denied { create } for pid=7162 comm="syz.3.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 175.510807][ T10] usb 5-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 175.730453][ T7187] ip6gre1: entered allmulticast mode [ 175.737815][ T48] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 175.833799][ T10] as10x_usb: error during firmware upload part1 [ 175.903154][ T10] Registered device nBox DVB-T Dongle [ 176.031665][ T10] usb 5-1: USB disconnect, device number 11 [ 176.239949][ T7198] overlayfs: failed to resolve './file1': -2 [ 176.327635][ T7199] netlink: 'syz.3.361': attribute type 11 has an invalid length. [ 176.335490][ T7199] netlink: 220 bytes leftover after parsing attributes in process `syz.3.361'. [ 176.735847][ T5598] Bluetooth: hci4: command 0x0405 tx timeout [ 176.956635][ T7208] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 177.018647][ T10] Unregistered device nBox DVB-T Dongle [ 177.062006][ T10] as10x_usb: device has been disconnected [ 177.093425][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 177.155787][ T7210] syzkaller0: entered promiscuous mode [ 177.175072][ T7210] syzkaller0: entered allmulticast mode [ 177.394512][ T7232] fuse: Bad value for 'fd' [ 177.460096][ T7233] netlink: 8 bytes leftover after parsing attributes in process `syz.0.369'. [ 177.661981][ T5753] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 178.133401][ T5753] usb 3-1: Using ep0 maxpacket: 8 [ 178.139215][ T5753] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 178.149939][ T5753] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 178.158657][ T5753] usb 3-1: config 179 has no interface number 0 [ 178.213697][ T5753] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 178.241498][ T5753] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 178.253225][ T5753] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 178.284537][ T5753] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 178.302925][ T5753] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 178.366195][ T5753] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.714326][ T7229] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 178.804180][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 178.804196][ T30] audit: type=1400 audit(1786479818.000:516): avc: denied { getopt } for pid=7252 comm="syz.0.378" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 179.140485][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 179.259634][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 179.302771][ T5712] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 179.396049][ T5753] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input14 [ 179.474244][ T30] audit: type=1400 audit(1786479818.600:517): avc: denied { create } for pid=7256 comm="syz.4.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 179.565792][ T30] audit: type=1400 audit(1786479818.711:518): avc: denied { ioctl } for pid=7259 comm="syz.1.379" path="socket:[14786]" dev="sockfs" ino=14786 ioctlcmd=0x89e7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 179.596688][ T7262] block2mtd: illegal erase size [ 179.602434][ T5712] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 179.779693][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 179.781015][ T7268] netlink: 92 bytes leftover after parsing attributes in process `syz.4.380'. [ 179.796930][ T7268] FAULT_INJECTION: forcing a failure. [ 179.796930][ T7268] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 179.810008][ T7268] CPU: 1 UID: 0 PID: 7268 Comm: syz.4.380 Tainted: G L syzkaller #0 PREEMPT(full) [ 179.810036][ T7268] Tainted: [L]=SOFTLOCKUP [ 179.810042][ T7268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 179.810053][ T7268] Call Trace: [ 179.810059][ T7268] [ 179.810066][ T7268] dump_stack_lvl+0x100/0x190 [ 179.810094][ T7268] should_fail_ex.cold+0x5/0xa [ 179.810118][ T7268] _copy_from_user+0x2e/0xd0 [ 179.810143][ T7268] memdup_user+0x6b/0xe0 [ 179.810163][ T7268] strndup_user+0x78/0xe0 [ 179.810184][ T7268] __x64_sys_mount+0x136/0x310 [ 179.810209][ T7268] ? __pfx___x64_sys_mount+0x10/0x10 [ 179.810240][ T7268] do_syscall_64+0x115/0x870 [ 179.810270][ T7268] ? clear_bhb_loop+0x70/0xc0 [ 179.810293][ T7268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.810312][ T7268] RIP: 0033:0x7f0cb6d9e0d9 [ 179.810327][ T7268] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.810344][ T7268] RSP: 002b:00007f0cb7cf1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 179.810361][ T7268] RAX: ffffffffffffffda RBX: 00007f0cb7026180 RCX: 00007f0cb6d9e0d9 [ 179.810372][ T7268] RDX: 0000200000000040 RSI: 0000200000000240 RDI: 0000200000000180 [ 179.810383][ T7268] RBP: 00007f0cb7cf1090 R08: 0000000000000000 R09: 0000000000000000 [ 179.810393][ T7268] R10: 0000000000800841 R11: 0000000000000246 R12: 0000000000000001 [ 179.810404][ T7268] R13: 00007f0cb7026218 R14: 00007f0cb7026180 R15: 00007ffe93e937a8 [ 179.810428][ T7268] [ 179.974869][ T5712] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 179.985093][ T5712] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 179.996068][ T5712] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 180.004245][ T5712] usb 1-1: SerialNumber: syz [ 180.359646][ T30] audit: type=1400 audit(1786479819.431:519): avc: denied { write } for pid=7259 comm="syz.1.379" name="mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 180.384699][ T30] audit: type=1400 audit(1786479819.459:520): avc: denied { open } for pid=7259 comm="syz.1.379" path="/dev/mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 180.555247][ T5712] usb 1-1: 0:2 : does not exist [ 180.708884][ T5712] usb 1-1: USB disconnect, device number 12 [ 180.729467][ T7270] lo speed is unknown, defaulting to 1000 [ 180.800236][ T30] audit: type=1400 audit(1786479819.847:521): avc: denied { ioctl } for pid=7259 comm="syz.1.379" path="/dev/mtd0" dev="devtmpfs" ino=702 ioctlcmd=0x4d11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 180.968860][ T7277] syzkaller0: entered promiscuous mode [ 180.974932][ T7277] syzkaller0: entered allmulticast mode [ 181.256053][ T30] audit: type=1400 audit(1786479820.271:522): avc: denied { setopt } for pid=7281 comm="syz.4.386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 181.518721][ T7287] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 181.525284][ T7287] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 181.576632][ T7287] vhci_hcd vhci_hcd.0: Device attached [ 181.632739][ T30] audit: type=1400 audit(1786479820.622:523): avc: denied { connect } for pid=7286 comm="syz.0.388" lport=3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 181.755738][ T30] audit: type=1400 audit(1786479820.622:524): avc: denied { setopt } for pid=7286 comm="syz.0.388" laddr=fe80::b lport=3 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 182.023618][ T5712] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 183.368252][ T30] audit: type=1400 audit(1786479822.155:526): avc: denied { write } for pid=7297 comm="syz.2.391" path="socket:[14831]" dev="sockfs" ino=14831 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 183.494921][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 183.516556][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 183.690173][ T5793] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 183.982592][ T5793] usb 5-1: Using ep0 maxpacket: 8 [ 184.060496][ T5793] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 184.238815][ T5793] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 184.258971][ T7289] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 184.297225][ T30] audit: type=1400 audit(1786479821.804:525): avc: denied { write } for pid=7298 comm="syz.4.392" name="cluster" dev="configfs" ino=46 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 184.317973][ T5793] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 184.322778][ T30] audit: type=1400 audit(1786479822.829:527): avc: denied { append } for pid=7307 comm="syz.3.393" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 184.330879][ T7288] vhci_hcd: connection closed [ 184.352772][ T30] audit: type=1400 audit(1786479822.893:528): avc: denied { ioctl } for pid=7307 comm="syz.3.393" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 184.394278][ T5793] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 184.411538][ T5793] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 184.422369][ T5793] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 184.441137][ T5793] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.474749][ T6216] vhci_hcd vhci_hcd.0: stop threads [ 184.480248][ T6216] vhci_hcd vhci_hcd.0: release socket [ 184.528104][ T6216] vhci_hcd vhci_hcd.0: disconnect device [ 184.575533][ T7313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.652461][ T7313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.744320][ T5793] usb 5-1: GET_CAPABILITIES returned 0 [ 184.749881][ T5793] usbtmc 5-1:16.0: can't read capabilities [ 185.214058][ T5793] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 185.534434][ T5793] usb 4-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 185.681824][ T5793] usb 4-1: config 0 interface 0 altsetting 15 endpoint 0x81 has an invalid bInterval 180, changing to 11 [ 185.833036][ T5793] usb 4-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 185.916929][ T5753] usb 5-1: USB disconnect, device number 12 [ 186.078702][ T5793] usb 4-1: config 0 interface 0 has no altsetting 0 [ 186.245021][ T5793] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.801565][ T5793] usb 4-1: config 0 descriptor?? [ 186.928422][ T7321] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7321 comm=syz.4.396 [ 186.986979][ T7324] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=7324 comm=syz.4.396 [ 186.991019][ T7323] syzkaller0: entered promiscuous mode [ 187.015752][ T7323] syzkaller0: entered allmulticast mode [ 187.283972][ T5793] uclogic 0003:5543:0004.0004: unexpected long global item [ 187.309863][ T5793] uclogic 0003:5543:0004.0004: parse failed [ 187.333035][ T5793] uclogic 0003:5543:0004.0004: probe with driver uclogic failed with error -22 [ 187.596583][ T24] usb 4-1: USB disconnect, device number 21 [ 187.907031][ T7339] netlink: 'syz.0.402': attribute type 11 has an invalid length. [ 188.174468][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 188.268106][ T30] audit: type=1400 audit(1786479826.669:529): avc: denied { block_suspend } for pid=7337 comm="syz.0.402" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 188.395771][ T7341] sctp_transport_update_pmtu: 46 callbacks suppressed [ 188.395796][ T7341] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 188.420903][ T7341] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 188.435098][ T7341] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 188.466046][ T7341] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 188.493227][ T7341] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 188.510451][ T7341] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 188.974729][ T7353] netlink: 8 bytes leftover after parsing attributes in process `syz.3.405'. [ 189.118540][ T7341] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 189.135850][ T7341] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 189.178867][ T7344] overlayfs: conflicting options: nfs_export=on,index=off [ 189.193349][ T7341] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 189.207228][ T7341] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 189.290840][ T7356] netlink: 'syz.1.403': attribute type 11 has an invalid length. [ 189.302469][ T7356] netlink: 220 bytes leftover after parsing attributes in process `syz.1.403'. [ 189.660532][ T5712] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 190.246412][ T30] audit: type=1400 audit(1786479828.571:530): avc: denied { read } for pid=7361 comm="syz.2.409" name="ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 190.286728][ T30] audit: type=1400 audit(1786479828.589:531): avc: denied { map } for pid=7359 comm="syz.4.407" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 190.320220][ T7360] binder: BINDER_SET_CONTEXT_MGR already set [ 190.363729][ T7360] binder: 7359:7360 ioctl 4018620d 200000000240 returned -16 [ 190.442919][ T7360] xt_hashlimit: size too large, truncated to 1048576 [ 190.477076][ T7368] syzkaller0: entered promiscuous mode [ 190.484962][ T30] audit: type=1400 audit(1786479828.793:532): avc: denied { wake_alarm } for pid=7369 comm="syz.1.411" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 190.515179][ T7368] syzkaller0: entered allmulticast mode [ 190.524267][ T7367] xt_hashlimit: size too large, truncated to 1048576 [ 190.528740][ T7363] netlink: 4 bytes leftover after parsing attributes in process `syz.2.409'. [ 190.549701][ T30] audit: type=1800 audit(1786479828.848:533): pid=7373 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.412" name="attr_allow_any_host" dev="configfs" ino=14951 res=0 errno=0 [ 190.658987][ T30] audit: type=1400 audit(1786479828.950:534): avc: denied { read } for pid=7372 comm="syz.0.412" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 190.689827][ T30] audit: type=1400 audit(1786479828.968:535): avc: denied { open } for pid=7372 comm="syz.0.412" path="/69/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 190.732149][ T5753] usb 3-1: USB disconnect, device number 17 [ 190.738117][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 190.738164][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 190.798951][ T30] audit: type=1400 audit(1786479828.968:536): avc: denied { ioctl } for pid=7372 comm="syz.0.412" path="/69/file0/file0" dev="fuse" ino=0 ioctlcmd=0x545c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 191.064160][ T7385] loop3: detected capacity change from 0 to 7 [ 191.091140][ T7387] binfmt_misc: register: failed to install interpreter file ./cgroup.cpu/cgroup.procs [ 191.110036][ T5793] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 191.135551][ T7385] Dev loop3: unable to read RDB block 7 [ 191.157176][ T7385] loop3: unable to read partition table [ 191.171364][ T7385] loop3: partition table beyond EOD, truncated [ 191.208198][ T7385] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 191.348073][ T5793] usb 4-1: Using ep0 maxpacket: 16 [ 191.354598][ T5793] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 191.366040][ T5793] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 191.375521][ T5793] usb 4-1: config 0 has no interface number 0 [ 191.382303][ T5793] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 191.392407][ T5793] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 191.405184][ T5793] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.416180][ T5793] usb 4-1: Product: syz [ 191.420554][ T5793] usb 4-1: Manufacturer: syz [ 191.426817][ T5793] usb 4-1: SerialNumber: syz [ 191.474627][ T7397] netlink: 92 bytes leftover after parsing attributes in process `syz.1.418'. [ 191.504937][ T7397] befs: (nbd1): unable to read superblock [ 191.877736][ T5793] usb 4-1: config 0 descriptor?? [ 191.884892][ T7380] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 191.892759][ T7380] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 192.324376][ T7380] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 192.406291][ T7402] fuse: Unknown parameter 'xr' [ 192.423537][ T7380] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 192.435671][ T7405] input: syz1 as /devices/virtual/input/input15 [ 192.462327][ T7402] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 192.474659][ T7402] overlayfs: missing 'lowerdir' [ 192.718438][ T5793] asix 4-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 193.430550][ T5793] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 193.480711][ T7412] netlink: 'syz.1.421': attribute type 11 has an invalid length. [ 193.488604][ T7412] netlink: 220 bytes leftover after parsing attributes in process `syz.1.421'. [ 193.529837][ T5793] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 193.641680][ T7422] overlayfs: missing 'lowerdir' [ 193.692701][ T7422] netlink: 'syz.2.422': attribute type 11 has an invalid length. [ 193.700599][ T7422] netlink: 220 bytes leftover after parsing attributes in process `syz.2.422'. [ 193.735585][ T5793] asix 4-1:0.34: probe with driver asix failed with error -71 [ 193.825830][ T7417] overlayfs: conflicting options: nfs_export=on,index=off [ 193.853957][ T5793] usb 4-1: USB disconnect, device number 22 [ 194.521425][ T7424] netlink: 8 bytes leftover after parsing attributes in process `syz.4.423'. [ 194.539212][ T7433] IPv6: NLM_F_CREATE should be specified when creating new route [ 194.610878][ T30] audit: type=1400 audit(1786479832.587:537): avc: denied { create } for pid=7437 comm="syz.3.427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 194.679513][ T30] audit: type=1400 audit(1786479832.596:538): avc: denied { write } for pid=7437 comm="syz.3.427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 194.738497][ T5712] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 194.896033][ T7442] mmap: syz.3.427 (7442) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 194.945685][ T5712] usb 1-1: Using ep0 maxpacket: 32 [ 195.011824][ T5712] usb 1-1: unable to get BOS descriptor or descriptor too short [ 195.076966][ T5712] usb 1-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 195.099224][ T30] audit: type=1400 audit(1786479833.039:539): avc: denied { write } for pid=7446 comm="syz.4.430" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 195.099801][ T5712] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 195.130742][ T5712] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 195.189111][ T5712] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.207424][ T5712] usb 1-1: Product: syz [ 195.214321][ T5712] usb 1-1: Manufacturer: syz [ 195.225028][ T5712] usb 1-1: SerialNumber: syz [ 195.800161][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 195.971683][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 195.971700][ T30] audit: type=1400 audit(1786479833.852:548): avc: denied { bind } for pid=7458 comm="syz.3.434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 196.006258][ T30] audit: type=1400 audit(1786479833.879:549): avc: denied { connect } for pid=7458 comm="syz.3.434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 196.032986][ T7461] bond1: Unable to set up delay as MII monitoring is disabled [ 196.049094][ T30] audit: type=1400 audit(1786479833.907:550): avc: denied { write } for pid=7425 comm="syz.0.424" name="rd_mcp_0" dev="configfs" ino=15073 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 196.084018][ T7461] bond1 (unregistering): Released all slaves [ 196.090292][ T30] audit: type=1400 audit(1786479833.907:551): avc: denied { remove_name } for pid=7425 comm="syz.0.424" name="dev0" dev="configfs" ino=15891 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 196.127370][ T30] audit: type=1400 audit(1786479833.907:552): avc: denied { rmdir } for pid=7425 comm="syz.0.424" name="dev0" dev="configfs" ino=15891 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 196.164769][ T5712] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 196.181896][ T7474] netlink: 8 bytes leftover after parsing attributes in process `syz.4.435'. [ 196.193853][ T5712] usb 1-1: MIDIStreaming interface descriptor not found [ 196.207593][ T7474] netlink: 8 bytes leftover after parsing attributes in process `syz.4.435'. [ 196.609576][ T7481] sctp_transport_update_pmtu: 106 callbacks suppressed [ 196.609601][ T7481] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 196.627917][ T7481] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 196.639298][ T7481] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 196.696740][ T5712] usb 1-1: USB disconnect, device number 13 [ 196.759007][ T7481] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 196.787768][ T7481] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 196.802561][ T7481] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 196.834252][ T7481] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 196.846431][ T7481] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 196.859056][ T7481] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 196.873409][ T7481] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 196.941664][ T7485] overlayfs: conflicting options: nfs_export=on,index=off [ 196.960483][ T7485] netlink: 'syz.1.436': attribute type 11 has an invalid length. [ 196.968278][ T7485] netlink: 220 bytes leftover after parsing attributes in process `syz.1.436'. [ 197.013482][ T29] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 197.428025][ T29] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 197.463000][ T7489] comedi comedi0: comedi_config --init_data is deprecated [ 197.476436][ T29] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.521583][ T29] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.545437][ T29] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 197.559677][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.635348][ T29] usb 3-1: config 0 descriptor?? [ 197.860839][ T7497] overlayfs: missing 'lowerdir' [ 197.886540][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 197.897379][ T7497] netlink: 'syz.0.439': attribute type 11 has an invalid length. [ 197.905392][ T7497] netlink: 220 bytes leftover after parsing attributes in process `syz.0.439'. [ 197.946066][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.479866][ T7500] overlayfs: missing 'lowerdir' [ 198.494181][ T29] plantronics 0003:047F:FFFF.0005: reserved main item tag 0xe [ 198.512074][ T29] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 198.520034][ T30] audit: type=1800 audit(1786479836.197:553): pid=7504 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.443" name="attr_allow_any_host" dev="configfs" ino=15224 res=0 errno=0 [ 198.623319][ T29] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 198.925923][ T5697] usb 3-1: USB disconnect, device number 18 [ 198.952090][ T5793] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 199.063150][ T7508] fido_id[7508]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 199.126678][ T7512] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.139808][ T5793] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 199.152677][ T5793] usb 4-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 199.168021][ T5793] usb 4-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 199.180500][ T7516] netlink: 4 bytes leftover after parsing attributes in process `syz.4.446'. [ 199.189496][ T5793] usb 4-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 199.189752][ T7516] bridge_slave_1: left allmulticast mode [ 199.209434][ T7516] bridge_slave_1: left promiscuous mode [ 199.215505][ T7516] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.227752][ T5793] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 199.246931][ T5793] usb 4-1: SerialNumber: syz [ 199.275548][ T7516] bridge_slave_0: left allmulticast mode [ 199.283394][ T7516] bridge_slave_0: left promiscuous mode [ 199.290614][ T7516] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.144115][ T5602] Bluetooth: hci1: command 0x0406 tx timeout [ 200.150234][ T5613] Bluetooth: hci0: command 0x0406 tx timeout [ 200.158715][ T5613] Bluetooth: hci3: command 0x0406 tx timeout [ 200.166884][ T5612] Bluetooth: hci2: command 0x0406 tx timeout [ 201.985157][ T30] audit: type=1400 audit(1786479839.409:554): avc: denied { read } for pid=7541 comm="syz.4.450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 201.989620][ T7552] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 202.115047][ T5793] rndis_host 4-1:253.0: RNDIS init failed, -71 [ 202.121114][ T30] audit: type=1400 audit(1786479839.465:555): avc: denied { read } for pid=7547 comm="syz.1.451" name="cpu_dma_latency" dev="devtmpfs" ino=1312 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1 [ 202.167271][ T7557] fuse: Bad value for 'fd' [ 202.202386][ T5793] rndis_host 4-1:253.0: probe with driver rndis_host failed with error -71 [ 202.212190][ T30] audit: type=1400 audit(1786479839.465:556): avc: denied { open } for pid=7547 comm="syz.1.451" path="/87/dev/cpu_dma_latency" dev="devtmpfs" ino=1312 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1 [ 202.250217][ T5793] usb 4-1: USB disconnect, device number 23 [ 202.303580][ T7558] kvm: user requested TSC rate below hardware speed [ 202.310189][ T7562] overlayfs: missing 'lowerdir' [ 202.564511][ T30] audit: type=1800 audit(1786479839.945:557): pid=7566 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.456" name="attr_allow_any_host" dev="configfs" ino=16057 res=0 errno=0 [ 202.724399][ T5753] lo speed is unknown, defaulting to 1000 [ 202.747906][ T5753] syz1: Port: 1 Link ACTIVE [ 202.764574][ T5793] lo speed is unknown, defaulting to 1000 [ 203.192769][ T30] audit: type=1400 audit(1786479840.517:558): avc: denied { unmount } for pid=5593 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 203.225157][ T30] audit: type=1400 audit(1786479840.554:559): avc: denied { ioctl } for pid=7574 comm="syz.3.459" path="socket:[16488]" dev="sockfs" ino=16488 ioctlcmd=0x6405 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 203.384468][ T7585] FAULT_INJECTION: forcing a failure. [ 203.384468][ T7585] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 203.398146][ T7585] CPU: 1 UID: 0 PID: 7585 Comm: syz.4.464 Tainted: G L syzkaller #0 PREEMPT(full) [ 203.398175][ T7585] Tainted: [L]=SOFTLOCKUP [ 203.398181][ T7585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 203.398190][ T7585] Call Trace: [ 203.398196][ T7585] [ 203.398202][ T7585] dump_stack_lvl+0x100/0x190 [ 203.398231][ T7585] should_fail_ex.cold+0x5/0xa [ 203.398253][ T7585] _copy_from_iter+0x43a/0x1690 [ 203.398283][ T7585] ? __pfx__copy_from_iter+0x10/0x10 [ 203.398307][ T7585] ? __pfx___alloc_skb+0x10/0x10 [ 203.398338][ T7585] netlink_sendmsg+0x808/0xda0 [ 203.398361][ T7585] ? __pfx_netlink_sendmsg+0x10/0x10 [ 203.398384][ T7585] ? selinux_socket_sendmsg+0x198/0x2f0 [ 203.398412][ T7585] ____sys_sendmsg+0xa4d/0xbe0 [ 203.398437][ T7585] ? __pfx_netlink_sendmsg+0x10/0x10 [ 203.398457][ T7585] ? __pfx_____sys_sendmsg+0x10/0x10 [ 203.398494][ T7585] ___sys_sendmsg+0x190/0x1e0 [ 203.398512][ T7585] ? __pfx____sys_sendmsg+0x10/0x10 [ 203.398528][ T7585] ? __lock_acquire+0x49f/0x1a40 [ 203.398549][ T7585] ? get_pid_task+0x106/0x250 [ 203.398588][ T7585] __sys_sendmsg+0x160/0x210 [ 203.398609][ T7585] ? __pfx___sys_sendmsg+0x10/0x10 [ 203.398641][ T7585] do_syscall_64+0x115/0x870 [ 203.398663][ T7585] ? clear_bhb_loop+0x70/0xc0 [ 203.398684][ T7585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.398702][ T7585] RIP: 0033:0x7f0cb6d9e0d9 [ 203.398716][ T7585] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 203.398732][ T7585] RSP: 002b:00007f0cb7d33028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 203.398749][ T7585] RAX: ffffffffffffffda RBX: 00007f0cb7025fa0 RCX: 00007f0cb6d9e0d9 [ 203.398760][ T7585] RDX: 6b7e369c4a37b0ea RSI: 0000200000000200 RDI: 0000000000000004 [ 203.398770][ T7585] RBP: 00007f0cb7d33090 R08: 0000000000000000 R09: 0000000000000000 [ 203.398787][ T7585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.398797][ T7585] R13: 00007f0cb7026038 R14: 00007f0cb7025fa0 R15: 00007ffe93e937a8 [ 203.398820][ T7585] [ 203.630740][ T30] audit: type=1400 audit(1786479840.923:560): avc: denied { read } for pid=7579 comm="syz.2.460" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 203.653252][ T30] audit: type=1400 audit(1786479840.923:561): avc: denied { open } for pid=7579 comm="syz.2.460" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 203.801156][ T30] audit: type=1400 audit(1786479841.080:562): avc: denied { mount } for pid=7578 comm="syz.0.461" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 204.203017][ T30] audit: type=1400 audit(1786479841.450:563): avc: denied { write } for pid=7579 comm="syz.2.460" name="functions" dev="configfs" ino=10383 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 204.497990][ T5697] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 204.988415][ T5707] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 204.996051][ T29] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 205.170277][ T5697] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 205.180417][ T29] usb 2-1: Using ep0 maxpacket: 8 [ 205.180948][ T5697] usb 5-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 205.186063][ T5707] usb 4-1: Using ep0 maxpacket: 16 [ 205.196641][ T5697] usb 5-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 205.204135][ T29] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 205.214458][ T5697] usb 5-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 205.224930][ T5707] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 205.236789][ T5697] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 205.246710][ T29] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 205.259415][ T5697] usb 5-1: SerialNumber: syz [ 205.268872][ T5707] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 205.288754][ T5707] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 205.301833][ T5726] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 205.314477][ T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.329941][ T29] usb 2-1: config 0 descriptor?? [ 205.336885][ T5707] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 205.346594][ T5707] usb 4-1: SerialNumber: syz [ 205.497164][ T5726] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02 [ 205.510213][ T5726] usb 1-1: Dual-Role OTG device on HNP port [ 205.516251][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 205.525530][ T5726] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.546927][ T5726] gspca_main: spca501-2.14.0 probing 0000:0000 [ 205.562077][ T5726] gspca_spca501: reg write: error -32 [ 205.572356][ T29] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 205.583812][ T5726] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 205.595906][ T5726] spca501 1-1:1.0: probe with driver spca501 failed with error -22 [ 205.621459][ T5726] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 205.671999][ T5793] usb 4-1: USB disconnect, device number 24 [ 205.706710][ T5697] rndis_host 5-1:253.0: RNDIS init failed, -71 [ 205.717739][ T5697] rndis_host 5-1:253.0: probe with driver rndis_host failed with error -71 [ 205.761368][ T5697] usb 5-1: USB disconnect, device number 13 [ 205.968423][ T7630] FAULT_INJECTION: forcing a failure. [ 205.968423][ T7630] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 205.984415][ T7630] CPU: 0 UID: 0 PID: 7630 Comm: syz.0.472 Tainted: G L syzkaller #0 PREEMPT(full) [ 205.984445][ T7630] Tainted: [L]=SOFTLOCKUP [ 205.984451][ T7630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 205.984462][ T7630] Call Trace: [ 205.984468][ T7630] [ 205.984478][ T7630] dump_stack_lvl+0x100/0x190 [ 205.984508][ T7630] should_fail_ex.cold+0x5/0xa [ 205.984531][ T7630] _copy_from_user+0x2e/0xd0 [ 205.984558][ T7630] memdup_user+0x6b/0xe0 [ 205.984579][ T7630] strndup_user+0x78/0xe0 [ 205.984600][ T7630] __do_sys_fsconfig+0x7ec/0xcb0 [ 205.984629][ T7630] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 205.984654][ T7630] ? fput+0x79/0x100 [ 205.984691][ T7630] do_syscall_64+0x115/0x870 [ 205.984715][ T7630] ? clear_bhb_loop+0x70/0xc0 [ 205.984735][ T7630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.984752][ T7630] RIP: 0033:0x7f6f1419e0d9 [ 205.984768][ T7630] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 205.984785][ T7630] RSP: 002b:00007f6f15132028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 205.984803][ T7630] RAX: ffffffffffffffda RBX: 00007f6f14425fa0 RCX: 00007f6f1419e0d9 [ 205.984814][ T7630] RDX: 00002000000000c0 RSI: 0000000000000001 RDI: 0000000000000003 [ 205.984824][ T7630] RBP: 00007f6f15132090 R08: 0000000000000000 R09: 0000000000000000 [ 205.984834][ T7630] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 205.984844][ T7630] R13: 00007f6f14426038 R14: 00007f6f14425fa0 R15: 00007ffc3e4516d8 [ 205.984868][ T7630] [ 206.875420][ T7649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.887558][ T7649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.548590][ T5697] usb 2-1: USB disconnect, device number 13 [ 207.704862][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 207.704897][ T30] audit: type=1400 audit(1786479844.598:580): avc: denied { map } for pid=7662 comm="syz.3.483" path="/dev/comedi4" dev="devtmpfs" ino=1277 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 207.996354][ T30] audit: type=1400 audit(1786479844.598:581): avc: denied { execute } for pid=7662 comm="syz.3.483" path="/dev/comedi4" dev="devtmpfs" ino=1277 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 208.102904][ T7669] netlink: 'syz.1.485': attribute type 10 has an invalid length. [ 208.129311][ T7669] team0: Port device dummy0 added [ 208.139811][ T7671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.142629][ T7669] netlink: 'syz.1.485': attribute type 10 has an invalid length. [ 208.151555][ T7671] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.166481][ T7669] team0: Port device dummy0 removed [ 208.175488][ T7669] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 208.307181][ T5793] [ 208.309537][ T5793] ============================================ [ 208.315663][ T5793] WARNING: possible recursive locking detected [ 208.321794][ T5793] syzkaller #0 Tainted: G L [ 208.327756][ T5793] -------------------------------------------- [ 208.333873][ T5793] kworker/0:7/5793 is trying to acquire lock: [ 208.339923][ T5793] ffff88803276e128 (&grp->list_lock){.+.+}-{3:3}, at: snd_seq_deliver_event+0x230/0x860 [ 208.349648][ T5793] [ 208.349648][ T5793] but task is already holding lock: [ 208.357007][ T5793] ffff8880534c0128 (&grp->list_lock){.+.+}-{3:3}, at: snd_seq_deliver_event+0x230/0x860 [ 208.366741][ T5793] [ 208.366741][ T5793] other info that might help us debug this: [ 208.374784][ T5793] Possible unsafe locking scenario: [ 208.374784][ T5793] [ 208.382206][ T5793] CPU0 [ 208.385463][ T5793] ---- [ 208.388714][ T5793] lock(&grp->list_lock); [ 208.393101][ T5793] lock(&grp->list_lock); [ 208.397487][ T5793] [ 208.397487][ T5793] *** DEADLOCK *** [ 208.397487][ T5793] [ 208.405627][ T5793] May be due to missing lock nesting notation [ 208.405627][ T5793] [ 208.413931][ T5793] 3 locks held by kworker/0:7/5793: [ 208.419100][ T5793] #0: ffff88801bc0b140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 208.429525][ T5793] #1: ffffc900048b7d08 ((work_completion)(&runtime->event_work)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 208.441421][ T5793] #2: ffff8880534c0128 (&grp->list_lock){.+.+}-{3:3}, at: snd_seq_deliver_event+0x230/0x860 [ 208.451580][ T5793] [ 208.451580][ T5793] stack backtrace: [ 208.457459][ T5793] CPU: 0 UID: 0 PID: 5793 Comm: kworker/0:7 Tainted: G L syzkaller #0 PREEMPT(full) [ 208.457476][ T5793] Tainted: [L]=SOFTLOCKUP [ 208.457480][ T5793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 208.457488][ T5793] Workqueue: events snd_rawmidi_input_event_work [ 208.457509][ T5793] Call Trace: [ 208.457513][ T5793] [ 208.457519][ T5793] dump_stack_lvl+0x100/0x190 [ 208.457533][ T5793] print_deadlock_bug.cold+0xbd/0xca [ 208.457551][ T5793] __lock_acquire+0x1256/0x1a40 [ 208.457566][ T5793] lock_acquire+0x1b9/0x370 [ 208.457580][ T5793] ? snd_seq_deliver_event+0x230/0x860 [ 208.457598][ T5793] ? do_raw_read_unlock+0x3f/0x70 [ 208.457622][ T5793] _raw_read_lock+0x5f/0x70 [ 208.457635][ T5793] ? snd_seq_deliver_event+0x230/0x860 [ 208.457652][ T5793] snd_seq_deliver_event+0x230/0x860 [ 208.457669][ T5793] ? do_raw_spin_lock+0x128/0x260 [ 208.457685][ T5793] ? __pfx_snd_seq_deliver_event+0x10/0x10 [ 208.457703][ T5793] ? mark_held_locks+0x40/0x70 [ 208.457718][ T5793] ? lockdep_hardirqs_on+0x78/0x100 [ 208.457738][ T5793] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 208.457751][ T5793] ? client_use_ptr+0x107/0x4b0 [ 208.457770][ T5793] snd_seq_kernel_client_dispatch+0x16f/0x1b0 [ 208.457796][ T5793] queue_broadcast_event.isra.0+0x143/0x1b0 [ 208.457814][ T5793] ? __pfx_queue_broadcast_event.isra.0+0x10/0x10 [ 208.457827][ T5793] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 208.457840][ T5793] ? snd_seq_timer_start+0x1f0/0x2a0 [ 208.457855][ T5793] snd_seq_control_queue+0x709/0xb70 [ 208.457867][ T5793] ? __pfx_event_input_timer+0x10/0x10 [ 208.457882][ T5793] __snd_seq_deliver_single_event+0x127/0x1c0 [ 208.457900][ T5793] snd_seq_deliver_single_event+0x31f/0x8c0 [ 208.457918][ T5793] ? __pfx_snd_seq_deliver_single_event+0x10/0x10 [ 208.457935][ T5793] ? __lock_acquire+0x49f/0x1a40 [ 208.457951][ T5793] snd_seq_deliver_event+0x44b/0x860 [ 208.457967][ T5793] ? do_raw_spin_lock+0x128/0x260 [ 208.457984][ T5793] ? __pfx_snd_seq_deliver_event+0x10/0x10 [ 208.458001][ T5793] ? mark_held_locks+0x40/0x70 [ 208.458014][ T5793] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 208.458027][ T5793] ? lockdep_hardirqs_on+0x78/0x100 [ 208.458040][ T5793] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 208.458053][ T5793] ? client_use_ptr+0x107/0x4b0 [ 208.458069][ T5793] snd_seq_kernel_client_dispatch+0x16f/0x1b0 [ 208.458087][ T5793] send_timer_event.isra.0+0x130/0x190 [ 208.458105][ T5793] ? __pfx_send_timer_event.isra.0+0x10/0x10 [ 208.458123][ T5793] ? lockdep_hardirqs_on+0x78/0x100 [ 208.458138][ T5793] ? snd_seq_queue_timer_set_tempo+0x199/0x510 [ 208.458151][ T5793] snd_seq_oss_timer_start+0x1db/0x320 [ 208.458169][ T5793] ? __pfx_snd_seq_oss_timer_start+0x10/0x10 [ 208.458187][ T5793] ? snd_seq_oss_readq_put_timestamp+0xd1/0x260 [ 208.458207][ T5793] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 208.458222][ T5793] ? find_slot+0x166/0x1b0 [ 208.458234][ T5793] snd_seq_oss_midi_input+0x467/0xa30 [ 208.458247][ T5793] ? __pfx_snd_seq_oss_midi_input+0x10/0x10 [ 208.458261][ T5793] ? find_held_lock+0x2b/0x80 [ 208.458271][ T5793] ? snd_seq_port_use_ptr+0x128/0x190 [ 208.458286][ T5793] snd_seq_oss_event_input+0x194/0x250 [ 208.458297][ T5793] ? __pfx_snd_seq_oss_event_input+0x10/0x10 [ 208.458308][ T5793] __snd_seq_deliver_single_event+0x127/0x1c0 [ 208.458326][ T5793] snd_seq_deliver_single_event+0x31f/0x8c0 [ 208.458344][ T5793] ? __pfx_snd_seq_deliver_single_event+0x10/0x10 [ 208.458361][ T5793] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 208.458374][ T5793] ? lockdep_hardirqs_on+0x78/0x100 [ 208.458388][ T5793] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 208.458401][ T5793] ? snd_seq_timer_get_cur_tick+0x50/0x70 [ 208.458417][ T5793] snd_seq_deliver_event+0x2c1/0x860 [ 208.458435][ T5793] ? __pfx_snd_seq_deliver_event+0x10/0x10 [ 208.458452][ T5793] ? mark_held_locks+0x40/0x70 [ 208.458465][ T5793] ? lockdep_hardirqs_on+0x78/0x100 [ 208.458479][ T5793] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 208.458492][ T5793] ? client_use_ptr+0x107/0x4b0 [ 208.458507][ T5793] snd_seq_kernel_client_dispatch+0x16f/0x1b0 [ 208.458525][ T5793] snd_midi_input_event+0x32f/0x470 [ 208.458541][ T5793] ? __pfx_snd_midi_input_event+0x10/0x10 [ 208.458556][ T5793] ? lock_acquire+0x5e/0x370 [ 208.458570][ T5793] ? __pfx_snd_midi_input_event+0x10/0x10 [ 208.458584][ T5793] snd_rawmidi_input_event_work+0x61/0x80 [ 208.458602][ T5793] process_one_work+0xa23/0x1940 [ 208.458622][ T5793] ? __pfx_process_one_work+0x10/0x10 [ 208.458635][ T5793] ? __pfx_snd_rawmidi_input_event_work+0x10/0x10 [ 208.458654][ T5793] worker_thread+0x5ef/0xe50 [ 208.458667][ T5793] ? __pfx_worker_thread+0x10/0x10 [ 208.458680][ T5793] ? kthread+0x13a/0x450 [ 208.458690][ T5793] ? __pfx_worker_thread+0x10/0x10 [ 208.458701][ T5793] kthread+0x370/0x450 [ 208.458711][ T5793] ? __pfx_kthread+0x10/0x10 [ 208.458722][ T5793] ret_from_fork+0x72b/0xd50 [ 208.458738][ T5793] ? __pfx_ret_from_fork+0x10/0x10 [ 208.458754][ T5793] ? __switch_to+0x800/0x10f0 [ 208.458765][ T5793] ? __pfx_kthread+0x10/0x10 [ 208.458776][ T5793] ret_from_fork_asm+0x1a/0x30 [ 208.458795][ T5793] [ 208.953293][ T7619] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 209.201973][ T7650] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 209.379412][ T30] audit: type=1400 audit(1786479846.232:582): avc: denied { write } for pid=7683 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 209.430606][ T30] audit: type=1400 audit(1786479846.278:583): avc: denied { write } for pid=7694 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 209.554028][ T30] audit: type=1400 audit(1786479846.389:584): avc: denied { write } for pid=7696 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 209.591041][ T30] audit: type=1400 audit(1786479846.435:585): avc: denied { write } for pid=7707 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 209.716027][ T30] audit: type=1400 audit(1786479846.536:586): avc: denied { write } for pid=7709 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 209.749139][ T30] audit: type=1400 audit(1786479846.573:587): avc: denied { write } for pid=7720 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 209.871835][ T30] audit: type=1400 audit(1786479846.693:588): avc: denied { write } for pid=7722 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 209.909414][ T30] audit: type=1400 audit(1786479846.721:589): avc: denied { write } for pid=7733 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1