last executing test programs: 1m1.617450807s ago: executing program 2 (id=278): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x6, 0x9, &(0x7f0000000ac0)=@raw=[@generic={0xbf, 0x6, 0x1}, @call={0x85, 0x0, 0x0, 0xd0}, @generic={0x18, 0x2, 0x0, 0x0, 0x100000a}, @generic, @generic={0x18, 0x2, 0x0, 0x0, 0x200000a}, @generic, @generic={0xbf, 0x1, 0x6}, @generic={0x85, 0x0, 0x0, 0x0, 0x41}, @generic={0x95}], &(0x7f0000001280)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000022c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000002340)="0011223344550011223344560800", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m0.152213603s ago: executing program 2 (id=281): r0 = msgget$private(0x0, 0x5) msgctl$IPC_SET(r0, 0x1, &(0x7f0000005c80)={{0x3, 0x0, 0x0, 0x0, 0x0, 0xa1, 0x8}, 0x0, 0x0, 0x6, 0x9, 0xffffffffffff7ffe, 0x0, 0x6, 0xd, 0xe6f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2a, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x84}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x8, 0x10000, 0x3}, 0x20}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x80}, 0x2) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f0000000080)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f0000004300)=[{&(0x7f00000001c0)="27030200dc0f14000e0007000024c1020000ff8807c2fb7fe0406e52534b4f6b3d327db412f40000000000034000", 0x2e}], 0x1}, 0x4005) 56.837812224s ago: executing program 2 (id=286): syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x21, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x2, 0x0, 0xe7}}}}}}, 0x0) 53.97012651s ago: executing program 2 (id=293): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) mount(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000000)='overlay\x00', 0x8000, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x28d, 0x0, 0x5}]}) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000000)=ANY=[@ANYRES32=r0], 0x8) 53.371018592s ago: executing program 0 (id=296): socket$pppl2tp(0x18, 0x1, 0x1) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$kcm(0x29, 0x5, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = getpid() ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0xfb37, 0x7, 0x6e4, 0x5, 0x1}) r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r3, 0xc1105511, &(0x7f0000000040)={0x7, 0x3, 0x40, 0x10000, 'syz1\x00', 0x4000041}) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r3, 0xc008551a, &(0x7f0000000080)={0x4df, 0x14, [0x10, 0xe72b, 0x3ff, 0xbe, 0x100]}) r4 = syz_pidfd_open(r2, 0x0) setns(r4, 0x24020000) r5 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x1102) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r7, 0x804c4700, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, "3eccd8f9d20000000000001000000200000500"}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x20, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="8400000010000305000000070000070000000000", @ANYRES32=0x0, @ANYBLOB="1546010007ef0000540012800c0001006d6163766c616e004400028006000200010000000800090001efa8000800030003000000080007000500000008000100100000000600020001000000040005800a000400aaaaaaaaaa2e000008000500", @ANYRES16=r0], 0x84}}, 0x20008040) 51.230473916s ago: executing program 2 (id=299): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = openat$panthor(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$DRM_IOCTL_PANTHOR_VM_CREATE(r0, 0xc0106441, &(0x7f0000000200)={0x0, 0x0, 0xfffffffffffeffff}) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$inet6(r1, &(0x7f0000019680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20004855) setsockopt$inet6_tcp_int(r1, 0x6, 0x4, &(0x7f0000000000)=0x7f, 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000010340)) r4 = socket$kcm(0x23, 0x5, 0x0) listen(r4, 0x800) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r6, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) accept4(r4, 0x0, 0x0, 0x80000) writev(r6, 0x0, 0x0) syz_open_dev$sndpcmc(&(0x7f00000001a0), 0x0, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'wg1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x38, 0x24, 0xd0f, 0xfffffffd, 0x25dfdbfe, {0x60, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x8, 0xffffffff}]}}]}, 0x38}}, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) 50.887649922s ago: executing program 4 (id=301): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0x13, &(0x7f00000003c0)=ANY=[@ANYBLOB="18003f00020000000000000000000000180100002020000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000808500000070000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 49.474874364s ago: executing program 4 (id=304): r0 = openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000000040)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x2, 0x3a, '\\.]^\\', 0x3a, '', 0x3a, './file0'}, 0x2c) syz_io_uring_setup(0x7f9c, &(0x7f0000000380)={0x0, 0x2c63, 0xf5af9aeab68db5a, 0x2, 0x57}, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x2e, 0x400, 0x12345}) 49.049311427s ago: executing program 3 (id=305): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/class/devcoredump/disabled\x00', 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@bridge_newneigh={0x28, 0x1c, 0x401, 0x70bd29, 0x25dfdbff, {0x7, 0x0, 0x0, r2, 0x40, 0x54, 0x6}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x44801}, 0x840) write(r0, &(0x7f00000003c0)='1', 0x1) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000040)={0x0, 0x1c00}, &(0x7f0000000080)=0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./debug/ieee80211/phy0/aql_enable\x00', 0x1, 0x4) write(r3, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000440)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x1a, 0x28, 0x66, 0x0, 0x3, 0x6, 0x0, @remote, @local}, {{0x4e22, 0x4e23, 0xffffffff, 0x0, 0x0, 0x0, 0x5, 0x10, 0x4ede}}}}}}, 0x0) 48.995547292s ago: executing program 0 (id=306): r0 = io_uring_setup(0x4823, &(0x7f0000000100)={0x0, 0x3ffe, 0x40, 0x2, 0x16d}) pause() bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) syz_emit_vhci(0x0, 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setaffinity(r1, 0x0, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x67) syz_open_dev$tty1(0xc, 0x4, 0x3) mount$cgroup(0x0, 0x0, 0x0, 0x2010042, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x180, 0x0) ioctl$SNDCTL_SYNTH_ID(r2, 0xc08c5114, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448ca, 0x0) syz_open_dev$dri(0x0, 0x33f, 0x801) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000040)=0x1) close_range(r0, 0xffffffffffffffff, 0x0) 48.683768901s ago: executing program 2 (id=307): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x60, 0x1}) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000240)={@hyper}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) r2 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r3}, &(0x7f0000000080)) read$FUSE(r2, &(0x7f00000008c0)={0x2020}, 0xfffffef0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) 48.430647431s ago: executing program 1 (id=308): move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='pstore\x00', 0x2040000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x240, 0x310) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$mtd(&(0x7f0000000900), 0x46, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a00000004000000040000000f"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r4}, 0xc) r5 = dup2(r2, r1) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000100)="140000001a004f7fb3e45f2024d2f1c9fb470000", 0x14) recvmmsg(r6, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1}, 0x8}], 0x1, 0x10122, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaaaa4c77b99cbb86dd60c61e000000000000000100000000e01f00000000000000ff0200000000000000000000000000010100c204"], 0x0) ioctl$sock_bt_hci(r5, 0x4d13, 0x0) io_uring_setup(0xf08, &(0x7f00000003c0)={0x0, 0xfb6e, 0x38c1, 0x4, 0xf0}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000000c000/0x1000)=nil, &(0x7f000001f000/0x1000)=nil, &(0x7f0000015000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f000000c000/0x4000)=nil, &(0x7f000001d000/0x3000)=nil, &(0x7f0000012000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) io_uring_register$IORING_REGISTER_FILES(r5, 0x20, &(0x7f0000000000), 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f40700090400", 0x10) add_key(&(0x7f0000000000)='pkcs7_test\x00', 0x0, &(0x7f0000000100)="307106092a864886f70d010702a0643062020101310f300d06096086480165030402010500300b06092a864886f70d010701313f303d0201013014300f310d300b0603550403130454657374020101300d06096086481165030402010500300d06092a864886f70d0101010500040401020304", 0x73, 0xffffffffffffffff) ioctl(r0, 0xc138fd02, &(0x7f0000000000)="0400000000000000") r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x2c, &(0x7f0000000280)=0x3ff, 0x4) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x6b}}, './dev/mapper/control\x00'}) 48.270452678s ago: executing program 4 (id=309): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mmap(&(0x7f0000ff2000/0xd000)=nil, 0xd000, 0x2000004, 0x4001011, 0xffffffffffffffff, 0x34da2000) bpf$ENABLE_STATS(0x20, 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000000)={0x0, {{0x2, 0x4e20, @broadcast}}}, 0x88) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r2 = syz_open_dev$vim2m(0x0, 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0285629, &(0x7f0000000080)={0x0, @sdr={0x3432564e, 0xffffffff}}) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) readahead(r3, 0x3, 0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x0) listen(0xffffffffffffffff, 0x10) syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00') close(0xffffffffffffffff) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6410, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) r6 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000180)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x38, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x1d, 0x12, "bb9b69de4386bf2ae6a3b321505c68cd"}, @md5sig={0x1d, 0x12, "c52a2d43d2c85500"}]}}}}}}}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x994}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080400007c09e8fe55a10a0015c005001c2603600e1208000f0000000401a8001600a4000140000000007fffffffb94dcf5c0461c1d6900094007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=@newqdisc={0x1b4, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {0x1, 0xb}, {0xffff, 0x5}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x184, 0x2, {{0x4, [0xa, 0xe, 0x10, 0x6, 0x10, 0x10, 0xf, 0x0, 0x9, 0xd, 0xd, 0xc, 0xf, 0x4, 0x10, 0xd], 0x1, [0x7, 0x9, 0x2, 0x4, 0x4, 0x1, 0xc000, 0x9, 0x1, 0x8, 0x5, 0x1, 0x6, 0x3ff, 0x3, 0x6], [0x1, 0x9, 0x4c5, 0x1, 0x90d, 0x6, 0x40, 0x101, 0x1000, 0x60, 0x1, 0x7, 0x5, 0x9, 0x9, 0x6]}, [@TCA_MQPRIO_MAX_RATE64={0x10, 0x4, 0x0, 0x1, [{0xc, 0x4, 0x187d}]}, @TCA_MQPRIO_MAX_RATE64={0x40, 0x4, 0x0, 0x1, [{0xc, 0x4, 0x5}, {0xc, 0x4, 0x7}, {0xc, 0x4, 0x31}, {0xc, 0x4, 0x80000001}, {0xc, 0x4, 0x3}]}, @TCA_MQPRIO_MIN_RATE64={0xb8, 0x3, 0x0, 0x1, [{0xc, 0x3, 0xffffffffffffff81}, {0xc, 0x3, 0x6}, {0xc, 0x3, 0x4}, {0xc, 0x3, 0x1}, {0xc, 0x3, 0xc1}, {0xc, 0x3, 0x4}, {0xc, 0x3, 0x88}, {0xc, 0x3, 0x7fff}, {0xc}, {0xc, 0x3, 0x2}, {0xc, 0x3, 0x9}, {0xc, 0x3, 0x20}, {0xc, 0x3, 0x401}, {0xc, 0x3, 0x6}, {0xc, 0x3, 0x8000000000000001}]}, @TCA_MQPRIO_SHAPER={0x6, 0x2, 0x1}, @TCA_MQPRIO_MAX_RATE64={0x1c, 0x4, 0x0, 0x1, [{0xc, 0x4, 0x1}, {0xc, 0x4, 0x4}]}]}}}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x240448a4}, 0x0) 47.549921473s ago: executing program 3 (id=310): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, 0x0, 0x0) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async, rerun: 32) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (rerun: 32) socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, 0x0, 0x0) (rerun: 64) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xfffffffffffffffe}, 0x56) (async) openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x0) (async) openat2$dir(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup/../file0\x00', &(0x7f0000000280)={0xc0000, 0x98, 0x28}, 0x18) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) openat(0xffffffffffffffff, &(0x7f0000000180)='./cgroup/../file0\x00', 0x404e00, 0x88) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = fanotify_init(0x4, 0x800) fanotify_mark(r2, 0x441, 0x800003b, 0xffffffffffffffff, 0x0) (async, rerun: 32) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) write(r4, &(0x7f0000000040)="4017cb5ebb2482aeafa8e4e9433e66a1e1f3a8210dd328b4e6318f580f0368c795fbaea213029696dfe61f58f2db485c5c0c1dc647cda0209e78f92e51a29960d9e381ae8ec01870728fea22d83f9932707434cdb812f818933de6cc87f057ea0f849df688f7e2d7c3cc86875126b5ea3398d23a559c5e132b8335d082f0115e142c4c77688a41e343a1881f44b95ef0aff88b3c19bcf9cd864a9b", 0xfffffc8c) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) (async) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000600)=ANY=[@ANYBLOB], 0x6) (async) unshare(0x8000000) 41.908776975s ago: executing program 1 (id=311): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000740), 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000280)={0x0, 'macsec0\x00', {0x1}, 0x7259}) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000900)='./dev\x00', &(0x7f0000000940)='devtmpfs\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x50, r2, 0x801, 0x400, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee33908f8eef16f162471f4"}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}]}]}, 0x50}}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./dev/ttyGS0\x00', 0x2, 0x0) write(r6, 0x0, 0x0) close(r6) r7 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) r8 = landlock_create_ruleset(&(0x7f0000000080)={0xf4da, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r8, 0x0) landlock_restrict_self(r7, 0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0xc58) futex(&(0x7f0000000080), 0x5, 0x0, 0x0, &(0x7f0000000200), 0x14fffffd) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r9, &(0x7f0000002fc0)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, 0x0}}], 0x1, 0x20080058) writev(r9, &(0x7f0000000480)=[{0x0}], 0x1) 39.945230567s ago: executing program 0 (id=312): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000700)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@pktinfo={{0x24, 0x29, 0x32, {@remote}}}], 0x28}}], 0x2, 0x4000000) (fail_nth: 3) 39.102682591s ago: executing program 3 (id=313): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bind$bt_rfcomm(r0, &(0x7f0000000100)={0x1f, @any, 0x1}, 0x10) setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, 0x0, 0x0) connect$bt_rfcomm(r0, &(0x7f0000000300)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}, 0x10) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) syz_emit_vhci(0x0, 0x0) nanosleep(0x0, 0x0) close(r0) r1 = socket(0x2, 0x400000000002, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000000000)=ANY=[@ANYBLOB="666d6c74657200000000000000000000000000002000000000000000000000000400000073c9e7fb"], &(0x7f0000000100)=0x28) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x200000087}, 0x0) mmap$IORING_OFF_SQ_RING(0xfffffffffffffffe, 0x7ffffffff000, 0x0, 0x401d031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f0000000480)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./proc/devices\x00', 0x0, 0x0) pread64(r5, &(0x7f0000000640)=""/4130, 0x1022, 0x1000000000001) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) read$FUSE(r6, &(0x7f0000004500)={0x2020}, 0xfffffe0c) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x14, 0x30, 0xb}, 0x14}}, 0x44) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r8, &(0x7f00000000c0)=ANY=[], 0xbfb3) 39.095360683s ago: executing program 4 (id=314): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000100)={'bond0\x00', @ifru_names='erspan0\x00'}) ioctl$TCFLSH(r1, 0x80047437, 0x8000000000000000) sendmmsg$inet6(r0, &(0x7f0000000700)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="24000000000000002900000032000000fe8000000000000000000000000000bb", @ANYRES32=0x0, @ANYBLOB], 0x28}}], 0x2, 0x4000000) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00ed6a", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x2c00, 0x2, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="6800000042000100000000000000000003010000061400002600010000112233445566778899aabb08004500e4140000000001170000010203040506070800000c00020006000600080000000e00030008001400040019"], 0x68}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'tunl0\x00', &(0x7f0000000080)={'sit0\x00', 0x0, 0x7, 0x8000, 0x83, 0x9, {{0xb, 0x4, 0x0, 0x3d, 0x2c, 0x67, 0x0, 0xf8, 0x2f, 0x0, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x29}, {[@ra={0x94, 0x4, 0x1}, @generic={0x88, 0x8, "a5e023c50fe6"}, @timestamp_addr={0x44, 0xc, 0xed, 0x1, 0x4, [{@rand_addr=0x64010100, 0x7}]}]}}}}}) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) write$binfmt_aout(r6, &(0x7f00000003c0)=ANY=[], 0xff2e) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000040)={0x0, 0x40000000, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) r7 = syz_open_pts(r6, 0x0) r8 = dup3(r7, r6, 0x0) ioctl$FE_GET_INFO(r8, 0x80a86f3d, &(0x7f0000000480)) r9 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r10, r11, r12, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}}) io_uring_enter(r9, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) ioctl$TCSETSW2(r8, 0x402c542c, &(0x7f0000000bc0)={0x7, 0xdac0, 0x8, 0x7, 0x7, "4d00d26bd8b1eb227a1cc40b7653569eba00", 0x9, 0xa4}) sendmsg$nl_route(r4, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=@ipv6_newaddr={0x98, 0x14, 0x200, 0x70bd2b, 0x25dfdbff, {0xa, 0x38, 0x4, 0xfd, r5}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x4, 0xffff, 0x1}}, @IFA_ADDRESS={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}, @IFA_CACHEINFO={0x14, 0x6, {0x10, 0x8, 0x80000001, 0x3a}}, @IFA_ADDRESS={0x14, 0x1, @remote}, @IFA_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0xf}}, @IFA_RT_PRIORITY={0x8, 0x9, 0x7}, @IFA_CACHEINFO={0x14, 0x6, {0x3, 0x1, 0xc0000000, 0x7}}]}, 0x98}, 0x1, 0x0, 0x0, 0x8004}, 0x48000) ioctl$KVM_SMI(r8, 0xaeb7) 38.924870169s ago: executing program 0 (id=315): r0 = openat$vimc1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) socketpair(0x12, 0x3, 0x4052f6a7, &(0x7f0000000100)) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) r3 = pidfd_getfd(r2, r0, 0x0) ioctl$VT_SETMODE(r3, 0x5602, &(0x7f00000000c0)={0x7, 0x44, 0x2, 0x6}) mmap$IORING_OFF_SQES(0x0, 0x7fff, 0x0, 0x10010, r2, 0x10000000) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0485661, &(0x7f0000000040)={0x2, 0x1, @start={0x7}}) syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12014101175129205705092006c70102010109022400010200100009045819028ab53800090506020001000006090582020002"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCXONC(r4, 0x540a, 0x2) close(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./file0\x00', 0x200403, 0x144) close(0x3) mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001517ee40f00a057a00f6000203010902120001000000000904000000ff"], 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20004000) syz_usb_control_io(r6, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000300)=ANY=[@ANYBLOB="200f1100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write(0xffffffffffffffff, 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000006c0)=@o_path={0x0}, 0x18) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000200)={'batadv_slave_1\x00', {0x2, 0x0, @remote}}) ioctl$sock_inet_SIOCSIFADDR(r7, 0x891c, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x4e23, @private=0xfffffffc}}) socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x2b) 38.438713402s ago: executing program 1 (id=316): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='dev\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0) syz_emit_ethernet(0x8a, &(0x7f0000000240)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x21, 0x7c, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x1a, 0x2, 0x2, 0x0, 0xe7}, {"341e39173ac53c5ca959147bc79557dd6acacdb3e0cf94dbfde950acabf0ec46bc9ead48304523b937c2163ff5bacb3504225e0ce0b5d3b402920165874d3e1890af6a"}}}}}}, 0x0) syz_usb_connect(0x3, 0x32, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='dev/ttyUSB0\x00', 0x2, 0x0) r1 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x80) openat(r2, &(0x7f0000000040)='.\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) ioctl$BTRFS_IOC_SEND(r3, 0x40489426, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0], 0x4, 0xa, 0x8, 0x2}) ioctl$DRM_IOCTL_MODE_GETGAMMA(r3, 0xc02064a4, &(0x7f00000002c0)={r4, 0x3, &(0x7f0000000200)=[0x431f, 0x3, 0xffff], &(0x7f0000000240)=[0x1e1, 0x9], &(0x7f0000000280)}) r5 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_opts(r5, 0x0, 0x4, 0x0, 0x0) sendto$inet(r5, &(0x7f0000000140)='\a', 0x1, 0x44, &(0x7f00000002c0)={0x2, 0x4e21, @loopback}, 0x10) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, r4}) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[], 0x20) io_uring_setup(0x2bc4, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) 34.243185818s ago: executing program 1 (id=317): r0 = socket$kcm(0x11, 0x2, 0x300) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = open(&(0x7f0000000040)='./bus\x00', 0x141b42, 0x8) splice(r1, 0x0, r3, 0x0, 0x402000784853bb, 0x0) fcntl$setpipe(r2, 0x407, 0x2010001) write$P9_RLOPEN(r2, &(0x7f0000000180)={0x18, 0xd, 0x2, {{0x30, 0x3, 0x7}, 0xe}}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff}, [@call={0x85, 0x0, 0x0, 0x2e}, @printk={@lld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x58}}, 0x0) 34.142974163s ago: executing program 0 (id=318): r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000340)={0x2020}, 0x2020) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x100) fcntl$setlease(r2, 0x400, 0x2) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = fanotify_init(0x200, 0x0) r5 = memfd_create(&(0x7f0000000500)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17', 0x1) r6 = dup(r5) fanotify_mark(r4, 0x1, 0x48000047, r6, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00') read$FUSE(r7, &(0x7f0000004200)={0x2020}, 0x2020) ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000480)=0x6) ioctl$KVM_CAP_VM_TYPES(r2, 0x4068aea3, &(0x7f0000000180)={0xeb, 0x0, 0x8}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x6c}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000080)={0x8400, 0x1, 0x0, 0x10000, 0x16, "4415264a88b82c521113fb235902af2556c6b6"}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) connect$packet(r6, &(0x7f0000000240)={0x11, 0x18, r11, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x6c, 0x2, 0x6, 0x1, 0x6000000, 0x0, {0x3, 0x0, 0x2}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010102}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0xc4}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0) 33.88880465s ago: executing program 4 (id=319): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000013c0)=[@in={0x2, 0x4e1e, @private=0xa010102}]}, &(0x7f0000000180)=0x10) r1 = syz_usb_connect(0x3, 0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040710429030001010200010902190001010080320904"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) getsockopt$bt_hci(r0, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) 33.813772908s ago: executing program 3 (id=320): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/class/devcoredump/disabled\x00', 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@bridge_newneigh={0x28, 0x1c, 0x401, 0x70bd29, 0x25dfdbff, {0x7, 0x0, 0x0, r2, 0x40, 0x54, 0x6}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x44801}, 0x840) write(r0, &(0x7f00000003c0)='1', 0x1) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000040)={0x0, 0x1c00}, &(0x7f0000000080)=0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./debug/ieee80211/phy0/aql_enable\x00', 0x1, 0x4) write(r3, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000440)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x1a, 0x28, 0x66, 0x0, 0x3, 0x6, 0x0, @remote, @local}, {{0x4e22, 0x4e23, 0xffffffff, 0x0, 0x0, 0x0, 0x5, 0x10, 0x4ede}}}}}}, 0x0) 33.495095372s ago: executing program 32 (id=307): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x60, 0x1}) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000240)={@hyper}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) r2 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r3}, &(0x7f0000000080)) read$FUSE(r2, &(0x7f00000008c0)={0x2020}, 0xfffffef0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) 33.151503396s ago: executing program 1 (id=322): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="340000002000010025bd7000000000000a00000008001600", @ANYRES32=0x0, @ANYBLOB="180017"], 0x34}, 0x1, 0x0, 0x0, 0x40940}, 0x0) (fail_nth: 6) 33.099258118s ago: executing program 3 (id=323): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0500000005000000070000000900000040000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000680)=@framed={{}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffff}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') r4 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) quotactl_fd$Q_SETINFO(r4, 0xffffffff80000601, 0x0, &(0x7f0000000300)={0x5, 0x2, 0x1, 0x3}) quotactl_fd$Q_SYNC(r4, 0xffffffff80000101, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r3}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff0000000000008500008085100000060000006e080000000000001800000000000000000000000000000095000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2}, 0x94) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f00000001c0)=[{0x5, 0x5, 0xff, 0x7}, {0x9, 0x4, 0x6, 0xead2}, {0x2, 0x6, 0xb, 0x7}]}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r5, 0x8982, &(0x7f0000000200)) bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r6, &(0x7f0000000040)=ANY=[], 0x6) sendmsg$nl_route(r5, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=ANY=[@ANYRES16=r5, @ANYRES32=0x0, @ANYBLOB="00000000400000001400128009000100766574680000000004000280080040", @ANYRES32=0x0, @ANYRES32=r0], 0x48}}, 0x0) socket$netlink(0x10, 0x3, 0x0) 32.933700459s ago: executing program 0 (id=324): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mmap(&(0x7f0000ff2000/0xd000)=nil, 0xd000, 0x2000004, 0x4001011, 0xffffffffffffffff, 0x34da2000) bpf$ENABLE_STATS(0x20, 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000000)={0x0, {{0x2, 0x4e20, @broadcast}}}, 0x88) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r2 = syz_open_dev$vim2m(0x0, 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0285629, &(0x7f0000000080)={0x0, @sdr={0x3432564e, 0xffffffff}}) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) readahead(r3, 0x3, 0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x0) listen(0xffffffffffffffff, 0x10) syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00') close(0xffffffffffffffff) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6410, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) r6 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000180)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x38, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x1d, 0x12, "bb9b69de4386bf2ae6a3b321505c68cd"}, @md5sig={0x1d, 0x12, "c52a2d43d2c85500"}]}}}}}}}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x994}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080400007c09e8fe55a10a0015c005001c2603600e1208000f0000000401a8001600a4000140000000007fffffffb94dcf5c0461c1d6900094007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=@newqdisc={0x1b4, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {0x1, 0xb}, {0xffff, 0x5}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x184, 0x2, {{0x4, [0xa, 0xe, 0x10, 0x6, 0x10, 0x10, 0xf, 0x0, 0x9, 0xd, 0xd, 0xc, 0xf, 0x4, 0x10, 0xd], 0x1, [0x7, 0x9, 0x2, 0x4, 0x4, 0x1, 0xc000, 0x9, 0x1, 0x8, 0x5, 0x1, 0x6, 0x3ff, 0x3, 0x6], [0x1, 0x9, 0x4c5, 0x1, 0x90d, 0x6, 0x40, 0x101, 0x1000, 0x60, 0x1, 0x7, 0x5, 0x9, 0x9, 0x6]}, [@TCA_MQPRIO_MAX_RATE64={0x10, 0x4, 0x0, 0x1, [{0xc, 0x4, 0x187d}]}, @TCA_MQPRIO_MAX_RATE64={0x40, 0x4, 0x0, 0x1, [{0xc, 0x4, 0x5}, {0xc, 0x4, 0x7}, {0xc, 0x4, 0x31}, {0xc, 0x4, 0x80000001}, {0xc, 0x4, 0x3}]}, @TCA_MQPRIO_MIN_RATE64={0xb8, 0x3, 0x0, 0x1, [{0xc, 0x3, 0xffffffffffffff81}, {0xc, 0x3, 0x6}, {0xc, 0x3, 0x4}, {0xc, 0x3, 0x1}, {0xc, 0x3, 0xc1}, {0xc, 0x3, 0x4}, {0xc, 0x3, 0x88}, {0xc, 0x3, 0x7fff}, {0xc}, {0xc, 0x3, 0x2}, {0xc, 0x3, 0x9}, {0xc, 0x3, 0x20}, {0xc, 0x3, 0x401}, {0xc, 0x3, 0x6}, {0xc, 0x3, 0x8000000000000001}]}, @TCA_MQPRIO_SHAPER={0x6, 0x2, 0x1}, @TCA_MQPRIO_MAX_RATE64={0x1c, 0x4, 0x0, 0x1, [{0xc, 0x4, 0x1}, {0xc, 0x4, 0x4}]}]}}}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x240448a4}, 0x0) 29.891189168s ago: executing program 1 (id=325): r0 = socket$kcm(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff}, [@call={0x85, 0x0, 0x0, 0x2e}, @printk={@lld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x58}, 0x1, 0x700}, 0x0) 29.294860439s ago: executing program 3 (id=326): syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x21, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x2, 0x0, 0xe7}}}}}}, 0x0) 29.258555125s ago: executing program 4 (id=327): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='dev\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0) syz_emit_ethernet(0x8a, &(0x7f0000000240)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x21, 0x7c, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x1a, 0x2, 0x2, 0x0, 0xe7}, {"341e39173ac53c5ca959147bc79557dd6acacdb3e0cf94dbfde950acabf0ec46bc9ead48304523b937c2163ff5bacb3504225e0ce0b5d3b402920165874d3e1890af6a"}}}}}}, 0x0) syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[], 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='dev/ttyUSB0\x00', 0x2, 0x0) r1 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x80) openat(r2, &(0x7f0000000040)='.\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) ioctl$BTRFS_IOC_SEND(r3, 0x40489426, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0], 0x4, 0xa, 0x8, 0x2}) ioctl$DRM_IOCTL_MODE_GETGAMMA(r3, 0xc02064a4, &(0x7f00000002c0)={r4, 0x3, &(0x7f0000000200)=[0x431f, 0x3, 0xffff], &(0x7f0000000240)=[0x1e1, 0x9], &(0x7f0000000280)}) r5 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_opts(r5, 0x0, 0x4, 0x0, 0x0) sendto$inet(r5, &(0x7f0000000140)='\a', 0x1, 0x44, &(0x7f00000002c0)={0x2, 0x4e21, @loopback}, 0x10) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, r4}) write$binfmt_aout(r0, &(0x7f0000000640)=ANY=[], 0x20) io_uring_setup(0x2bc4, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) 0s ago: executing program 33 (id=324): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mmap(&(0x7f0000ff2000/0xd000)=nil, 0xd000, 0x2000004, 0x4001011, 0xffffffffffffffff, 0x34da2000) bpf$ENABLE_STATS(0x20, 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000000)={0x0, {{0x2, 0x4e20, @broadcast}}}, 0x88) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r2 = syz_open_dev$vim2m(0x0, 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0285629, &(0x7f0000000080)={0x0, @sdr={0x3432564e, 0xffffffff}}) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) readahead(r3, 0x3, 0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x0) listen(0xffffffffffffffff, 0x10) syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00') close(0xffffffffffffffff) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6410, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) r6 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000180)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x38, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x1d, 0x12, "bb9b69de4386bf2ae6a3b321505c68cd"}, @md5sig={0x1d, 0x12, "c52a2d43d2c85500"}]}}}}}}}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x994}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080400007c09e8fe55a10a0015c005001c2603600e1208000f0000000401a8001600a4000140000000007fffffffb94dcf5c0461c1d6900094007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=@newqdisc={0x1b4, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {0x1, 0xb}, {0xffff, 0x5}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x184, 0x2, {{0x4, [0xa, 0xe, 0x10, 0x6, 0x10, 0x10, 0xf, 0x0, 0x9, 0xd, 0xd, 0xc, 0xf, 0x4, 0x10, 0xd], 0x1, [0x7, 0x9, 0x2, 0x4, 0x4, 0x1, 0xc000, 0x9, 0x1, 0x8, 0x5, 0x1, 0x6, 0x3ff, 0x3, 0x6], [0x1, 0x9, 0x4c5, 0x1, 0x90d, 0x6, 0x40, 0x101, 0x1000, 0x60, 0x1, 0x7, 0x5, 0x9, 0x9, 0x6]}, [@TCA_MQPRIO_MAX_RATE64={0x10, 0x4, 0x0, 0x1, [{0xc, 0x4, 0x187d}]}, @TCA_MQPRIO_MAX_RATE64={0x40, 0x4, 0x0, 0x1, [{0xc, 0x4, 0x5}, {0xc, 0x4, 0x7}, {0xc, 0x4, 0x31}, {0xc, 0x4, 0x80000001}, {0xc, 0x4, 0x3}]}, @TCA_MQPRIO_MIN_RATE64={0xb8, 0x3, 0x0, 0x1, [{0xc, 0x3, 0xffffffffffffff81}, {0xc, 0x3, 0x6}, {0xc, 0x3, 0x4}, {0xc, 0x3, 0x1}, {0xc, 0x3, 0xc1}, {0xc, 0x3, 0x4}, {0xc, 0x3, 0x88}, {0xc, 0x3, 0x7fff}, {0xc}, {0xc, 0x3, 0x2}, {0xc, 0x3, 0x9}, {0xc, 0x3, 0x20}, {0xc, 0x3, 0x401}, {0xc, 0x3, 0x6}, {0xc, 0x3, 0x8000000000000001}]}, @TCA_MQPRIO_SHAPER={0x6, 0x2, 0x1}, @TCA_MQPRIO_MAX_RATE64={0x1c, 0x4, 0x0, 0x1, [{0xc, 0x4, 0x1}, {0xc, 0x4, 0x4}]}]}}}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x240448a4}, 0x0) kernel console output (not intermixed with test programs): stack depth: 19880 bytes left [ 101.957760][ T5829] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 101.967672][ T5729] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 102.007701][ T5722] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 102.068162][ T5582] usb 2-1: reset high-speed USB device number 5 using dummy_hcd [ 102.079554][ T5582] usb 2-1: device reset changed ep0 maxpacket size! [ 102.090460][ T5582] usb 2-1: USB disconnect, device number 5 [ 102.118230][ T5829] usb 1-1: Using ep0 maxpacket: 16 [ 102.126572][ T5829] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 102.136970][ T5829] usb 1-1: config index 0 descriptor too short (expected 16456, got 72) [ 102.146924][ T5829] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 102.148728][ T5729] usb 5-1: Using ep0 maxpacket: 8 [ 102.156134][ T5829] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 102.161454][ T5729] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 102.162339][ T5729] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 102.176289][ T5829] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 102.176448][ T5722] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 102.180121][ T5729] usb 5-1: config 0 has no interface number 0 [ 102.196237][ T5729] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 102.206480][ T5829] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 102.225608][ T5729] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.233618][ T5829] usb 1-1: config 0 has no interface number 0 [ 102.247951][ T5829] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 102.250182][ T5729] usb 5-1: config 0 descriptor?? [ 102.259432][ T5829] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 102.260704][ T5722] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 102.284867][ T5829] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 102.285924][ T5729] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 102.295114][ T5722] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 102.318355][ T5829] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 102.332848][ T5829] usb 1-1: config 0 interface 125 has no altsetting 0 [ 102.340147][ T5722] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.348304][ T5829] usb 1-1: config 0 interface 125 has no altsetting 2 [ 102.357084][ T5722] usb 4-1: config 0 descriptor?? [ 102.364437][ T5829] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.372795][ T5829] usb 1-1: Product: syz [ 102.379009][ T5722] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 102.385928][ T5722] dvb-usb: bulk message failed: -22 (3/0) [ 102.393099][ T5829] usb 1-1: Manufacturer: syz [ 102.397776][ T5829] usb 1-1: SerialNumber: syz [ 102.405481][ T5829] usb 1-1: config 0 descriptor?? [ 102.422591][ T5722] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 102.432474][ T5829] usb 1-1: selecting invalid altsetting 2 [ 102.443672][ T5722] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 102.449624][ T5582] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 102.452448][ T5722] usb 4-1: media controller created [ 102.473236][ T5722] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 102.498849][ T5722] dvb-usb: bulk message failed: -22 (6/0) [ 102.506254][ T5722] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 102.519598][ T5722] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input6 [ 102.536382][ T5722] dvb-usb: schedule remote query interval to 150 msecs. [ 102.548218][ T5722] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 102.552066][ T5984] ªªªªªª: renamed from vlan0 (while UP) [ 102.609231][ T5582] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 102.657143][ T5582] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 102.683361][ T5582] usb 2-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 102.701936][ T5582] usb 2-1: config 220 interface 0 has no altsetting 0 [ 102.709482][ T189] dvb-usb: bulk message failed: -22 (1/0) [ 102.712113][ T5582] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.717147][ T189] dvb-usb: error while querying for an remote control event. [ 102.723820][ T5582] usb 2-1: Product: syz [ 102.746110][ T5582] usb 2-1: Manufacturer: syz [ 102.756314][ T5582] usb 2-1: SerialNumber: syz [ 102.792235][ T5729] libceph: connect (1)[c::]:6789 error -101 [ 102.803109][ T5729] libceph: mon0 (1)[c::]:6789 connect error [ 102.897632][ T5722] dvb-usb: bulk message failed: -22 (1/0) [ 102.903724][ T5722] dvb-usb: error while querying for an remote control event. [ 103.005075][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 103.005096][ T30] audit: type=1400 audit(1787529206.806:276): avc: denied { create } for pid=5978 comm="syz.0.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 103.032329][ T5990] process 'syz.1.47' launched './file1' with NULL argv: empty string added [ 103.069264][ T6000] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1016 sclass=netlink_route_socket pid=6000 comm=syz.3.46 [ 103.103573][ T5722] dvb-usb: bulk message failed: -22 (1/0) [ 103.144184][ T5722] dvb-usb: error while querying for an remote control event. [ 103.161822][ T6004] ======================================================= [ 103.161822][ T6004] WARNING: The mand mount option has been deprecated and [ 103.161822][ T6004] and is ignored by this kernel. Remove the mand [ 103.161822][ T6004] option from the mount to silence this warning. [ 103.161822][ T6004] ======================================================= [ 103.251218][ T5995] ceph: No mds server is up or the cluster is laggy [ 103.275223][ T30] audit: type=1400 audit(1787529206.836:277): avc: denied { execute } for pid=5989 comm="syz.1.47" name="file1" dev="tmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 103.439874][ T30] audit: type=1400 audit(1787529206.896:278): avc: denied { execute_no_trans } for pid=5989 comm="syz.1.47" path="/7/file1" dev="tmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 103.464566][ T5722] dvb-usb: bulk message failed: -22 (1/0) [ 103.497829][ T5829] get_1284_register timeout [ 103.510286][ T5722] dvb-usb: error while querying for an remote control event. [ 103.510986][ T5729] libceph: connect (1)[c::]:6789 error -101 [ 103.536496][ T5582] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 103.539914][ C0] usb 1-1: async_complete: urb error -104 [ 103.549914][ C0] usb 1-1: async_complete: urb error -104 [ 103.555807][ C0] usb 1-1: async_complete: urb error -104 [ 103.667750][ T30] audit: type=1400 audit(1787529206.936:279): avc: denied { bind } for pid=5978 comm="syz.0.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 103.690502][ T5582] uvcvideo 2-1:220.0: No valid video chain found. [ 103.697330][ T5729] libceph: mon0 (1)[c::]:6789 connect error [ 103.760351][ T5829] dvb-usb: bulk message failed: -22 (1/0) [ 103.816364][ T5829] dvb-usb: error while querying for an remote control event. [ 103.891384][ T30] audit: type=1400 audit(1787529207.166:280): avc: denied { create } for pid=5992 comm="syz.2.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 104.149113][ T5722] dvb-usb: bulk message failed: -22 (1/0) [ 104.204745][ T30] audit: type=1400 audit(1787529207.186:281): avc: denied { write } for pid=5992 comm="syz.2.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 104.227012][ T5582] usb 2-1: USB disconnect, device number 6 [ 104.244613][ T5722] dvb-usb: error while querying for an remote control event. [ 104.312484][ T30] audit: type=1400 audit(1787529207.306:282): avc: denied { read } for pid=5978 comm="syz.0.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 104.355676][ T5722] usb 5-1: USB disconnect, device number 2 [ 104.367646][ T30] audit: type=1400 audit(1787529207.396:283): avc: denied { cmd } for pid=5992 comm="iou-wrk-6005" path="/dev/ublk-control" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 104.457918][ T5694] dvb-usb: bulk message failed: -22 (1/0) [ 104.479231][ T5694] dvb-usb: error while querying for an remote control event. [ 104.662297][ T5733] usb 4-1: USB disconnect, device number 3 [ 104.669632][ T5722] dvb-usb: bulk message failed: -22 (1/0) [ 104.686016][ T5722] dvb-usb: error while querying for an remote control event. [ 104.700304][ T30] audit: type=1400 audit(1787529208.506:284): avc: denied { read } for pid=6019 comm="syz.2.50" name="file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 104.735524][ T6020] sd 0:0:1:0: PR command failed: 1026 [ 104.736285][ T30] audit: type=1400 audit(1787529208.516:285): avc: denied { open } for pid=6019 comm="syz.2.50" path="/8/file0/file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 104.757691][ T6020] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 104.775881][ T6020] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 104.793778][ T5733] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 104.829211][ T5582] usb 1-1: USB disconnect, device number 4 [ 104.946775][ T6026] overlayfs: failed to resolve './bus': -2 [ 104.965910][ T6026] netlink: 60 bytes leftover after parsing attributes in process `syz.1.52'. [ 105.070706][ T6031] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 105.267610][ T5694] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 105.448390][ T5694] usb 3-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 105.469466][ T5694] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 105.482347][ T5694] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 105.495784][ T5694] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.509326][ T5694] usb 3-1: Product: syz [ 105.513627][ T5694] usb 3-1: Manufacturer: syz [ 105.520931][ T5694] usb 3-1: SerialNumber: syz [ 105.541477][ T6030] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 105.555416][ T6030] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 105.569128][ T5694] usbserial_generic 3-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 105.584077][ T5694] usbserial_generic 3-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 105.596006][ T5694] usbserial_generic 3-1:1.0: generic converter detected [ 105.607648][ T5694] usb 3-1: generic converter now attached to ttyUSB0 [ 105.647663][ T5722] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 105.784574][ T6041] FAULT_INJECTION: forcing a failure. [ 105.784574][ T6041] name failslab, interval 1, probability 0, space 0, times 1 [ 105.798577][ T6041] CPU: 1 UID: 0 PID: 6041 Comm: syz.0.58 Not tainted syzkaller #0 PREEMPT(full) [ 105.798605][ T6041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 105.798625][ T6041] Call Trace: [ 105.798647][ T6041] [ 105.798655][ T6041] dump_stack_lvl+0x100/0x190 [ 105.798702][ T6041] should_fail_ex.cold+0x5/0xa [ 105.798727][ T6041] should_failslab+0xc2/0x120 [ 105.798756][ T6041] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 105.798783][ T6041] ? __alloc_skb+0x5b7/0x710 [ 105.798805][ T6041] ? __alloc_skb+0x140/0x710 [ 105.798829][ T6041] __alloc_skb+0x140/0x710 [ 105.798848][ T6041] ? __alloc_skb+0x5b7/0x710 [ 105.798871][ T6041] ? __pfx___alloc_skb+0x10/0x10 [ 105.798897][ T6041] netlink_alloc_large_skb+0x69/0x150 [ 105.798923][ T6041] netlink_sendmsg+0x680/0xda0 [ 105.798946][ T6041] ? __pfx_netlink_sendmsg+0x10/0x10 [ 105.798968][ T6041] ? selinux_socket_sendmsg+0x198/0x2f0 [ 105.798999][ T6041] ____sys_sendmsg+0xa4d/0xbe0 [ 105.799016][ T6041] ? __pfx_netlink_sendmsg+0x10/0x10 [ 105.799037][ T6041] ? __pfx_____sys_sendmsg+0x10/0x10 [ 105.799063][ T6041] ___sys_sendmsg+0x190/0x1e0 [ 105.799082][ T6041] ? __pfx____sys_sendmsg+0x10/0x10 [ 105.799099][ T6041] ? get_pid_task+0x106/0x250 [ 105.799129][ T6041] ? find_held_lock+0x2b/0x80 [ 105.799164][ T6041] __sys_sendmsg+0x160/0x210 [ 105.799187][ T6041] ? __pfx___sys_sendmsg+0x10/0x10 [ 105.799223][ T6041] do_syscall_64+0x123/0x790 [ 105.799256][ T6041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.799273][ T6041] RIP: 0033:0x7f4b4919e0d9 [ 105.799293][ T6041] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.799314][ T6041] RSP: 002b:00007f4b4a0e8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 105.799346][ T6041] RAX: ffffffffffffffda RBX: 00007f4b49425fa0 RCX: 00007f4b4919e0d9 [ 105.799358][ T6041] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000004 [ 105.799368][ T6041] RBP: 00007f4b4a0e8090 R08: 0000000000000000 R09: 0000000000000000 [ 105.799398][ T6041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.799408][ T6041] R13: 00007f4b49426038 R14: 00007f4b49425fa0 R15: 00007fffa17e5d58 [ 105.799431][ T6041] [ 105.802927][ T5722] usb 4-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 105.831153][ T5582] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 105.845295][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 105.846225][ T189] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 105.995235][ T5582] usb 5-1: Using ep0 maxpacket: 8 [ 106.008476][ T5722] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 106.022427][ T5733] usb 3-1: USB disconnect, device number 4 [ 106.029831][ T5722] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 106.049966][ T5582] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 106.061617][ T5722] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.070255][ T5582] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 106.070284][ T5582] usb 5-1: config 0 has no interface number 0 [ 106.070336][ T5582] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 106.070360][ T5582] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 106.070383][ T5582] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 106.070405][ T5582] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 106.070423][ T5582] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 106.070460][ T5582] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.074503][ T5582] usb 5-1: config 0 descriptor?? [ 106.082001][ T5722] usb 4-1: Product: syz [ 106.104164][ T5733] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 106.106623][ T5722] usb 4-1: Manufacturer: syz [ 106.120506][ T6043] team0: Device gtp0 is up. Set it down before adding it as a team port [ 106.125655][ T5722] usb 4-1: SerialNumber: syz [ 106.136060][ T5733] usbserial_generic 3-1:1.0: device disconnected [ 106.157623][ T189] usb 2-1: Using ep0 maxpacket: 8 [ 106.173596][ T5582] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 106.199714][ T189] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 106.266528][ T189] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 106.286085][ T189] usb 2-1: config 0 has no interface number 0 [ 106.292795][ T6035] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 106.301361][ T6035] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 106.314174][ T5722] usbserial_generic 4-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 106.326824][ T5722] usbserial_generic 4-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 106.337707][ T189] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 106.348703][ T5722] usbserial_generic 4-1:1.0: generic converter detected [ 106.356765][ T189] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.368695][ T5722] usb 4-1: generic converter now attached to ttyUSB0 [ 106.379127][ T189] usb 2-1: config 0 descriptor?? [ 106.392864][ T189] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior1 [ 106.437579][ T6039] ldusb 5-1:0.55: Couldn't submit interrupt_in_urb -90 [ 106.518793][ T6046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.532749][ T6046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.551698][ T6046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.564724][ T6046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.568215][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 106.617911][ T5733] usb 4-1: USB disconnect, device number 4 [ 106.639418][ T6038] ªªªªªª: renamed from vlan0 (while UP) [ 106.646874][ T5733] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 106.656468][ T6038] ldusb 5-1:0.55: Couldn't submit interrupt_in_urb -90 [ 106.670280][ T5733] usbserial_generic 4-1:1.0: device disconnected [ 107.117706][ T5722] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 107.289510][ T5722] usb 1-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 107.306957][ T5722] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 107.317483][ T5722] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 107.330204][ T5722] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.339090][ T189] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 107.347019][ T5722] usb 1-1: Product: syz [ 107.352169][ T5722] usb 1-1: Manufacturer: syz [ 107.357214][ T5722] usb 1-1: SerialNumber: syz [ 107.364362][ T6050] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 107.372590][ T6050] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 107.381213][ T5722] usbserial_generic 1-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 107.393113][ T5722] usbserial_generic 1-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 107.404091][ T5722] usbserial_generic 1-1:1.0: generic converter detected [ 107.413193][ T5722] usb 1-1: generic converter now attached to ttyUSB0 [ 107.518948][ T189] usb 3-1: New USB device found, idVendor=1532, idProduct=010d, bcdDevice= 0.40 [ 107.530160][ T189] usb 3-1: config 1 interface 0 has no altsetting 0 [ 107.539806][ T189] usb 3-1: string descriptor 0 read error: -22 [ 107.546190][ T189] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.594130][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 107.612125][ T5582] usb 1-1: USB disconnect, device number 5 [ 107.626327][ T5582] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 107.635845][ T5582] usbserial_generic 1-1:1.0: device disconnected [ 107.989662][ T189] razer 0003:1532:010D.0001: unknown main item tag 0x0 [ 107.996629][ T189] razer 0003:1532:010D.0001: unknown main item tag 0x0 [ 108.003840][ T189] razer 0003:1532:010D.0001: unknown main item tag 0x0 [ 108.010924][ T189] razer 0003:1532:010D.0001: unknown main item tag 0x0 [ 108.018080][ T189] razer 0003:1532:010D.0001: unknown main item tag 0x0 [ 108.024996][ T189] razer 0003:1532:010D.0001: unknown main item tag 0x0 [ 108.032001][ T189] razer 0003:1532:010D.0001: unknown main item tag 0x0 [ 108.039007][ T189] razer 0003:1532:010D.0001: unknown main item tag 0x0 [ 108.047171][ T189] razer 0003:1532:010D.0001: unknown main item tag 0x0 [ 108.054325][ T189] razer 0003:1532:010D.0001: unknown main item tag 0x0 [ 108.173337][ T189] razer 0003:1532:010D.0001: failed to enable macro keys: -71 [ 108.233830][ T189] razer 0003:1532:010D.0001: hidraw0: USB HID vff.7f Device [HID 1532:010d] on usb-dummy_hcd.2-1/input0 [ 108.253752][ T189] usb 3-1: USB disconnect, device number 5 [ 108.356793][ T6068] fido_id[6068]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 108.585167][ T5582] usb 5-1: USB disconnect, device number 3 [ 108.659390][ T5729] usb 2-1: USB disconnect, device number 7 [ 108.685813][ T5582] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 109.121428][ T6083] netlink: 'syz.2.69': attribute type 21 has an invalid length. [ 109.213695][ T6081] netlink: 'syz.1.68': attribute type 1 has an invalid length. [ 109.239819][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 109.239831][ T30] audit: type=1804 audit(1787529212.996:296): pid=6081 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.68" name="/newroot/11/file0" dev="tmpfs" ino=81 res=1 errno=0 [ 110.546411][ T30] audit: type=1400 audit(1787529214.336:297): avc: denied { create } for pid=6086 comm="syz.3.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 110.724809][ T30] audit: type=1400 audit(1787529214.346:298): avc: denied { ioctl } for pid=6086 comm="syz.3.70" path="socket:[10065]" dev="sockfs" ino=10065 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 110.840422][ T30] audit: type=1400 audit(1787529214.386:299): avc: denied { map } for pid=6086 comm="syz.3.70" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 110.944800][ T30] audit: type=1400 audit(1787529214.556:300): avc: denied { create } for pid=6089 comm="syz.4.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 111.153005][ T30] audit: type=1400 audit(1787529214.566:301): avc: denied { bind } for pid=6089 comm="syz.4.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 112.123160][ T189] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 112.156503][ T30] audit: type=1400 audit(1787529214.566:302): avc: denied { getopt } for pid=6089 comm="syz.4.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 112.264928][ T30] audit: type=1400 audit(1787529214.596:303): avc: denied { name_bind } for pid=6089 comm="syz.4.71" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 112.296998][ T6111] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=6111 comm=syz.4.74 [ 112.325349][ T6108] netlink: 8 bytes leftover after parsing attributes in process `syz.0.75'. [ 112.339793][ T189] usb 4-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice= 1.00 [ 112.343894][ T30] audit: type=1400 audit(1787529214.596:304): avc: denied { node_bind } for pid=6089 comm="syz.4.71" saddr=224.0.0.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 112.374715][ T6116] netlink: 20 bytes leftover after parsing attributes in process `syz.4.74'. [ 112.377566][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 112.408042][ T30] audit: type=1400 audit(1787529214.716:305): avc: denied { append } for pid=6095 comm="syz.1.72" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 112.449347][ T189] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 112.461725][ T189] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.316852][ T5729] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 113.530273][ T5729] usb 2-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 113.545219][ T5729] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 113.557284][ T5729] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 113.573843][ T5729] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.588261][ T5729] usb 2-1: Product: syz [ 113.637797][ T5582] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 113.693708][ T189] hackrf 4-1:1.0: usb_control_msg() failed -110 request 0e [ 113.695468][ T5729] usb 2-1: Manufacturer: syz [ 113.747973][ T189] hackrf 4-1:1.0: Could not detect board [ 113.762328][ T5729] usb 2-1: SerialNumber: syz [ 113.777631][ T0] NOHZ tick-stop error: local softirq work is pending, handler #204!!! [ 113.811765][ T6124] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 113.832876][ T189] hackrf 4-1:1.0: probe with driver hackrf failed with error -110 [ 113.850233][ T6124] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 113.880953][ T5582] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 113.918808][ T5729] usbserial_generic 2-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 113.953922][ T5582] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.962613][ T5729] usbserial_generic 2-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 113.974442][ T5582] usb 1-1: Product: syz [ 113.986398][ T5582] usb 1-1: Manufacturer: syz [ 114.000606][ T5729] usbserial_generic 2-1:1.0: generic converter detected [ 114.007979][ T5582] usb 1-1: SerialNumber: syz [ 114.195259][ T5729] usb 2-1: generic converter now attached to ttyUSB0 [ 114.425885][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 114.689140][ T189] usb 2-1: USB disconnect, device number 8 [ 114.706327][ T6129] netlink: 60 bytes leftover after parsing attributes in process `syz.0.79'. [ 114.757234][ T189] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 114.794619][ T189] usbserial_generic 2-1:1.0: device disconnected [ 114.880756][ T29] usb 4-1: USB disconnect, device number 5 [ 115.031925][ T5582] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 115.076140][ T5582] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 115.077649][ T5829] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 115.172636][ T6135] 9p: Bad value for 'wfdno' [ 115.266516][ T5829] usb 5-1: Using ep0 maxpacket: 8 [ 115.278251][ T5829] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 115.300024][ T5829] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 115.314781][ T5829] usb 5-1: config 0 has no interface number 0 [ 115.323800][ T5829] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 115.342638][ T5829] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.357287][ T5829] usb 5-1: config 0 descriptor?? [ 115.403787][ T5829] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 115.709966][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 115.710009][ T30] audit: type=1400 audit(1787529219.516:314): avc: denied { prog_load } for pid=6140 comm="syz.4.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 116.023122][ T30] audit: type=1400 audit(1787529219.826:315): avc: denied { map_create } for pid=6150 comm="syz.2.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 116.053247][ T6151] IPv6: sit1: Disabled Multicast RS [ 116.066743][ T6151] sit1: entered allmulticast mode [ 116.119607][ T5733] usb 5-1: USB disconnect, device number 4 [ 116.244291][ T30] audit: type=1400 audit(1787529220.046:316): avc: denied { getopt } for pid=6152 comm="syz.3.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 116.245814][ T6153] netlink: 'syz.3.85': attribute type 1 has an invalid length. [ 116.349573][ T30] audit: type=1400 audit(1787529220.156:317): avc: denied { watch watch_reads } for pid=6143 comm="syz.1.84" path="/14" dev="tmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 116.370536][ T6155] netlink: 28 bytes leftover after parsing attributes in process `syz.3.85'. [ 116.383681][ T30] audit: type=1400 audit(1787529220.156:318): avc: denied { prog_run } for pid=6143 comm="syz.1.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 116.436538][ T30] audit: type=1400 audit(1787529220.236:319): avc: denied { map_read map_write } for pid=6152 comm="syz.3.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 116.443529][ T6153] vivid-000: disconnect [ 116.480911][ T5722] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 116.530473][ T6152] vivid-000: reconnect [ 116.648100][ T5722] usb 3-1: Using ep0 maxpacket: 16 [ 116.657100][ T5722] usb 3-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 116.670970][ T30] audit: type=1400 audit(1787529220.476:320): avc: denied { kexec_image_load } for pid=6158 comm="syz.3.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 116.710754][ T5722] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 116.724489][ T5722] usb 3-1: config 0 has no interface number 0 [ 116.744085][ T5722] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.756998][ T30] audit: type=1400 audit(1787529220.556:321): avc: denied { bind } for pid=6160 comm="syz.1.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 116.783043][ T5722] usb 3-1: Product: syz [ 116.796405][ T5722] usb 3-1: Manufacturer: syz [ 116.804561][ T5722] usb 3-1: SerialNumber: syz [ 116.830128][ T30] audit: type=1400 audit(1787529220.556:322): avc: denied { name_bind } for pid=6160 comm="syz.1.87" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 116.861430][ T5722] usb 3-1: config 0 descriptor?? [ 116.871182][ T5722] hub 3-1:0.132: bad descriptor, ignoring hub [ 116.881307][ T5722] hub 3-1:0.132: probe with driver hub failed with error -5 [ 116.891974][ T30] audit: type=1400 audit(1787529220.556:323): avc: denied { node_bind } for pid=6160 comm="syz.1.87" saddr=::1 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 116.925452][ T5722] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.132/input/input8 [ 117.472934][ T5582] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000084. ret = -EPROTO [ 117.640041][ T5582] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to init LTM with error -EPROTO [ 117.680484][ T5582] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 117.741078][ T5582] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 117.811453][ T5582] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 117.920343][ T5582] usb 1-1: USB disconnect, device number 6 [ 118.171663][ T6159] netlink: 12 bytes leftover after parsing attributes in process `syz.3.88'. [ 118.627704][ T29] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 118.788577][ T29] usb 4-1: Using ep0 maxpacket: 16 [ 118.801138][ T29] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 118.823529][ T29] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.844628][ T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.873130][ T29] usb 4-1: config 0 descriptor?? [ 119.149026][ T5722] usb 3-1: USB disconnect, device number 6 [ 119.266305][ T189] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 119.322083][ T29] hid_parser_main: 3988 callbacks suppressed [ 119.322110][ T29] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 119.368642][ T29] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 119.380412][ T144] IPVS: starting estimator thread 0... [ 119.387068][ T29] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 119.403589][ T6208] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 119.415516][ T29] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 119.441452][ T29] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 119.451390][ T29] mcp2221 0003:04D8:00DD.0002: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 119.452072][ T189] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 119.506186][ C1] usb 4-1: input irq status -75 received [ 119.512678][ T6213] IPVS: using max 51 ests per chain, 122400 per kthread [ 119.533085][ T189] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.552176][ T189] usb 5-1: Product: syz [ 119.562437][ T189] usb 5-1: Manufacturer: syz [ 119.594548][ T189] usb 5-1: SerialNumber: syz [ 119.707548][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 119.977554][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 120.017553][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 120.757570][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 121.217540][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 121.257542][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 121.373592][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 121.373624][ T30] audit: type=1400 audit(1787529225.176:342): avc: denied { write } for pid=6197 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 121.517552][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 121.577646][ T0] NOHZ tick-stop error: local softirq work is pending, handler #04!!! [ 121.758017][ T5722] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 121.818429][ T30] audit: type=1400 audit(1787529225.616:343): avc: denied { connect } for pid=6185 comm="syz.3.91" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 121.903856][ T30] audit: type=1400 audit(1787529225.646:344): avc: denied { write } for pid=6222 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 121.928923][ T5722] usb 2-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 121.941133][ T5722] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 121.990006][ T5722] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 122.004941][ T5722] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 10 [ 122.108520][ T5722] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 212, setting to 64 [ 122.116794][ T6220] netlink: 'syz.3.91': attribute type 1 has an invalid length. [ 122.188431][ T6202] netlink: 60 bytes leftover after parsing attributes in process `syz.4.93'. [ 122.188748][ T5722] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 122.406428][ T5722] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.421923][ T5722] usb 2-1: Product: syz [ 122.429042][ T5722] usb 2-1: Manufacturer: syz [ 122.434271][ T5722] usb 2-1: SerialNumber: syz [ 122.446018][ T5722] usb 2-1: config 0 descriptor?? [ 122.461953][ T6216] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 122.478410][ T189] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 122.495205][ T189] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 122.684363][ T6225] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 122.759615][ T5722] rc_core: IR keymap rc-xbox-dvd not found [ 122.785528][ T5722] Registered IR keymap rc-empty [ 122.849999][ T5722] rc rc0: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 122.916969][ T5722] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input9 [ 122.972445][ T6220] 8021q: adding VLAN 0 to HW filter on device bond1 [ 123.071673][ C0] xbox_remote 2-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19 [ 123.109651][ T5722] usb 2-1: USB disconnect, device number 9 [ 123.149125][ T30] audit: type=1400 audit(1787529226.956:345): avc: denied { write } for pid=6247 comm="syz.2.101" name="if_inet6" dev="proc" ino=4026533096 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 123.300059][ T6251] netlink: 4 bytes leftover after parsing attributes in process `syz.2.101'. [ 123.342933][ T6248] IPv6: sit1: Disabled Multicast RS [ 123.371870][ T6248] sit1: entered allmulticast mode [ 123.387015][ T29] usb 4-1: USB disconnect, device number 6 [ 123.728009][ T5733] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 123.741396][ T30] audit: type=1400 audit(1787529227.536:346): avc: denied { write } for pid=6238 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 123.882049][ T51] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 124.037617][ T5733] usb 1-1: Using ep0 maxpacket: 16 [ 124.043946][ T5733] usb 1-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 124.055261][ T5733] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 124.064057][ T5733] usb 1-1: config 0 has no interface number 0 [ 124.073241][ T5733] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.873974][ T5733] usb 1-1: Product: syz [ 124.894375][ T5733] usb 1-1: Manufacturer: syz [ 124.915722][ T5733] usb 1-1: SerialNumber: syz [ 124.969911][ T5733] usb 1-1: config 0 descriptor?? [ 125.008770][ T5733] hub 1-1:0.132: bad descriptor, ignoring hub [ 125.016023][ T189] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000404. ret = -EPROTO [ 125.063181][ T5733] hub 1-1:0.132: probe with driver hub failed with error -5 [ 125.107967][ T189] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 125.135383][ T5733] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.132/input/input10 [ 125.174417][ T189] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 125.224010][ T30] audit: type=1400 audit(1787529229.026:347): avc: denied { write } for pid=6270 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 125.284694][ T189] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 125.384710][ T189] usb 5-1: USB disconnect, device number 5 [ 125.817671][ T189] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 126.038349][ T189] usb 5-1: Using ep0 maxpacket: 8 [ 126.070071][ T189] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 126.130806][ T189] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 126.168440][ T189] usb 5-1: config 0 has no interface number 0 [ 126.205488][ T189] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 126.250199][ T189] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.277144][ T189] usb 5-1: config 0 descriptor?? [ 126.361044][ T189] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 126.569366][ T189] usb 1-1: USB disconnect, device number 7 [ 126.771315][ T30] audit: type=1400 audit(1787529230.576:348): avc: denied { write } for pid=6277 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 126.858068][ T5733] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 127.016768][ T30] audit: type=1400 audit(1787529230.816:349): avc: denied { write } for pid=6309 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 127.055363][ T5733] usb 2-1: Using ep0 maxpacket: 8 [ 127.061253][ T5733] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 127.072449][ T5733] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 127.081030][ T5733] usb 2-1: config 0 has no interface number 0 [ 127.091121][ T5733] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 127.103903][ T5733] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.133168][ T5733] usb 2-1: config 0 descriptor?? [ 127.164216][ T5733] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior1 [ 127.182951][ T24] usb 5-1: USB disconnect, device number 6 [ 127.278418][ T5722] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 127.442748][ T6298] netlink: 8 bytes leftover after parsing attributes in process `syz.2.110'. [ 127.457675][ T5722] usb 1-1: Using ep0 maxpacket: 16 [ 127.469742][ T30] audit: type=1400 audit(1787529231.276:350): avc: denied { create } for pid=6297 comm="syz.2.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 127.474147][ T5722] usb 1-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 127.509867][ T5722] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 127.535828][ T5722] usb 1-1: config 0 has no interface number 0 [ 127.558428][ T5722] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.580154][ T5722] usb 1-1: Product: syz [ 127.586478][ T5722] usb 1-1: Manufacturer: syz [ 127.594850][ T30] audit: type=1400 audit(1787529231.396:351): avc: denied { write } for pid=6311 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 127.605560][ T5722] usb 1-1: SerialNumber: syz [ 127.655825][ T5722] usb 1-1: config 0 descriptor?? [ 127.692657][ T5722] hub 1-1:0.132: bad descriptor, ignoring hub [ 127.704262][ T5722] hub 1-1:0.132: probe with driver hub failed with error -5 [ 127.721982][ T5722] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.132/input/input11 [ 127.743328][ T30] audit: type=1400 audit(1787529231.546:352): avc: denied { write } for pid=6328 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 128.093839][ T6336] netlink: 32 bytes leftover after parsing attributes in process `syz.4.113'. [ 129.170205][ T30] audit: type=1400 audit(1787529232.976:353): avc: denied { block_suspend } for pid=6340 comm="syz.3.115" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 129.698060][ T5733] usb 2-1: USB disconnect, device number 10 [ 129.969145][ T5829] usb 1-1: USB disconnect, device number 8 [ 130.117618][ T24] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 130.168002][ T6348] 9p: Bad value for 'rfdno' [ 130.211810][ T30] audit: type=1400 audit(1787529234.016:354): avc: denied { create } for pid=6363 comm="syz.1.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 130.237926][ T30] audit: type=1400 audit(1787529234.016:355): avc: denied { append } for pid=6363 comm="syz.1.124" name="comedi3" dev="devtmpfs" ino=1276 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 130.288309][ T24] usb 3-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 130.306394][ T24] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 130.318551][ T24] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 130.331127][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.340134][ T24] usb 3-1: Product: syz [ 130.344350][ T24] usb 3-1: Manufacturer: syz [ 130.349036][ T24] usb 3-1: SerialNumber: syz [ 130.397649][ T5733] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 130.501689][ T6355] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 130.509495][ T6355] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 130.517694][ T5829] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 130.519244][ T24] usbserial_generic 3-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 130.536995][ T24] usbserial_generic 3-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 130.846665][ T24] usbserial_generic 3-1:1.0: generic converter detected [ 130.856643][ T24] usb 3-1: generic converter now attached to ttyUSB0 [ 130.923429][ T5733] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 130.938980][ T5829] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 130.952007][ T5733] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.973356][ T5829] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.983143][ T5829] usb 1-1: Product: syz [ 130.983210][ T5733] usb 4-1: Product: syz [ 130.992615][ T5829] usb 1-1: Manufacturer: syz [ 130.998751][ T5829] usb 1-1: SerialNumber: syz [ 131.003613][ T5733] usb 4-1: Manufacturer: syz [ 131.003640][ T5733] usb 4-1: SerialNumber: syz [ 131.129918][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 131.145029][ T24] usb 3-1: USB disconnect, device number 7 [ 131.299130][ T24] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 131.308682][ T24] usbserial_generic 3-1:1.0: device disconnected [ 131.494180][ T30] audit: type=1400 audit(1787529235.296:356): avc: denied { name_bind } for pid=6375 comm="syz.4.127" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 131.540772][ T6362] netlink: 60 bytes leftover after parsing attributes in process `syz.3.122'. [ 131.550597][ T6374] FAULT_INJECTION: forcing a failure. [ 131.550597][ T6374] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 131.567243][ T6364] netlink: 60 bytes leftover after parsing attributes in process `syz.0.123'. [ 131.597741][ T6374] CPU: 0 UID: 0 PID: 6374 Comm: syz.1.126 Not tainted syzkaller #0 PREEMPT(full) [ 131.597774][ T6374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 131.597785][ T6374] Call Trace: [ 131.597793][ T6374] [ 131.597800][ T6374] dump_stack_lvl+0x100/0x190 [ 131.597843][ T6374] should_fail_ex.cold+0x5/0xa [ 131.597868][ T6374] _copy_to_user+0x32/0xd0 [ 131.597898][ T6374] simple_read_from_buffer+0xcb/0x170 [ 131.597931][ T6374] proc_fail_nth_read+0x1af/0x230 [ 131.597961][ T6374] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 131.597989][ T6374] ? rw_verify_area+0xce/0x6d0 [ 131.598010][ T6374] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 131.598035][ T6374] vfs_read+0x1e4/0xb40 [ 131.598061][ T6374] ? __pfx_vfs_read+0x10/0x10 [ 131.598092][ T6374] ? find_held_lock+0x2b/0x80 [ 131.598116][ T6374] ? __fget_files+0x215/0x3d0 [ 131.598146][ T6374] ? __fget_files+0x21f/0x3d0 [ 131.598178][ T6374] ksys_read+0x12a/0x250 [ 131.598199][ T6374] ? __pfx_ksys_read+0x10/0x10 [ 131.598228][ T6374] do_syscall_64+0x123/0x790 [ 131.598258][ T6374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.598277][ T6374] RIP: 0033:0x7f0ef2f5e90e [ 131.598293][ T6374] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 131.598309][ T6374] RSP: 002b:00007f0ef3e38fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 131.598328][ T6374] RAX: ffffffffffffffda RBX: 00007f0ef3e396c0 RCX: 00007f0ef2f5e90e [ 131.598339][ T6374] RDX: 000000000000000f RSI: 00007f0ef3e390a0 RDI: 0000000000000006 [ 131.598353][ T6374] RBP: 00007f0ef3e39090 R08: 0000000000000000 R09: 0000000000000000 [ 131.598361][ T6374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 131.598369][ T6374] R13: 00007f0ef3226038 R14: 00007f0ef3225fa0 R15: 00007fff5638b588 [ 131.598393][ T6374] [ 131.807461][ T5733] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 131.828199][ T6383] netlink: 'syz.4.128': attribute type 1 has an invalid length. [ 131.839053][ T5733] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 131.841214][ T5829] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 131.865320][ T5829] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 131.876586][ T6383] 8021q: adding VLAN 0 to HW filter on device bond1 [ 131.893941][ T6383] bond1: (slave dummy0): Enslaving as a backup interface with an up link [ 131.987735][ T144] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 132.057122][ T6386] IPv6: sit1: Disabled Multicast RS [ 132.067375][ T6386] sit1: entered allmulticast mode [ 132.123238][ T30] audit: type=1400 audit(1787529235.926:357): avc: denied { create } for pid=6389 comm="syz.2.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 132.128498][ T5814] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 132.166250][ T30] audit: type=1400 audit(1787529235.946:358): avc: denied { setopt } for pid=6389 comm="syz.2.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 132.277751][ T5818] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 132.349750][ T30] audit: type=1400 audit(1787529236.156:359): avc: denied { mount } for pid=6389 comm="syz.2.131" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 132.448352][ T5818] usb 2-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 132.459563][ T5818] usb 2-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1056, setting to 64 [ 132.471617][ T5818] usb 2-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 132.485588][ T5818] usb 2-1: config 0 interface 0 has no altsetting 0 [ 132.492985][ T5818] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.502778][ T5722] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 132.515987][ T5818] usb 2-1: config 0 descriptor?? [ 132.523616][ T6388] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 132.607713][ T24] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 132.667638][ T5722] usb 5-1: Using ep0 maxpacket: 16 [ 132.674200][ T5722] usb 5-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 132.685443][ T5722] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 132.694443][ T5722] usb 5-1: config 0 has no interface number 0 [ 132.704123][ T5722] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.712929][ T5722] usb 5-1: Product: syz [ 132.717676][ T5722] usb 5-1: Manufacturer: syz [ 132.722664][ T5722] usb 5-1: SerialNumber: syz [ 132.730564][ T5722] usb 5-1: config 0 descriptor?? [ 132.746392][ T5722] hub 5-1:0.132: bad descriptor, ignoring hub [ 132.753210][ T5722] hub 5-1:0.132: probe with driver hub failed with error -5 [ 132.763607][ T5722] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.132/input/input12 [ 132.767607][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 132.775506][ T5818] usbhid 2-1:0.0: can't add hid device: -71 [ 132.781540][ T24] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 132.786043][ T5818] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 132.796841][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 132.811755][ T5818] usb 2-1: USB disconnect, device number 11 [ 132.821478][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 132.836760][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.846555][ T24] usb 3-1: Product: syz [ 132.852912][ T24] usb 3-1: Manufacturer: syz [ 132.869454][ T24] usb 3-1: SerialNumber: syz [ 132.905412][ T24] usb 3-1: 0:2 : does not exist [ 133.137196][ T24] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 133.198817][ T24] usb 3-1: USB disconnect, device number 8 [ 133.237997][ T5609] udevd[5609]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 133.627662][ T5818] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 133.798925][ T5818] usb 2-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 133.813650][ T5818] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.829183][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.830185][ T5818] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.837102][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.881275][ T30] audit: type=1400 audit(1787529237.686:360): avc: denied { unmount } for pid=5598 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 133.915085][ T5733] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000084. ret = -EPROTO [ 133.932596][ T5829] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000084. ret = -EPROTO [ 133.945762][ T5733] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to init LTM with error -EPROTO [ 133.945796][ T5733] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 133.946277][ T5733] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 133.984139][ T5733] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 133.988751][ T5829] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to init LTM with error -EPROTO [ 134.005166][ T5829] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 134.013834][ T5733] usb 4-1: USB disconnect, device number 7 [ 134.022373][ T5829] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 134.046497][ T5829] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 134.065338][ T5829] usb 1-1: USB disconnect, device number 9 [ 134.636017][ T30] audit: type=1400 audit(1787529238.436:361): avc: denied { getopt } for pid=6393 comm="syz.1.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 134.696397][ T30] audit: type=1400 audit(1787529238.476:362): avc: denied { unmount } for pid=6393 comm="syz.1.132" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 134.697685][ T5818] usbhid 2-1:1.0: can't add hid device: -71 [ 134.794194][ T5818] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 134.848485][ T5818] usb 2-1: USB disconnect, device number 12 [ 134.882080][ T30] audit: type=1400 audit(1787529238.686:363): avc: denied { connect } for pid=6405 comm="syz.0.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 135.037712][ T5733] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 135.058509][ T5729] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 135.188192][ T5818] usb 5-1: USB disconnect, device number 7 [ 135.201888][ T5733] usb 3-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 135.214037][ T5733] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 135.229264][ T5733] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 135.239884][ T5729] usb 4-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 135.282323][ T5729] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 135.300121][ T5733] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.314091][ T5729] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 135.324702][ T5733] usb 3-1: Product: syz [ 135.329257][ T5733] usb 3-1: Manufacturer: syz [ 135.336929][ T5733] usb 3-1: SerialNumber: syz [ 135.352048][ T5729] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.364697][ T5729] usb 4-1: Product: syz [ 135.374336][ T6402] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 135.379268][ T5729] usb 4-1: Manufacturer: syz [ 135.386203][ T5729] usb 4-1: SerialNumber: syz [ 135.403400][ T6402] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 135.413576][ T6404] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 135.434510][ T5733] usbserial_generic 3-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 135.434597][ T6404] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 135.453831][ T5733] usbserial_generic 3-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 135.465548][ T5733] usbserial_generic 3-1:1.0: generic converter detected [ 135.474622][ T5729] usbserial_generic 4-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 135.493250][ T5733] usb 3-1: generic converter now attached to ttyUSB0 [ 135.495177][ T30] audit: type=1400 audit(1787529239.296:364): avc: denied { mount } for pid=6415 comm="syz.4.140" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 135.500581][ T5729] usbserial_generic 4-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 135.534159][ T29] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 135.554989][ T30] audit: type=1400 audit(1787529239.336:365): avc: denied { search } for pid=6415 comm="syz.4.140" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 135.579912][ T5729] usbserial_generic 4-1:1.0: generic converter detected [ 135.583450][ T6416] 9pnet_fd: Insufficient options for proto=fd [ 135.588086][ T6418] netlink: 'syz.1.141': attribute type 1 has an invalid length. [ 135.611253][ T30] audit: type=1400 audit(1787529239.336:366): avc: denied { search } for pid=6415 comm="syz.4.140" name="per_cpu" dev="tracefs" ino=1590 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 135.615558][ T5729] usb 4-1: generic converter now attached to ttyUSB1 [ 135.662479][ T6418] netlink: 'syz.1.141': attribute type 10 has an invalid length. [ 135.686165][ T6418] netlink: 40 bytes leftover after parsing attributes in process `syz.1.141'. [ 135.691876][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 135.720398][ T29] usb 1-1: Using ep0 maxpacket: 8 [ 135.728740][ T29] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 135.736951][ T6418] dummy0: entered promiscuous mode [ 135.748571][ T29] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 135.772744][ T29] usb 1-1: config 0 has no interface number 0 [ 135.795584][ T29] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 135.832266][ T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.871162][ T29] usb 1-1: config 0 descriptor?? [ 135.918393][ T5729] usb 3-1: USB disconnect, device number 9 [ 135.929295][ T5729] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 135.946946][ T29] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 135.963887][ T5729] usbserial_generic 3-1:1.0: device disconnected [ 136.033729][ T5829] usb 4-1: USB disconnect, device number 8 [ 136.057143][ T5829] generic ttyUSB1: generic converter now disconnected from ttyUSB1 [ 136.067130][ T5829] usbserial_generic 4-1:1.0: device disconnected [ 136.096235][ T6412] ªªªªªª: renamed from vlan0 (while UP) [ 136.110416][ T5818] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 136.278981][ T5818] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 136.301622][ T5818] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.326529][ T5818] usb 5-1: config 0 descriptor?? [ 136.339669][ T5818] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 136.410445][ T29] usb 1-1: USB disconnect, device number 10 [ 136.762054][ T5818] cpia1 5-1:0.0: unexpected state after lo power cmd: 00 [ 137.067643][ T29] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 137.079192][ T6436] binder: 6435:6436 unknown command 0 [ 137.085025][ T6436] binder: 6435:6436 ioctl c0306201 2000000001c0 returned -22 [ 137.173254][ T5818] cpia1 5-1:0.0: only firmware version 1 is supported (got: 0) [ 137.265090][ T29] usb 3-1: Using ep0 maxpacket: 8 [ 137.351970][ T5829] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 137.353385][ T29] usb 3-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b [ 137.387411][ T29] usb 3-1: config 3 has an invalid interface number: 45 but max is 0 [ 137.407070][ T29] usb 3-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 137.428673][ T29] usb 3-1: config 3 has no interface number 0 [ 137.434946][ T29] usb 3-1: config 3 interface 45 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 137.450971][ T29] usb 3-1: config 3 interface 45 has no altsetting 0 [ 137.462358][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.474331][ T29] usb 3-1: Product: syz [ 137.481202][ T29] usb 3-1: Manufacturer: syz [ 137.486238][ T29] usb 3-1: SerialNumber: syz [ 138.330870][ T5829] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 138.384161][ T5829] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.405567][ T5829] usb 4-1: Product: syz [ 138.421190][ T5829] usb 4-1: Manufacturer: syz [ 138.426214][ T6455] could not open pipe file descriptor [ 138.457404][ T5829] usb 4-1: SerialNumber: syz [ 138.921698][ T29] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 139.044135][ T189] usb 5-1: USB disconnect, device number 8 [ 139.149152][ T6434] netlink: 'syz.3.146': attribute type 11 has an invalid length. [ 139.157995][ T6434] netlink: 32 bytes leftover after parsing attributes in process `syz.3.146'. [ 139.226487][ T29] usb 3-1: USB disconnect, device number 10 [ 139.281681][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 139.281705][ T30] audit: type=1400 audit(1787529243.076:375): avc: denied { write } for pid=6453 comm="syz.0.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 139.361860][ T30] audit: type=1400 audit(1787529243.156:376): avc: denied { read } for pid=6453 comm="syz.0.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 139.382663][ T5829] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 139.437687][ T5829] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 139.455741][ T5822] udevd[5822]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:3.45/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 139.602328][ T30] audit: type=1400 audit(1787529243.406:377): avc: denied { write } for pid=6471 comm="syz.0.153" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 139.603289][ T6472] random: crng reseeded on system resumption [ 139.625758][ T30] audit: type=1400 audit(1787529243.406:378): avc: denied { open } for pid=6471 comm="syz.0.153" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 139.907630][ T5733] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 139.988727][ T29] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 140.078401][ T5733] usb 1-1: Using ep0 maxpacket: 8 [ 140.114399][ T30] audit: type=1400 audit(1787529243.916:379): avc: denied { write } for pid=6471 comm="syz.0.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 140.169328][ T29] usb 3-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 140.364721][ T29] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 140.421390][ T29] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 140.760009][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.769113][ T29] usb 3-1: Product: syz [ 140.773433][ T29] usb 3-1: Manufacturer: syz [ 140.780909][ T29] usb 3-1: SerialNumber: syz [ 140.886516][ T6475] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 140.916006][ T6475] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 140.948307][ T29] usbserial_generic 3-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 140.960808][ T29] usbserial_generic 3-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 140.974312][ T29] usbserial_generic 3-1:1.0: generic converter detected [ 141.006758][ T29] usb 3-1: generic converter now attached to ttyUSB0 [ 141.141025][ T5818] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 141.755153][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 142.135712][ T29] usb 3-1: USB disconnect, device number 11 [ 142.373521][ T5829] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000084. ret = -EPROTO [ 142.506235][ T29] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 142.644550][ T5829] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to init LTM with error -EPROTO [ 142.656546][ T5829] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 142.667858][ T5829] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 142.677067][ T29] usbserial_generic 3-1:1.0: device disconnected [ 142.699416][ T5829] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 142.727968][ T6482] FAULT_INJECTION: forcing a failure. [ 142.727968][ T6482] name failslab, interval 1, probability 0, space 0, times 0 [ 142.731130][ T5829] usb 4-1: USB disconnect, device number 9 [ 142.956846][ T6482] CPU: 1 UID: 0 PID: 6482 Comm: syz.3.156 Not tainted syzkaller #0 PREEMPT(full) [ 142.956877][ T6482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 142.956886][ T6482] Call Trace: [ 142.956892][ T6482] [ 142.956899][ T6482] dump_stack_lvl+0x100/0x190 [ 142.956930][ T6482] should_fail_ex.cold+0x5/0xa [ 142.956953][ T6482] should_failslab+0xc2/0x120 [ 142.956979][ T6482] __kmalloc_noprof+0xfc/0x820 [ 142.957002][ T6482] ? tomoyo_encode2+0xfb/0x3c0 [ 142.957022][ T6482] tomoyo_encode2+0xfb/0x3c0 [ 142.957040][ T6482] tomoyo_encode+0x29/0x50 [ 142.957054][ T6482] tomoyo_realpath_from_path+0x18c/0x690 [ 142.957073][ T6482] tomoyo_path_number_perm+0x23c/0x580 [ 142.957095][ T6482] ? tomoyo_path_number_perm+0x22e/0x580 [ 142.957116][ T6482] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 142.957157][ T6482] ? find_held_lock+0x2b/0x80 [ 142.957177][ T6482] ? hook_file_ioctl_common+0x140/0x440 [ 142.957199][ T6482] ? __fget_files+0x21f/0x3d0 [ 142.957227][ T6482] security_file_ioctl+0xd3/0x230 [ 142.957254][ T6482] __x64_sys_ioctl+0xb7/0x210 [ 142.957277][ T6482] do_syscall_64+0x123/0x790 [ 142.957303][ T6482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.957335][ T6482] RIP: 0033:0x7f277259e0d9 [ 142.957351][ T6482] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.957365][ T6482] RSP: 002b:00007f277352e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 142.957381][ T6482] RAX: ffffffffffffffda RBX: 00007f2772825fa0 RCX: 00007f277259e0d9 [ 142.957390][ T6482] RDX: 00002000000001c0 RSI: 00000000c0306201 RDI: 0000000000000003 [ 142.957398][ T6482] RBP: 00007f277352e090 R08: 0000000000000000 R09: 0000000000000000 [ 142.957406][ T6482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.957414][ T6482] R13: 00007f2772826038 R14: 00007f2772825fa0 R15: 00007ffc81a0d2c8 [ 142.957433][ T6482] [ 142.963093][ T5818] usb 5-1: Using ep0 maxpacket: 32 [ 143.005643][ T6482] ERROR: Out of memory at tomoyo_realpath_from_path. [ 143.884229][ C0] raw-gadget.3 gadget.4: ignoring, device is not running [ 143.893649][ C0] raw-gadget.3 gadget.4: ignoring, device is not running [ 143.906794][ C0] raw-gadget.3 gadget.4: ignoring, device is not running [ 143.922605][ T5818] usb 5-1: device descriptor read/all, error -32 [ 143.976146][ T6482] binder: 6480:6482 unknown command 0 [ 143.983728][ T6482] binder: 6480:6482 ioctl c0306201 2000000001c0 returned -22 [ 143.996325][ T5733] usb 1-1: unable to get BOS descriptor or descriptor too short [ 144.004895][ T5733] usb 1-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 0.40 [ 144.028070][ T5733] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 144.053457][ T6487] fuse: Bad value for 'fd' [ 144.054545][ T5733] usb 1-1: can't read configurations, error -71 [ 144.201315][ T30] audit: type=1400 audit(1787529247.996:380): avc: denied { unmount } for pid=5602 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 144.257676][ T30] audit: type=1400 audit(1787529248.036:381): avc: denied { unmount } for pid=5602 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 144.942651][ T30] audit: type=1400 audit(1787529248.736:382): avc: denied { ioctl } for pid=6499 comm="syz.4.163" path="/dev/nullb0" dev="devtmpfs" ino=694 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 145.116731][ T6497] 9pnet_fd: Insufficient options for proto=fd [ 145.940676][ T6519] overlayfs: failed to clone upperpath [ 146.039686][ T30] audit: type=1400 audit(1787529249.816:383): avc: denied { remount } for pid=6517 comm="syz.1.169" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 146.373495][ T5818] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 146.587842][ T5818] usb 5-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 146.640340][ T5818] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 146.692744][ T5818] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 146.740932][ T5818] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.783379][ T5818] usb 5-1: Product: syz [ 146.813630][ T5818] usb 5-1: Manufacturer: syz [ 146.838005][ T5818] usb 5-1: SerialNumber: syz [ 146.866543][ T6520] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 146.922015][ T5694] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 146.963004][ T6520] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 146.984345][ T5818] usbserial_generic 5-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 146.997222][ T5818] usbserial_generic 5-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 147.017681][ T5818] usbserial_generic 5-1:1.0: generic converter detected [ 147.052109][ T5818] usb 5-1: generic converter now attached to ttyUSB0 [ 147.137966][ T5694] usb 1-1: Using ep0 maxpacket: 8 [ 147.173744][ T5694] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 147.293759][ T5694] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 147.351624][ T5694] usb 1-1: config 0 has no interface number 0 [ 147.410403][ T5694] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 147.963509][ T5694] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.436768][ T5694] usb 1-1: config 0 descriptor?? [ 148.717664][ T5694] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 152.681326][ T5694] usb 1-1: USB disconnect, device number 13 [ 152.839837][ T5722] usb 5-1: USB disconnect, device number 11 [ 152.995620][ T5722] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 153.081770][ T5722] usbserial_generic 5-1:1.0: device disconnected [ 154.428966][ T6538] 9pnet_fd: Insufficient options for proto=fd [ 154.759701][ T30] audit: type=1400 audit(1787529258.566:384): avc: denied { ioctl } for pid=6544 comm="syz.4.177" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 155.159547][ T30] audit: type=1400 audit(1787529258.706:385): avc: denied { read } for pid=6544 comm="syz.4.177" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 155.262120][ T30] audit: type=1400 audit(1787529258.706:386): avc: denied { open } for pid=6544 comm="syz.4.177" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 155.902271][ T30] audit: type=1400 audit(1787529258.876:387): avc: denied { map_create } for pid=6544 comm="syz.4.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 156.094913][ T30] audit: type=1400 audit(1787529258.906:388): avc: denied { create } for pid=6558 comm="syz.2.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 156.339200][ T6564] netlink: 60 bytes leftover after parsing attributes in process `syz.3.179'. [ 156.427318][ T30] audit: type=1400 audit(1787529258.946:389): avc: denied { getopt } for pid=6558 comm="syz.2.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 157.581583][ T30] audit: type=1326 audit(1787529258.986:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6558 comm="syz.2.178" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f650499e0d9 code=0x0 [ 158.214253][ T6573] overlayfs: failed to clone upperpath [ 158.241926][ T30] audit: type=1400 audit(1787529259.026:391): avc: denied { name_bind } for pid=6558 comm="syz.2.178" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 158.715221][ T30] audit: type=1400 audit(1787529259.056:392): avc: denied { node_bind } for pid=6558 comm="syz.2.178" saddr=::1 src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 159.181647][ T30] audit: type=1400 audit(1787529259.176:393): avc: denied { create } for pid=6560 comm="syz.3.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 159.677226][ T6608] netlink: 8 bytes leftover after parsing attributes in process `syz.0.184'. [ 159.911076][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 159.911097][ T30] audit: type=1400 audit(1787529263.716:424): avc: denied { write } for pid=6607 comm="syz.4.185" name="igmp" dev="proc" ino=4026533365 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 160.364911][ T30] audit: type=1400 audit(1787529264.166:425): avc: denied { create } for pid=6615 comm="syz.3.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 161.866354][ T30] audit: type=1400 audit(1787529265.666:426): avc: denied { create } for pid=6615 comm="syz.3.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 162.407465][ T30] audit: type=1400 audit(1787529266.206:427): avc: denied { name_bind } for pid=6621 comm="syz.4.187" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 163.040940][ T30] audit: type=1400 audit(1787529266.286:428): avc: denied { mmap_zero } for pid=6615 comm="syz.3.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 163.623595][ T30] audit: type=1400 audit(1787529266.876:429): avc: denied { prog_load } for pid=6621 comm="syz.4.187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 165.174797][ T30] audit: type=1400 audit(1787529266.886:430): avc: denied { bpf } for pid=6621 comm="syz.4.187" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 165.368368][ T6625] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=548 sclass=netlink_xfrm_socket pid=6625 comm=syz.4.187 [ 165.541189][ T30] audit: type=1400 audit(1787529267.626:431): avc: denied { read } for pid=6621 comm="syz.4.187" dev="nsfs" ino=4026533341 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 165.817246][ T30] audit: type=1400 audit(1787529267.636:432): avc: denied { open } for pid=6621 comm="syz.4.187" path="net:[4026533341]" dev="nsfs" ino=4026533341 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 166.156935][ T30] audit: type=1400 audit(1787529267.646:433): avc: denied { create } for pid=6621 comm="syz.4.187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 166.473411][ T30] audit: type=1400 audit(1787529268.806:434): avc: denied { bind } for pid=6621 comm="syz.4.187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 166.790746][ T6605] nvmet: connect request for invalid subsystem tes! [ 166.945580][ T30] audit: type=1400 audit(1787529269.906:435): avc: denied { connect } for pid=6621 comm="syz.4.187" lport=256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 167.100446][ T6627] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "tes" [ 167.229092][ T30] audit: type=1400 audit(1787529269.926:436): avc: denied { getopt } for pid=6621 comm="syz.4.187" lport=256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 167.405369][ T30] audit: type=1400 audit(1787529269.926:437): avc: denied { write } for pid=6621 comm="syz.4.187" lport=256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 167.867738][ T30] audit: type=1400 audit(1787529269.926:438): avc: denied { write } for pid=6621 comm="syz.4.187" name="nvme-fabrics" dev="devtmpfs" ino=701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 168.035203][ T30] audit: type=1400 audit(1787529269.986:439): avc: denied { read write } for pid=6631 comm="syz.0.189" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 168.092002][ T5722] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 168.773076][ T5722] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 169.168488][ T5722] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.211204][ T5722] usb 4-1: Product: syz [ 169.248420][ T5722] usb 4-1: Manufacturer: syz [ 169.263978][ T5722] usb 4-1: SerialNumber: syz [ 170.084779][ T6644] netlink: 'syz.3.191': attribute type 11 has an invalid length. [ 170.236702][ T6644] netlink: 32 bytes leftover after parsing attributes in process `syz.3.191'. [ 170.668029][ T5818] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 170.801338][ T5722] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 170.847375][ T5722] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 170.897453][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 170.931692][ T5818] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 170.961281][ T30] audit: type=1400 audit(1787529274.696:451): avc: denied { create } for pid=6658 comm="syz.1.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 171.028194][ T5818] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 171.105204][ T5818] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 171.149178][ T30] audit: type=1400 audit(1787529274.756:452): avc: denied { bind } for pid=6657 comm="syz.0.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 171.214524][ T5818] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 171.810586][ T5818] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 171.891367][ T5818] usb 5-1: Product: syz [ 171.932585][ T5818] usb 5-1: Manufacturer: syz [ 172.015374][ T5818] usb 5-1: SerialNumber: syz [ 173.107291][ T5818] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 173.198581][ T30] audit: type=1400 audit(1787529276.976:453): avc: denied { mount } for pid=6664 comm="syz.1.197" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 173.453725][ T5722] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -EPROTO [ 173.465848][ T29] usb 5-1: USB disconnect, device number 12 [ 173.482551][ T29] usblp0: removed [ 173.860907][ T5722] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 174.046298][ T5722] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 174.303129][ T5722] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 174.544805][ T5722] usb 4-1: USB disconnect, device number 10 [ 174.787125][ T30] audit: type=1400 audit(1787529278.586:454): avc: denied { create } for pid=6672 comm="syz.0.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 175.388802][ T6683] 9pnet_fd: Insufficient options for proto=fd [ 175.453849][ T30] audit: type=1400 audit(1787529278.706:455): avc: denied { setopt } for pid=6672 comm="syz.0.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 176.329800][ T9] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 176.376059][ T30] audit: type=1400 audit(1787529279.096:456): avc: denied { write } for pid=6672 comm="syz.0.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 176.694100][ T9] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 176.803727][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.815268][ T9] usb 3-1: Product: syz [ 176.825689][ T9] usb 3-1: Manufacturer: syz [ 176.834570][ T9] usb 3-1: SerialNumber: syz [ 177.882772][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 178.075733][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 178.394138][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 178.890238][ T9] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 179.089110][ T9] usb 3-1: USB disconnect, device number 12 [ 179.836870][ T30] audit: type=1400 audit(1787529283.636:457): avc: denied { allowed } for pid=6697 comm="syz.3.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 180.008254][ T6702] 9pnet_fd: Insufficient options for proto=fd [ 180.080035][ T30] audit: type=1400 audit(1787529283.716:458): avc: denied { write } for pid=6697 comm="syz.3.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 181.148472][ T6707] 9p: Bad value for 'rfdno' [ 183.232454][ T5829] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 183.396948][ T5818] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 183.419241][ T5829] usb 4-1: New USB device found, idVendor=046d, idProduct=c71e, bcdDevice= 0.00 [ 183.508990][ T5829] usb 4-1: config 0 interface 0 altsetting 26 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.604780][ T5829] usb 4-1: config 0 interface 0 altsetting 26 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.789562][ T5829] usb 4-1: config 0 interface 0 altsetting 26 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 183.902412][ T5818] usb 1-1: Using ep0 maxpacket: 8 [ 183.942552][ T5818] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 183.986135][ T5829] usb 4-1: config 0 interface 0 has no altsetting 0 [ 184.123599][ T30] audit: type=1400 audit(1787529287.926:459): avc: denied { create } for pid=6709 comm="syz.1.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 184.197206][ T5829] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.297603][ T30] audit: type=1400 audit(1787529288.046:460): avc: denied { create } for pid=6709 comm="syz.1.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 184.344993][ T5818] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 184.368959][ T5818] usb 1-1: can't read configurations, error -71 [ 184.395167][ T30] audit: type=1400 audit(1787529288.086:461): avc: denied { ioctl } for pid=6709 comm="syz.1.208" path="socket:[10968]" dev="sockfs" ino=10968 ioctlcmd=0x5879 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 184.428056][ T30] audit: type=1400 audit(1787529288.226:462): avc: denied { write } for pid=6709 comm="syz.1.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 184.471141][ T5829] usb 4-1: config 0 descriptor?? [ 184.531737][ T5829] usb 4-1: can't set config #0, error -71 [ 184.582107][ T5829] usb 4-1: USB disconnect, device number 11 [ 184.663707][ T6713] netlink: get zone limit has 4 unknown bytes [ 184.671383][ T30] audit: type=1400 audit(1787529288.226:463): avc: denied { connect } for pid=6709 comm="syz.1.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 184.931850][ T30] audit: type=1400 audit(1787529288.256:464): avc: denied { connect } for pid=6709 comm="syz.1.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 186.313944][ T30] audit: type=1400 audit(1787529290.116:465): avc: denied { read } for pid=6718 comm="syz.1.211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 186.443092][ T30] audit: type=1400 audit(1787529290.156:466): avc: denied { create } for pid=6721 comm="syz.4.213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 186.806239][ T30] audit: type=1400 audit(1787529290.346:467): avc: denied { ioctl } for pid=6721 comm="syz.4.213" path="socket:[10973]" dev="sockfs" ino=10973 ioctlcmd=0x52d2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 187.395285][ T30] audit: type=1400 audit(1787529290.956:468): avc: denied { mount } for pid=6727 comm="syz.3.214" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 187.770277][ T5829] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 188.274425][ T5829] usb 4-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 188.328661][ T5829] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 188.384427][ T5829] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 188.497214][ T5829] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.616426][ T5829] usb 4-1: Product: syz [ 188.622071][ T9] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 188.661331][ T5829] usb 4-1: Manufacturer: syz [ 188.696029][ T5829] usb 4-1: SerialNumber: syz [ 188.765318][ T6730] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 188.862716][ T9] usb 5-1: New USB device found, idVendor=23ba, idProduct=0100, bcdDevice= 1.00 [ 188.882299][ T6730] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 189.187732][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 189.224711][ T9] usb 5-1: config 1 interface 1 altsetting 65 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 189.318375][ T5829] usbserial_generic 4-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 189.338328][ T9] usb 5-1: config 1 interface 1 has no altsetting 1 [ 190.015627][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.061417][ T5829] usbserial_generic 4-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 190.120749][ T9] usb 5-1: Product: syz [ 190.144483][ T9] usb 5-1: Manufacturer: syz [ 190.171154][ T5829] usbserial_generic 4-1:1.0: generic converter detected [ 190.198941][ T9] usb 5-1: SerialNumber: syz [ 190.415869][ T5829] usb 4-1: generic converter now attached to ttyUSB0 [ 191.230707][ T9] usb 5-1: 1:65 : no or invalid class specific endpoint descriptor [ 191.241583][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 191.241600][ T30] audit: type=1400 audit(1787529294.996:471): avc: denied { unmount } for pid=5599 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 191.283013][ T5829] usb 4-1: USB disconnect, device number 12 [ 191.325510][ T5829] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 191.411104][ T30] audit: type=1400 audit(1787529295.176:472): avc: denied { write } for pid=6748 comm="syz.0.220" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 191.443307][ T5829] usbserial_generic 4-1:1.0: device disconnected [ 191.845781][ T30] audit: type=1400 audit(1787529295.646:473): avc: denied { create } for pid=6750 comm="syz.2.221" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 192.363540][ T30] audit: type=1400 audit(1787529295.716:474): avc: denied { map } for pid=6750 comm="syz.2.221" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=12424 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 192.693914][ T9] usb 5-1: USB disconnect, device number 13 [ 192.728748][ T6754] lo speed is unknown, defaulting to 1000 [ 192.735464][ T6754] lo speed is unknown, defaulting to 1000 [ 192.743781][ T6754] lo speed is unknown, defaulting to 1000 [ 192.753741][ T6754] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 192.768891][ T6754] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 192.787263][ T6754] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 192.804928][ T6754] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 192.827896][ T6754] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 192.871706][ T6754] lo speed is unknown, defaulting to 1000 [ 192.880915][ T6754] lo speed is unknown, defaulting to 1000 [ 192.890528][ T6754] lo speed is unknown, defaulting to 1000 [ 192.897647][ T6754] lo speed is unknown, defaulting to 1000 [ 192.905746][ T6754] lo speed is unknown, defaulting to 1000 [ 192.941113][ T30] audit: type=1400 audit(1787529295.716:475): avc: denied { read write } for pid=6750 comm="syz.2.221" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=12424 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 193.366663][ T30] audit: type=1400 audit(1787529296.486:476): avc: denied { create } for pid=6750 comm="syz.2.221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 193.556521][ T6759] smbdirect: ib_dev[syz2] removed [ 193.573257][ T6639] udevd[6639]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 193.708072][ T51] Bluetooth: hci1: Malformed LE Event: 0x0d [ 193.808819][ T30] audit: type=1400 audit(1787529296.496:477): avc: denied { write } for pid=6750 comm="syz.2.221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 194.038032][ T30] audit: type=1400 audit(1787529297.476:478): avc: denied { write } for pid=6757 comm="syz.4.224" path="/dev/vhci" dev="devtmpfs" ino=1267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 194.372991][ T5722] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 195.267980][ T30] audit: type=1400 audit(1787529297.826:479): avc: denied { create } for pid=6757 comm="syz.4.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 195.316965][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.346697][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.442798][ T6771] syz.1.226 uses obsolete (PF_INET,SOCK_PACKET) [ 195.478813][ T5722] usb 1-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 195.533575][ T30] audit: type=1400 audit(1787529298.396:480): avc: denied { map_read map_write } for pid=6757 comm="syz.4.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 195.590582][ T5722] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 195.768195][ T6771] netlink: 'syz.1.226': attribute type 10 has an invalid length. [ 195.829461][ T6771] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.839207][ T6771] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.667570][ T5722] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 197.619905][ T30] audit: type=1400 audit(1787529298.426:481): avc: denied { setopt } for pid=6757 comm="syz.4.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 200.493392][ T30] audit: type=1400 audit(1787529298.426:482): avc: denied { ioctl } for pid=6757 comm="syz.4.224" path="socket:[12468]" dev="sockfs" ino=12468 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 200.540381][ T6771] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.549077][ T6771] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.557462][ T6771] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.565510][ T6771] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.881605][ T6771] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 200.994883][ T5722] usb 1-1: string descriptor 0 read error: -71 [ 201.091613][ T5722] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.210510][ T5722] usb 1-1: can't set config #1, error -71 [ 201.253461][ T30] audit: type=1400 audit(1787529299.336:483): avc: denied { create } for pid=6768 comm="syz.1.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 201.313566][ T5722] usb 1-1: USB disconnect, device number 16 [ 201.537695][ T30] audit: type=1400 audit(1787529299.536:484): avc: denied { mount } for pid=6768 comm="syz.1.226" name="/" dev="autofs" ino=11006 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 201.686284][ T30] audit: type=1400 audit(1787529305.156:485): avc: denied { setopt } for pid=6775 comm="syz.4.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 201.770431][ T30] audit: type=1400 audit(1787529305.176:486): avc: denied { mount } for pid=6776 comm="syz.3.228" name="/" dev="configfs" ino=1075 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 201.962100][ T30] audit: type=1400 audit(1787529305.446:487): avc: denied { create } for pid=6776 comm="syz.3.228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 202.111381][ T30] audit: type=1400 audit(1787529305.556:488): avc: denied { setopt } for pid=6784 comm="syz.0.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 202.244502][ T30] audit: type=1400 audit(1787529305.566:489): avc: denied { bind } for pid=6784 comm="syz.0.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 202.353161][ T30] audit: type=1400 audit(1787529305.636:490): avc: denied { write } for pid=6784 comm="syz.0.230" path="socket:[12503]" dev="sockfs" ino=12503 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 202.785504][ T5613] Bluetooth: hci4: command 0x0406 tx timeout [ 202.796475][ T5603] Bluetooth: hci2: command 0x0406 tx timeout [ 202.807246][ T5603] Bluetooth: hci1: command 0x0406 tx timeout [ 202.814605][ T4914] Bluetooth: hci3: command 0x0406 tx timeout [ 202.821657][ T5603] Bluetooth: hci0: command 0x0406 tx timeout [ 202.888237][ T5818] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 202.922100][ T5722] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 203.102579][ T6799] netlink: 8 bytes leftover after parsing attributes in process `syz.4.233'. [ 203.220552][ T5818] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 203.295170][ T5818] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 203.326284][ T5818] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.467723][ T5722] usb 1-1: Using ep0 maxpacket: 16 [ 203.486599][ T5818] usb 4-1: config 0 descriptor?? [ 203.507208][ T5722] usb 1-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 203.575055][ T5818] pwc: Askey VC010 type 2 USB webcam detected. [ 203.594318][ T5722] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 203.635865][ T5722] usb 1-1: config 0 has no interface number 0 [ 203.706641][ T5722] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.744664][ T5722] usb 1-1: Product: syz [ 203.761938][ T5722] usb 1-1: Manufacturer: syz [ 203.783983][ T5722] usb 1-1: SerialNumber: syz [ 203.862757][ T5722] usb 1-1: config 0 descriptor?? [ 203.903844][ T5722] hub 1-1:0.132: bad descriptor, ignoring hub [ 203.942777][ T5722] hub 1-1:0.132: probe with driver hub failed with error -5 [ 204.001935][ T5722] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.132/input/input13 [ 204.089678][ T5818] pwc: recv_control_msg error -32 req 02 val 2b00 [ 204.148031][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 204.148070][ T30] audit: type=1400 audit(1787529307.946:499): avc: denied { write } for pid=6784 comm="syz.0.230" name="mice" dev="devtmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 204.254768][ T5818] pwc: recv_control_msg error -32 req 02 val 2700 [ 204.330382][ T5818] pwc: recv_control_msg error -32 req 02 val 2c00 [ 204.379126][ T5818] pwc: recv_control_msg error -32 req 04 val 1000 [ 204.447238][ T30] audit: type=1400 audit(1787529307.956:500): avc: denied { open } for pid=6784 comm="syz.0.230" path="/dev/input/mice" dev="devtmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 204.478741][ T6807] syz_tun: entered allmulticast mode [ 204.652880][ T6794] netlink: 12 bytes leftover after parsing attributes in process `syz.3.234'. [ 204.670966][ T30] audit: type=1400 audit(1787529307.986:501): avc: denied { read } for pid=4948 comm="acpid" name="mouse1" dev="devtmpfs" ino=3075 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 204.793440][ T5818] pwc: recv_control_msg error -32 req 04 val 1300 [ 204.835708][ T5818] pwc: recv_control_msg error -32 req 04 val 1400 [ 204.891281][ T30] audit: type=1400 audit(1787529307.986:502): avc: denied { open } for pid=4948 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=3075 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 204.935480][ T5818] pwc: recv_control_msg error -32 req 02 val 2000 [ 204.956090][ T6807] syz_tun: left allmulticast mode [ 205.000376][ T6811] 9pnet_fd: Insufficient options for proto=fd [ 205.023805][ T30] audit: type=1400 audit(1787529308.246:503): avc: denied { read } for pid=6792 comm="syz.3.234" name="event2" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 205.158910][ T30] audit: type=1400 audit(1787529308.246:504): avc: denied { open } for pid=6792 comm="syz.3.234" path="/dev/input/event2" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 205.353547][ T30] audit: type=1400 audit(1787529308.356:505): avc: denied { ioctl } for pid=6792 comm="syz.3.234" path="/dev/input/event2" dev="devtmpfs" ino=921 ioctlcmd=0x4592 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 205.353650][ T30] audit: type=1400 audit(1787529308.376:506): avc: denied { create } for pid=6792 comm="syz.3.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 205.353716][ T30] audit: type=1400 audit(1787529308.446:507): avc: denied { ioctl } for pid=6806 comm="syz.1.237" path="socket:[12576]" dev="sockfs" ino=12576 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 205.353810][ T30] audit: type=1400 audit(1787529308.636:508): avc: denied { search } for pid=6810 comm="syz.4.239" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 206.264743][ T6445] raw-gadget.0 gadget.0: failed to queue suspend event [ 206.441389][ T6784] raw-gadget.0 gadget.0: failed to queue disconnect event [ 206.548305][ T5694] usb 1-1: USB disconnect, device number 17 [ 207.234066][ T5818] pwc: recv_control_msg error -71 req 04 val 1500 [ 207.278694][ T5818] pwc: recv_control_msg error -71 req 02 val 2500 [ 207.342540][ T5818] pwc: recv_control_msg error -71 req 02 val 2400 [ 207.415114][ T5818] pwc: recv_control_msg error -71 req 02 val 2600 [ 207.477316][ T6830] binder: 6827:6830 ioctl c0306201 200000000080 returned -14 [ 207.498376][ T5818] pwc: recv_control_msg error -71 req 02 val 2900 [ 207.545401][ T5818] pwc: recv_control_msg error -71 req 02 val 2800 [ 207.612839][ T5818] pwc: recv_control_msg error -71 req 04 val 1100 [ 207.624576][ T6830] binder: 6827:6830 ioctl c0306201 2000000003c0 returned -14 [ 207.661236][ T5818] pwc: recv_control_msg error -71 req 04 val 1200 [ 208.804295][ T5818] pwc: Registered as video103. [ 209.896741][ T6840] netlink: 'syz.4.246': attribute type 21 has an invalid length. [ 210.493372][ T5818] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input14 [ 210.532114][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 210.532159][ T30] audit: type=1400 audit(1787529314.336:526): avc: denied { ioctl } for pid=4948 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3086 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 210.784427][ T5818] usb 4-1: USB disconnect, device number 13 [ 212.603789][ T30] audit: type=1400 audit(1787529316.366:527): avc: denied { append } for pid=6849 comm="syz.2.249" name="loop9" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 213.750242][ T30] audit: type=1400 audit(1787529317.556:529): avc: denied { mount } for pid=6849 comm="syz.2.249" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 214.306243][ T30] audit: type=1400 audit(1787529317.526:528): avc: denied { read write } for pid=6858 comm="syz.4.253" name="nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 214.397322][ T6866] netlink: 'syz.0.254': attribute type 21 has an invalid length. [ 214.774897][ T30] audit: type=1400 audit(1787529317.606:530): avc: denied { open } for pid=6858 comm="syz.4.253" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 214.962569][ T6868] fuse: Bad value for 'fd' [ 214.972504][ T6868] Invalid source name [ 214.977016][ T6868] UBIFS error (pid: 6868): cannot open "./file0", error -22 [ 215.198429][ T30] audit: type=1400 audit(1787529318.226:531): avc: denied { mount } for pid=6849 comm="syz.2.249" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 215.635543][ T30] audit: type=1400 audit(1787529318.766:532): avc: denied { mounton } for pid=6860 comm="syz.1.252" path="/55/file0" dev="tmpfs" ino=332 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 215.876884][ T30] audit: type=1400 audit(1787529318.866:533): avc: denied { create } for pid=6867 comm="syz.3.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 216.086841][ T30] audit: type=1400 audit(1787529319.886:534): avc: denied { ioctl } for pid=6874 comm="syz.3.257" path="/dev/video0" dev="devtmpfs" ino=931 ioctlcmd=0x5608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 216.177799][ T30] audit: type=1400 audit(1787529319.946:535): avc: denied { shutdown } for pid=6874 comm="syz.3.257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 216.254184][ T30] audit: type=1400 audit(1787529319.966:536): avc: denied { getopt } for pid=6874 comm="syz.3.257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 216.302758][ T6876] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 216.333592][ T30] audit: type=1400 audit(1787529319.966:537): avc: denied { name_connect } for pid=6874 comm="syz.3.257" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 216.446767][ T30] audit: type=1400 audit(1787529320.006:538): avc: denied { mount } for pid=6875 comm="syz.1.258" name="/" dev="ramfs" ino=12838 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 216.582867][ T30] audit: type=1400 audit(1787529320.306:539): avc: denied { execute } for pid=6875 comm="syz.1.258" name="file2" dev="ramfs" ino=12840 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 216.767589][ T30] audit: type=1400 audit(1787529320.306:540): avc: denied { execute_no_trans } for pid=6875 comm="syz.1.258" path="/file2" dev="ramfs" ino=12840 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 216.982053][ T30] audit: type=1400 audit(1787529320.346:541): avc: denied { ioctl } for pid=6875 comm="syz.1.258" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=12835 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 217.800963][ T6876] netlink: 20 bytes leftover after parsing attributes in process `syz.3.257'. [ 222.279077][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 222.279121][ T30] audit: type=1400 audit(1787529326.086:544): avc: denied { cmd } for pid=6892 comm="iou-wrk-6894" path="/dev/ublk-control" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 222.467515][ T6895] 9pnet_fd: Insufficient options for proto=fd [ 224.187933][ T30] audit: type=1804 audit(1787529326.226:545): pid=6895 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.2.260" name="/newroot/51/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=1594 res=1 errno=0 [ 224.682217][ T6908] netlink: 28 bytes leftover after parsing attributes in process `syz.4.261'. [ 225.460836][ T30] audit: type=1400 audit(1787529326.926:546): avc: denied { map } for pid=6892 comm="syz.4.261" path="/dev/ublkc1" dev="devtmpfs" ino=3090 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 225.528677][ T6904] 9pnet_fd: Insufficient options for proto=fd [ 225.726005][ T30] audit: type=1804 audit(1787529327.966:547): pid=6904 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.262" name="/newroot/54/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=1594 res=1 errno=0 [ 225.904567][ T6685] udevd[6685]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 225.962526][ T30] audit: type=1804 audit(1787529328.146:548): pid=6904 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.0.262" name="/newroot/54/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=1594 res=1 errno=0 [ 226.325511][ T30] audit: type=1400 audit(1787529328.576:549): avc: denied { ioctl } for pid=6892 comm="syz.4.261" path="cgroup:[4026532804]" dev="nsfs" ino=4026532804 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 226.799086][ T5694] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 226.970960][ T30] audit: type=1400 audit(1787529330.776:550): avc: denied { mount } for pid=6916 comm="syz.0.267" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 227.041321][ T5694] usb 4-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 227.092276][ T30] audit: type=1400 audit(1787529330.896:551): avc: denied { connect } for pid=6918 comm="syz.2.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 227.140829][ T5694] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 227.182087][ T5694] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 227.219446][ T30] audit: type=1400 audit(1787529330.916:552): avc: denied { ioctl } for pid=6918 comm="syz.2.268" path="/dev/nullb0" dev="devtmpfs" ino=694 ioctlcmd=0xf509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 227.288060][ T5818] kernel write not supported for file /tomoyo/domain_policy (pid: 5818 comm: kworker/0:9) [ 227.309208][ T5694] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.321583][ T5694] usb 4-1: Product: syz [ 227.342002][ T5694] usb 4-1: Manufacturer: syz [ 227.358443][ T30] audit: type=1400 audit(1787529330.946:553): avc: denied { map } for pid=6918 comm="syz.2.268" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 227.386110][ T5829] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 227.397546][ T5694] usb 4-1: SerialNumber: syz [ 227.444627][ T6913] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 227.522030][ T6913] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 227.534258][ T30] audit: type=1400 audit(1787529330.956:554): avc: denied { execute } for pid=6918 comm="syz.2.268" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 227.619987][ T5829] usb 5-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 227.683234][ T5829] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 227.703286][ T5694] usbserial_generic 4-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 227.730557][ T5829] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 227.769284][ T5694] usbserial_generic 4-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 227.794121][ T5829] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 227.813210][ T5694] usbserial_generic 4-1:1.0: generic converter detected [ 227.826860][ T5829] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.853660][ T6930] PKCS7: Unsupported SignerInfo version [ 227.863290][ T5694] usb 4-1: generic converter now attached to ttyUSB0 [ 227.966683][ T5829] usb 5-1: config 0 descriptor?? [ 228.308273][ T6921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.396888][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 228.429189][ T6921] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.841680][ T5733] usb 5-1: USB disconnect, device number 14 [ 229.766587][ T5829] usb 4-1: USB disconnect, device number 14 [ 229.876351][ T5829] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 229.954082][ T5829] usbserial_generic 4-1:1.0: device disconnected [ 231.692480][ T30] audit: type=1400 audit(1787529335.496:555): avc: denied { unmount } for pid=5602 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 232.218052][ T6945] 9p: Bad value for 'wfdno' [ 232.519898][ T9] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 232.893297][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 232.952939][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 233.117250][ T9] usb 5-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 233.270562][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 233.359932][ T9] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 233.439173][ T9] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 233.510311][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.532562][ T9] usb 5-1: Product: syz [ 233.546544][ T9] usb 5-1: Manufacturer: syz [ 233.561847][ T9] usb 5-1: SerialNumber: syz [ 233.975523][ T9] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 234.427313][ T30] audit: type=1400 audit(1787529337.886:556): avc: denied { map } for pid=6950 comm="syz.1.277" path="socket:[11060]" dev="sockfs" ino=11060 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 234.483684][ T9] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 234.608992][ T30] audit: type=1400 audit(1787529338.406:557): avc: denied { connect } for pid=6941 comm="syz.4.276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 234.664371][ T9] usb 5-1: 2:1 : can't get High Capability descriptor [ 235.432762][ T6972] syzkaller0: entered promiscuous mode [ 235.459707][ T6972] syzkaller0: entered allmulticast mode [ 235.540903][ T30] audit: type=1400 audit(1787529339.346:558): avc: denied { setopt } for pid=6970 comm="syz.2.281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 235.644644][ T30] audit: type=1400 audit(1787529339.406:559): avc: denied { write } for pid=6970 comm="syz.2.281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 236.006558][ T9] usb 5-1: USB disconnect, device number 15 [ 236.172269][ T6979] netlink: 20 bytes leftover after parsing attributes in process `syz.1.283'. [ 236.182033][ T6979] netlink: 16 bytes leftover after parsing attributes in process `syz.1.283'. [ 239.335234][ T6998] trusted_key: encrypted_key: key trusted:syz not found [ 239.859691][ T30] audit: type=1400 audit(1787529343.086:560): avc: denied { sqpoll } for pid=6994 comm="syz.3.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 240.290795][ T5610] Bluetooth: hci0: unexpected event for opcode 0x2041 [ 240.319039][ T30] audit: type=1400 audit(1787529344.116:561): avc: denied { mount } for pid=7003 comm="syz.1.289" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 240.767878][ T5694] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 240.953447][ T5694] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 241.034979][ T5694] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.065005][ T5694] usb 1-1: Product: syz [ 241.090957][ T5694] usb 1-1: Manufacturer: syz [ 241.126571][ T5694] usb 1-1: SerialNumber: syz [ 241.427984][ T5694] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 241.482507][ T5694] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 241.543860][ T5694] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 242.457524][ C1] sched: DL replenish lagged too much [ 242.832842][ T7020] netlink: 'syz.1.295': attribute type 21 has an invalid length. [ 242.967790][ T5694] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 243.301495][ T5694] usb 1-1: USB disconnect, device number 18 [ 243.530116][ T30] audit: type=1400 audit(1787529347.336:562): avc: denied { create } for pid=7021 comm="syz.0.296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 243.677060][ T30] audit: type=1400 audit(1787529347.466:563): avc: denied { ioctl } for pid=7023 comm="syz.3.297" path="socket:[13338]" dev="sockfs" ino=13338 ioctlcmd=0x9361 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 243.779135][ T7031] netlink: 8 bytes leftover after parsing attributes in process `syz.0.296'. [ 243.877405][ T30] audit: type=1400 audit(1787529347.676:564): avc: denied { sys_admin } for pid=7021 comm="syz.0.296" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 244.041533][ T30] audit: type=1400 audit(1787529347.716:565): avc: denied { read write } for pid=7032 comm="syz.2.299" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 244.141395][ T7031] gretap0: entered promiscuous mode [ 244.252996][ T7038] netlink: 'syz.2.299': attribute type 2 has an invalid length. [ 244.306843][ T7031] macvlan2: entered allmulticast mode [ 244.312438][ T30] audit: type=1400 audit(1787529347.716:566): avc: denied { open } for pid=7032 comm="syz.2.299" path="/dev/dri/renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 244.312528][ T30] audit: type=1400 audit(1787529348.036:567): avc: denied { create } for pid=7032 comm="syz.2.299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 244.312582][ T30] audit: type=1400 audit(1787529348.036:568): avc: denied { listen } for pid=7032 comm="syz.2.299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 244.312643][ T30] audit: type=1400 audit(1787529348.066:569): avc: denied { connect } for pid=7032 comm="syz.2.299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 244.668650][ T7031] gretap0: entered allmulticast mode [ 247.347413][ T7065] PKCS7: Unknown OID: [83] 2.16.840.17.101.3.4.2.1 [ 247.446333][ T7065] Unsupported digest algo: 106 [ 248.030170][ T7073] netlink: 'syz.4.309': attribute type 21 has an invalid length. [ 255.676737][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 255.676784][ T30] audit: type=1400 audit(1787529359.476:571): avc: denied { ioctl } for pid=7079 comm="syz.1.311" path="socket:[13446]" dev="sockfs" ino=13446 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 256.316900][ T7090] bond0: (slave erspan0): Error: Device can not be enslaved while up [ 256.799337][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.811448][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.958393][ T7097] netlink: 12 bytes leftover after parsing attributes in process `syz.4.314'. [ 259.198865][ T5611] Bluetooth: hci2: command 0x0406 tx timeout [ 260.417815][ T9] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 261.035768][ T30] audit: type=1400 audit(1787529364.836:572): avc: denied { unmount } for pid=5599 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 261.492166][ T30] audit: type=1400 audit(1787529365.296:573): avc: denied { watch watch_reads } for pid=7110 comm="syz.0.318" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=34 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 261.560064][ T5694] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 261.606636][ T30] audit: type=1400 audit(1787529365.406:574): avc: denied { ioctl } for pid=7110 comm="syz.0.318" path="socket:[13523]" dev="sockfs" ino=13523 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 261.759270][ T5694] usb 5-1: New USB device found, idVendor=0471, idProduct=0329, bcdDevice= 1.00 [ 261.839859][ T5694] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 261.907910][ T5694] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 261.944555][ T5694] usb 5-1: Product: syz [ 262.183735][ T5694] usb 5-1: Manufacturer: syz [ 264.973424][ T5694] pwc: Philips SPC 900NC USB webcam detected. [ 265.497393][ T5694] pwc: Failed to set LED on/off time (-71) [ 265.571714][ T5694] pwc: send_video_command error -71 [ 265.632247][ T5694] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 265.721018][ T5694] Philips webcam 5-1:1.0: probe with driver Philips webcam failed with error -71 [ 265.862664][ T5694] usb 5-1: USB disconnect, device number 16 [ 319.297631][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 319.309782][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.713137][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 380.968583][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 395.044524][ T4963] udevd[4963]: worker [7123] /devices/virtual/block/loop4 is taking a long time [ 401.992197][ T4963] udevd[4963]: worker [7101] /devices/platform/dummy_hcd.4/usb5/5-1 is taking a long time [ 441.749849][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 444.632011][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 505.119134][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 505.131303][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 521.097387][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 521.104384][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P7130/1:b..l [ 521.113280][ C1] rcu: (detected by 1, t=10502 jiffies, g=25489, q=3229 ncpus=2) [ 521.121100][ C1] task:syz-executor state:R running task stack:28232 pid:7130 tgid:7130 ppid:5594 task_flags:0x400040 flags:0x00080002 [ 521.136301][ C1] Call Trace: [ 521.139618][ C1] [ 521.142561][ C1] __schedule+0x1259/0x6920 [ 521.147095][ C1] ? find_held_lock+0x2b/0x80 [ 521.151793][ C1] ? is_bpf_text_address+0x8a/0x1a0 [ 521.157018][ C1] ? __pfx___schedule+0x10/0x10 [ 521.161889][ C1] ? mark_held_locks+0x40/0x70 [ 521.166682][ C1] preempt_schedule_irq+0x4e/0x90 [ 521.171729][ C1] irqentry_exit+0x205/0xa10 [ 521.176336][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 521.182328][ C1] RIP: 0010:kasan_byte_accessible+0x15/0x30 [ 521.188229][ C1] Code: 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 b8 00 00 00 00 00 fc ff df 48 c1 ef 03 48 01 c7 <0f> b6 07 3c 07 0f 96 c0 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 [ 521.207849][ C1] RSP: 0018:ffffc900059477d8 EFLAGS: 00000282 [ 521.213933][ C1] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000002 [ 521.221919][ C1] RDX: 0000000000000000 RSI: ffffffff8288a4bb RDI: fffffbfff1dbd3a8 [ 521.229908][ C1] RBP: ffffffff8ede9d40 R08: 0000000000000000 R09: 0000000000000000 [ 521.237880][ C1] R10: 0000000004900465 R11: 0000000000000001 R12: ffffffff8288a4bb [ 521.245849][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 521.253835][ C1] ? __update_page_owner_free_handle.isra.0+0x4b/0x4b0 [ 521.260719][ C1] ? __update_page_owner_free_handle.isra.0+0x4b/0x4b0 [ 521.267581][ C1] __kasan_check_byte+0x13/0x50 [ 521.272485][ C1] lock_acquire+0x132/0x370 [ 521.277021][ C1] ? kasan_quarantine_reduce+0x1a0/0x1f0 [ 521.282655][ C1] ? __kasan_slab_alloc+0x69/0x90 [ 521.287682][ C1] ? __kmalloc_noprof+0x2c1/0x820 [ 521.292972][ C1] ? tomoyo_realpath_from_path+0xb6/0x690 [ 521.298690][ C1] ? tomoyo_path_perm+0x276/0x460 [ 521.303719][ C1] ? tomoyo_path_symlink+0x97/0xe0 [ 521.308833][ C1] __update_page_owner_free_handle.isra.0+0x4b/0x4b0 [ 521.315530][ C1] ? __update_page_owner_free_handle.isra.0+0x3a/0x4b0 [ 521.322399][ C1] ? page_ext_put+0x3e/0xd0 [ 521.326930][ C1] __reset_page_owner+0x93/0x190 [ 521.331869][ C1] __free_frozen_pages+0x79f/0x10f0 [ 521.337106][ C1] ? __free_slab+0xd0/0x220 [ 521.341626][ C1] qlist_free_all+0x47/0xf0 [ 521.346141][ C1] kasan_quarantine_reduce+0x1a0/0x1f0 [ 521.351605][ C1] __kasan_slab_alloc+0x69/0x90 [ 521.356478][ C1] __kmalloc_noprof+0x2c1/0x820 [ 521.361357][ C1] ? rcu_is_watching+0x13/0xc0 [ 521.366148][ C1] ? tomoyo_realpath_from_path+0xb6/0x690 [ 521.371911][ C1] tomoyo_realpath_from_path+0xb6/0x690 [ 521.377506][ C1] tomoyo_path_perm+0x276/0x460 [ 521.382369][ C1] ? tomoyo_path_perm+0x262/0x460 [ 521.387410][ C1] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 521.392790][ C1] ? find_held_lock+0x2b/0x80 [ 521.397478][ C1] ? _raw_spin_unlock+0x28/0x50 [ 521.402371][ C1] ? simple_lookup+0xfc/0x1d0 [ 521.407063][ C1] ? lookup_one_qstr_excl+0xaf/0x250 [ 521.412354][ C1] tomoyo_path_symlink+0x97/0xe0 [ 521.417293][ C1] ? __pfx_tomoyo_path_symlink+0x10/0x10 [ 521.422933][ C1] security_path_symlink+0x152/0x2d0 [ 521.428229][ C1] filename_symlinkat+0x122/0x560 [ 521.433258][ C1] ? __pfx_filename_symlinkat+0x10/0x10 [ 521.438809][ C1] ? strncpy_from_user+0x19d/0x2d0 [ 521.443958][ C1] ? do_getname+0x191/0x390 [ 521.448493][ C1] __x64_sys_symlinkat+0x9c/0xe0 [ 521.453444][ C1] do_syscall_64+0x123/0x790 [ 521.458044][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.463937][ C1] RIP: 0033:0x7fae5539d197 [ 521.468359][ C1] RSP: 002b:00007ffc32edf218 EFLAGS: 00000206 ORIG_RAX: 000000000000010a [ 521.476772][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fae5539d197 [ 521.484742][ C1] RDX: 00007fae55435fdd RSI: 00000000ffffff9c RDI: 00007ffc32edf2b0 [ 521.492718][ C1] RBP: 00007ffc32edf25c R08: 0000000000000001 R09: 00000000ffffffff [ 521.500703][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000000003d [ 521.508674][ C1] R13: 0000555561d9aa10 R14: 000000000003fc98 R15: 00007ffc32edf2b0 [ 521.516662][ C1] [ 521.519693][ C1] rcu: rcu_preempt kthread starved for 1606 jiffies! g25489 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 521.530801][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 521.540869][ C1] rcu: RCU grace-period kthread stack dump: [ 521.546775][ C1] task:rcu_preempt state:R running task stack:28072 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 521.560314][ C1] Call Trace: [ 521.563607][ C1] [ 521.566546][ C1] __schedule+0x1259/0x6920 [ 521.571083][ C1] ? __pfx___schedule+0x10/0x10 [ 521.575946][ C1] ? find_held_lock+0x2b/0x80 [ 521.580648][ C1] ? schedule+0x225/0x2c0 [ 521.584995][ C1] schedule+0xdd/0x2c0 [ 521.589164][ C1] schedule_timeout+0x127/0x280 [ 521.594042][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 521.599442][ C1] ? __pfx_process_timeout+0x10/0x10 [ 521.604756][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 521.610577][ C1] ? prepare_to_swait_event+0xdf/0x4a0 [ 521.616093][ C1] rcu_gp_fqs_loop+0x1a9/0x900 [ 521.620902][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 521.626207][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 521.631171][ C1] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 521.636474][ C1] rcu_gp_kthread+0x179/0x230 [ 521.641165][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 521.646368][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 521.652200][ C1] ? __kthread_parkme+0x18f/0x230 [ 521.657239][ C1] ? kthread+0x13a/0x450 [ 521.661484][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 521.666696][ C1] kthread+0x373/0x450 [ 521.670786][ C1] ? __pfx_kthread+0x10/0x10 [ 521.675387][ C1] ret_from_fork+0x730/0xd60 [ 521.679987][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 521.685101][ C1] ? __switch_to+0x800/0x10f0 [ 521.689786][ C1] ? __pfx_kthread+0x10/0x10 [ 521.694380][ C1] ret_from_fork_asm+0x1a/0x30 [ 521.699182][ C1] [ 521.702196][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 521.708519][ C1] CPU: 1 UID: 0 PID: 6449 Comm: kworker/u8:14 Not tainted syzkaller #0 PREEMPT(full) [ 521.718058][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 521.728125][ C1] Workqueue: wg-kex-wg2 wg_packet_handshake_send_worker [ 521.735266][ C1] RIP: 0010:__orc_find+0x49/0xf0 [ 521.740216][ C1] Code: 00 49 89 fe 48 89 f0 49 39 fc 72 7b 48 b9 00 00 00 00 00 fc ff df 49 89 ff 48 89 fd eb 0c 48 8d 6b 04 49 89 df 49 39 ec 72 4e <4c> 89 e2 48 29 ea 48 89 d6 48 c1 ea 3f 48 c1 fe 02 48 01 f2 48 d1 [ 521.759871][ C1] RSP: 0018:ffffc90000a080c0 EFLAGS: 00000202 [ 521.765987][ C1] RAX: ffffffff91f5d97a RBX: ffffffff9167219c RCX: dffffc0000000000 [ 521.773966][ C1] RDX: ffffffff827dbc65 RSI: 0000000000000000 RDI: ffffffff91672178 [ 521.782037][ C1] RBP: ffffffff91672178 R08: ffffffff91f5d9f2 R09: 0000000000000007 [ 521.790022][ C1] R10: 0000000000000200 R11: 0000000000017dbc R12: ffffffff91672198 [ 521.798005][ C1] R13: ffffffff827dbc2e R14: ffffffff91672178 R15: ffffffff91672178 [ 521.806074][ C1] FS: 0000000000000000(0000) GS:ffff888123c88000(0000) knlGS:0000000000000000 [ 521.815015][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 521.821603][ C1] CR2: 00007fae553aed40 CR3: 0000000075894000 CR4: 00000000003526f0 [ 521.829575][ C1] Call Trace: [ 521.832851][ C1] [ 521.835698][ C1] ? __kasan_slab_free+0x5e/0x80 [ 521.840648][ C1] unwind_next_frame+0x2ec/0x2090 [ 521.845677][ C1] ? __kasan_slab_free+0x5f/0x80 [ 521.850623][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 521.856779][ C1] arch_stack_walk+0x94/0xf0 [ 521.861376][ C1] ? __kasan_slab_free+0x5f/0x80 [ 521.866328][ C1] ? skb_free_head+0xb9/0x160 [ 521.871021][ C1] stack_trace_save+0x8e/0xc0 [ 521.875700][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 521.881085][ C1] ? __lock_acquire+0x4c5/0x1ec0 [ 521.886047][ C1] ? ip_finish_output2+0x892/0x2400 [ 521.891256][ C1] kasan_save_stack+0x30/0x50 [ 521.895942][ C1] ? kasan_save_stack+0x30/0x50 [ 521.900798][ C1] ? kasan_save_track+0x14/0x30 [ 521.905658][ C1] ? kasan_save_free_info+0x3b/0x70 [ 521.910858][ C1] ? __kasan_slab_free+0x5f/0x80 [ 521.915834][ C1] kasan_save_track+0x14/0x30 [ 521.920514][ C1] kasan_save_free_info+0x3b/0x70 [ 521.925538][ C1] __kasan_slab_free+0x5f/0x80 [ 521.930310][ C1] ? skb_free_head+0x90/0x160 [ 521.934993][ C1] kfree+0x22b/0x6c0 [ 521.938893][ C1] skb_free_head+0xb9/0x160 [ 521.943399][ C1] skb_release_data+0x6c5/0x8e0 [ 521.948263][ C1] consume_skb+0xc4/0x110 [ 521.952604][ C1] nft_synproxy_do_eval+0xa24/0xce0 [ 521.957810][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 521.963543][ C1] ? __pfx_nft_synproxy_eval+0x10/0x10 [ 521.969013][ C1] nft_do_chain+0x2e5/0x19d0 [ 521.973612][ C1] ? lock_acquire+0x1b9/0x370 [ 521.978300][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 521.983335][ C1] ? mark_held_locks+0x40/0x70 [ 521.988110][ C1] ? __local_bh_enable_ip+0xa5/0x120 [ 521.993430][ C1] ? __local_bh_enable_ip+0xa5/0x120 [ 521.998720][ C1] ? lockdep_hardirqs_on+0x7d/0x110 [ 522.003935][ C1] nft_do_chain_inet+0xf3/0x400 [ 522.008790][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 522.014251][ C1] ? __pfx_ipt_do_table+0x10/0x10 [ 522.019285][ C1] ? nf_nat_ipv4_local_in+0x181/0x730 [ 522.024661][ C1] nf_hook_slow+0xbf/0x220 [ 522.029083][ C1] nf_hook.constprop.0+0x2a6/0x750 [ 522.034203][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 522.040184][ C1] ? __pfx_nf_hook.constprop.0+0x10/0x10 [ 522.045824][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 522.050940][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 522.056924][ C1] ? ip_rcv_finish_core+0x7ec/0x2c30 [ 522.062215][ C1] ip_local_deliver+0x163/0x1f0 [ 522.067072][ C1] ? __pfx_ip_local_deliver+0x10/0x10 [ 522.072446][ C1] ip_rcv+0x33a/0x3c0 [ 522.076431][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 522.080938][ C1] __netif_receive_skb_one_core+0x197/0x1e0 [ 522.086840][ C1] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 522.093267][ C1] ? lock_acquire+0x1b9/0x370 [ 522.097977][ C1] ? process_backlog+0x437/0x1600 [ 522.103012][ C1] ? process_backlog+0x437/0x1600 [ 522.108044][ C1] __netif_receive_skb+0x1f/0x120 [ 522.113108][ C1] process_backlog+0x487/0x1600 [ 522.117993][ C1] __napi_poll.constprop.0+0xaf/0x450 [ 522.123373][ C1] net_rx_action+0xa40/0xf20 [ 522.127970][ C1] ? lock_acquire+0x1b9/0x370 [ 522.132658][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 522.137778][ C1] ? sched_balance_domains+0x2d0/0xb80 [ 522.143257][ C1] ? mark_held_locks+0x40/0x70 [ 522.148033][ C1] handle_softirqs+0x1e6/0x9d0 [ 522.152815][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 522.158115][ C1] ? kernel_fpu_end+0x5f/0x80 [ 522.162798][ C1] do_softirq+0xaf/0xf0 [ 522.166957][ C1] [ 522.169909][ C1] [ 522.172833][ C1] __local_bh_enable_ip+0xff/0x120 [ 522.177953][ C1] kernel_fpu_end+0x64/0x80 [ 522.182458][ C1] blake2s_compress+0x78/0xf0 [ 522.187145][ C1] blake2s_update+0xef/0x320 [ 522.191742][ C1] hmac.constprop.0+0x33f/0x480 [ 522.196609][ C1] ? __pfx_hmac.constprop.0+0x10/0x10 [ 522.202019][ C1] ? irq_fpu_usable+0x83/0xb0 [ 522.206709][ C1] ? lockdep_hardirqs_on+0x7d/0x110 [ 522.211915][ C1] ? kernel_fpu_end+0x5f/0x80 [ 522.216598][ C1] ? __local_bh_enable_ip+0xa5/0x120 [ 522.221897][ C1] ? kernel_fpu_end+0x69/0x80 [ 522.226583][ C1] kdf.constprop.0+0x209/0x280 [ 522.231357][ C1] ? __pfx_kdf.constprop.0+0x10/0x10 [ 522.236642][ C1] ? __pfx_mix_hash+0x10/0x10 [ 522.241335][ C1] ? __crypto_memneq+0x1fe/0x430 [ 522.246278][ C1] wg_noise_handshake_create_initiation+0x406/0x610 [ 522.252882][ C1] ? __pfx_wg_noise_handshake_create_initiation+0x10/0x10 [ 522.260005][ C1] ? ktime_get_coarse_with_offset+0x1af/0x240 [ 522.266080][ C1] ? lockdep_hardirqs_on+0x7d/0x110 [ 522.271294][ C1] ? ktime_get_coarse_with_offset+0x1c1/0x240 [ 522.277366][ C1] ? ktime_get_coarse_with_offset+0x150/0x240 [ 522.283444][ C1] wg_packet_send_handshake_initiation+0x19c/0x360 [ 522.289962][ C1] ? __pfx_wg_packet_send_handshake_initiation+0x10/0x10 [ 522.297004][ C1] ? __lock_acquire+0x4c5/0x1ec0 [ 522.301960][ C1] ? process_one_work+0x906/0x1b10 [ 522.307079][ C1] ? process_one_work+0x906/0x1b10 [ 522.312202][ C1] wg_packet_handshake_send_worker+0x1c/0x30 [ 522.318204][ C1] process_one_work+0xac7/0x1b10 [ 522.323176][ C1] ? __pfx_process_one_work+0x10/0x10 [ 522.328579][ C1] ? __pfx_wg_packet_handshake_send_worker+0x10/0x10 [ 522.335360][ C1] worker_thread+0x5ef/0xe50 [ 522.339979][ C1] ? kthread+0x13a/0x450 [ 522.344224][ C1] ? __pfx_worker_thread+0x10/0x10 [ 522.349340][ C1] kthread+0x373/0x450 [ 522.353417][ C1] ? __pfx_kthread+0x10/0x10 [ 522.358018][ C1] ret_from_fork+0x730/0xd60 [ 522.362605][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 522.367713][ C1] ? __switch_to+0x800/0x10f0 [ 522.372396][ C1] ? __pfx_kthread+0x10/0x10 [ 522.376990][ C1] ret_from_fork_asm+0x1a/0x30 [ 522.381764][ C1]