last executing test programs: 11.244091909s ago: executing program 4 (id=361): socket$kcm(0x10, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000300)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f0000000080)=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r3, &(0x7f0000000380)="0099", &(0x7f0000000480)=@udp6=r1, 0x2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x5, 0xe, 0x0, &(0x7f00000003c0)="000000000000000000000001e370", 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 10.794617985s ago: executing program 4 (id=364): r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r1 = dup(r0) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x1, 0x470bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r5, 0x64e10, 0x36a01}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_PROXYARP_WIFI={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c080}, 0x8002) (async) r6 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0xb05, 0x1807, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x33, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) syz_usb_control_io(r6, 0x0, 0x0) (async) syz_usb_control_io$hid(r6, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x7, "a4"}]}}, 0x0}, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x5c, 0x0, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xdab9}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000040) (async, rerun: 32) r7 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000006c0)=@ipv6_getaddr={0x2c, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x2c}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r8) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="f5af24bd7000000002000e000000080003"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x700) (async) read$FUSE(r1, &(0x7f0000000400)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newlink={0x50, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x2000, 0x21018}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x34}}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x80) (async) fcntl$setownex(r2, 0xf, &(0x7f0000000080)={0x0, r10}) (async) syz_io_uring_setup(0x53de, &(0x7f0000000380)={0x0, 0x64fa, 0x400, 0xfffffffe, 0x1eb, 0x0, r1}, &(0x7f0000000180), &(0x7f00000002c0)) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$HIDIOCGNAME(r1, 0x80404806, &(0x7f0000000000)) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r12, 0x8946, &(0x7f00000000c0)={'bridge0\x00', &(0x7f0000000300)=@ethtool_link_settings={0x4c, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x0, 0xffffffff, 0xfffffffe, 0x1]}}) 9.810184019s ago: executing program 4 (id=367): ioctl$CEC_S_MODE(0xffffffffffffffff, 0x40046109, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1a1) mount$afs(0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0) chdir(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfec8d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 9.719085387s ago: executing program 0 (id=368): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b", 0x7}], 0x1}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', &(0x7f0000000200)=@ethtool_sset_info={0x1e, 0x0, 0x101}}) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r1, &(0x7f0000000780)='^', 0x1, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r1, 0xda90) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) syz_emit_ethernet(0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffaaaa8864abaa00fafd27a78863b17b9dc4a9e252310369d74660749332e8f21eb28c1230d6a5d535cf23c8e4b4a7feb838ea4fc8a301bf6c2cc9045d3f2de146f3d09ef2ecdb801bbb18ddfcbd9dc2c1e5f14d99310c932dd6a149c2e5c1afb8abb7524e6ba7e3d7e6f4a34654d2486c4336bf1cb3a9b78e3b38632176"], 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0x5, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) setitimer(0x2, 0x0, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x2a3f, 0x0) close_range(r5, r5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) accept4(r1, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) io_setup(0x9, &(0x7f0000000b80)=0x0) io_submit(r7, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x2}]) io_cancel(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x8000000000000001, 0x0, 0x2}, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x40045b17, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) 9.583002147s ago: executing program 1 (id=369): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) fspick(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0\x00', 0x0) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x29, 0xfffffffe, 0x0, 0x0, 0x40, 0x2, 0x0, 0x0, 0x0, 0x10, 0x66}}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14008051}}, {{&(0x7f00000000c0)=@file={0x1, './file0/file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x3ec0, 0x40080}}], 0x2, 0x0) syz_fuse_handle_req(r0, &(0x7f0000006280)="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", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x90, 0x0, 0x8, {0x1, 0xfffffffffffffffd, 0x1ffc, 0x1ffff, 0x6, 0x84, {0x4, 0x25, 0x7, 0x80000000, 0x4, 0xffff, 0x7d59, 0x8, 0x4, 0xc000, 0x7f, r2, r3, 0xcb, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) 9.215783394s ago: executing program 1 (id=372): socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r0 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x635c, 0x1f480, 0x0, 0x399}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000006080)=@newtfilter={0x18c8, 0x2c, 0xd27, 0x8030bd29, 0x2, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xa}, {}, {0x9}}, [@filter_kind_options=@f_fw={{0x7}, {0x189c, 0x2, [@TCA_FW_ACT={0x4}, @TCA_FW_ACT={0x1894, 0x4, [@m_police={0x1240, 0x3, 0x0, 0x0, {{0xb}, {0x11a4, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xc, 0x8, 0x80000001}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x1, 0x8, 0x5, 0x200, {0xc3, 0x2, 0xe331, 0x81, 0x2b, 0x2}, {0x1, 0x0, 0x401, 0xe9b, 0xd}, 0x2, 0x6, 0x8}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7ff}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0xc, 0x1000, 0x8, 0x8, 0x9, 0x1, 0x187, 0xffffffff, 0x31, 0xab4, 0xd3, 0x7, 0xe33, 0x7, 0x7, 0xfff, 0xc63, 0x40, 0x2, 0xd, 0x2, 0x7, 0x6, 0x5, 0x9, 0xe, 0x1, 0x80000001, 0x5, 0xb, 0x7, 0x9, 0x4, 0x80000000, 0x1, 0x7, 0x1, 0x80000001, 0xffffffff, 0x8, 0x5, 0xfffffffb, 0x1, 0x3, 0x9, 0x4, 0x526a, 0x8001, 0x5, 0x6, 0x61f, 0x1, 0xfffffffa, 0xfffffe00, 0x2, 0x66, 0xfff, 0x2f, 0xffff, 0x1000, 0xffff, 0x9, 0x9, 0x9, 0x2, 0x9, 0x4, 0xdcb, 0xd, 0x8, 0xffffffff, 0x8, 0x6, 0x5, 0x2, 0x5, 0x40, 0x3, 0x8, 0x80000001, 0x6, 0x2, 0x36e, 0x5, 0x80000001, 0x8, 0x5, 0xb3, 0xfffffff7, 0x6, 0x34f, 0x0, 0x1, 0x9aa, 0x10, 0x4, 0x3, 0x8, 0x9, 0x81, 0xf, 0x80, 0x6, 0x8, 0x0, 0x5, 0x5, 0x8001, 0x4, 0x0, 0xe, 0x9, 0x5, 0xedb8, 0x10000, 0xf4, 0x1000, 0x4, 0x4, 0x4, 0x8, 0x0, 0x16d, 0xfffffffc, 0x3, 0x9000, 0x6, 0x10001, 0x5, 0x6, 0xa5e, 0xcf, 0x5, 0x6, 0x6eaf, 0x0, 0x0, 0x5, 0xd36, 0xc19, 0x4, 0x3, 0x2, 0x400, 0xb8, 0x1ff, 0x9, 0x1, 0x1, 0x0, 0x8, 0x5, 0x4, 0x0, 0x1, 0xc263, 0x7, 0xc, 0x3, 0x8, 0x9, 0x6, 0x81, 0x5, 0x3, 0x2, 0x9, 0xe65c, 0x3, 0x8, 0x3, 0xf, 0x80000001, 0xfff, 0x53a, 0x3, 0x2, 0xc00000, 0x7c85, 0x1, 0x3, 0xfff, 0x8, 0x9, 0x2, 0xbaa4, 0x3ff, 0x7f, 0x7, 0xd91, 0x101, 0x1003a4d9, 0x32e4, 0x6, 0x5, 0x7, 0x3, 0x8000, 0x10, 0x0, 0x8, 0xfffeffff, 0x8, 0x4, 0x0, 0x8, 0xee3, 0x2, 0x10000, 0x5, 0x7, 0xfffffffc, 0x1, 0x1, 0x6, 0x81, 0xe0, 0x3, 0x3, 0x5, 0x6, 0x3, 0xae, 0x9, 0x6, 0x3, 0x5, 0x1, 0x4, 0x6, 0x0, 0x5, 0x3, 0x3ff, 0xba4f, 0x0, 0x4, 0x3, 0x4, 0xbe, 0x7, 0x0, 0x101, 0x4, 0x2c8f, 0x1ff, 0x489f9a93, 0x7, 0x2, 0x9, 0xffffff90, 0x80, 0xd, 0x5, 0x5]}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x101}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x1, 0x9, 0xa4ea, 0x200, 0x2, 0x9, 0x7, 0x1, 0x7, 0x10000, 0xfff, 0x5, 0x8000, 0x4, 0xc209, 0x1, 0x4e14194b, 0x9, 0xfffffffa, 0x3, 0x4, 0xfffffffc, 0x6, 0x4, 0x5, 0x8, 0x4, 0x95b, 0x2, 0x0, 0x3, 0x9, 0x8, 0x5, 0x194f, 0xbf6, 0xe6c5, 0x5, 0xf, 0xffffff81, 0x5, 0x2, 0xd, 0x7ff, 0x7, 0xfff, 0x2, 0xfffffffa, 0x81, 0x54c, 0x8, 0x91, 0x8, 0x7, 0x1, 0x101, 0x7, 0xa9, 0x5, 0x7, 0x4, 0x3, 0x10001, 0x16c00000, 0x1, 0x3, 0x8, 0xc, 0xb, 0x81, 0x4, 0x3, 0x0, 0x10001, 0x7, 0x5, 0x80000000, 0x101, 0x5, 0xb, 0x380, 0x6, 0x1, 0xea6, 0x400, 0x4, 0x1, 0xe, 0x7, 0xfff, 0x9, 0x5, 0x2, 0x8, 0x89df, 0x9, 0x7, 0x56, 0x6, 0x65b, 0x8, 0x7ff, 0x9, 0x100, 0x1ff, 0x1ff, 0x7, 0x5, 0x8001, 0x0, 0x7, 0x0, 0x1e, 0x800, 0x2, 0x10, 0x2, 0x8f, 0x8, 0x6, 0x1, 0x9, 0x34, 0x6, 0x3, 0x400, 0xf22, 0xa, 0x7ff, 0x5, 0xfffffff7, 0x22, 0x2, 0x10, 0x8, 0x9, 0x6, 0x4, 0x9, 0xf, 0xfffff800, 0x4, 0x10, 0x9, 0x0, 0x1ff, 0x9, 0x7, 0x8, 0x7, 0x92, 0x200, 0x4, 0xc, 0x6, 0x2, 0x4, 0x2a9, 0x7, 0x8, 0x3, 0x101, 0x10000, 0x3, 0xe, 0x3, 0x6, 0x6, 0x1, 0x0, 0x7, 0x0, 0x3, 0x32a2, 0x4, 0xfb8, 0x1be0, 0xd, 0x916, 0x24, 0xfffffffa, 0x1, 0x200, 0x101, 0x7, 0x6, 0xfffffffb, 0x1, 0x6, 0x6, 0x0, 0x10000, 0x0, 0x7ff, 0x0, 0x3, 0x6, 0x8, 0x1, 0x9, 0x72f, 0x7, 0x1, 0xb, 0x1, 0xcab, 0x800, 0x10, 0x10000, 0x6, 0x8, 0xda0, 0x2, 0x4, 0x7, 0x6, 0x1, 0x8, 0x2, 0x81, 0x81, 0x4, 0x2f9, 0xf46, 0x800, 0x80000000, 0x80f0, 0x4, 0x8, 0x3, 0x10001, 0x371, 0x5, 0xfd, 0xa, 0xe217, 0x6, 0x7fffffff, 0x9, 0x6, 0x3, 0x80, 0x4, 0x7, 0x6, 0xa, 0x7, 0x2, 0x6, 0x3ae8, 0x1, 0xea, 0x3, 0x0, 0x3ff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xf, 0x10000000, 0x7, 0x7, 0x38d7, {0x71, 0x2, 0x2, 0x9, 0xc3a0, 0xd32f}, {0xb, 0x1, 0x4, 0x46, 0x1000, 0xfffffffe}, 0xb, 0xa0c5, 0x9}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x1, 0x9, 0xff, 0x0, {0x7, 0x1, 0x8fa, 0xbd, 0x9, 0x3}, {0x8, 0x0, 0x9533, 0x3, 0x64f5, 0x3}, 0x7, 0x5, 0x1}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x10000000, 0x6, 0x6, 0x8, {0x5, 0x2, 0x8, 0x7fff, 0x7, 0x273}, {0x8, 0x0, 0x7, 0x13, 0x7, 0x8}, 0x5fa, 0x5, 0x3}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x10001}], [@TCA_POLICE_RATE64={0xc, 0x8, 0xfffffffffffffffc}, @TCA_POLICE_RATE={0x404, 0x2, [0x5db1, 0x5, 0xe7a9, 0x0, 0x1ff, 0xe, 0x1, 0x9, 0x700000, 0x2, 0xfc1d, 0x400, 0x9, 0x6, 0x1, 0x979, 0x3, 0x7, 0x502, 0x1, 0x9, 0x9, 0x0, 0x8000, 0x3, 0x50d, 0x3, 0x7, 0x1000, 0x3, 0x42, 0x6, 0x7fff, 0xd7, 0x2, 0x0, 0xe137, 0x9, 0x0, 0xffffc5de, 0xff, 0x5, 0x7, 0x9, 0xf, 0x1000, 0x7, 0xfd04, 0x7, 0x7d5, 0x1, 0x4, 0x2, 0x5, 0x9c0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x3ff, 0x4, 0x0, 0xd84a, 0x87, 0xfffffff9, 0x1, 0x4, 0x6, 0x6, 0x9, 0xc, 0xffff13b1, 0x5, 0x10000, 0x4, 0x8, 0x3f, 0x2, 0xfffffc00, 0xfffffbff, 0xf56a, 0x1ff, 0x0, 0x0, 0x5, 0x1, 0x6, 0x8, 0x1, 0x9, 0x5, 0xfffff0fb, 0xe, 0x7, 0x2, 0x8, 0xb16, 0x2, 0x3, 0xc54, 0x4, 0x6, 0x2, 0x9804, 0xfffffffd, 0x9, 0x7fff, 0x5, 0x5, 0xa, 0x5, 0xfffffffd, 0x8000, 0x24000, 0x3, 0x0, 0x8001, 0x7f, 0x5, 0x4, 0x3, 0x9, 0x3, 0xd7, 0x3, 0x0, 0x3, 0x0, 0x8001, 0x2, 0x4, 0x5, 0x1c, 0xffffff00, 0x7, 0x3, 0x2, 0x5, 0x5, 0xfffff762, 0xffffc01f, 0x3, 0x401, 0x6, 0x10001, 0x200, 0x2, 0x8, 0xfffffff8, 0x4, 0xff, 0x5de, 0x5, 0x0, 0x4, 0xefde, 0xc5, 0x9, 0x1ff, 0xb6, 0x3, 0xd8d, 0xaa, 0x7eb530e4, 0x0, 0x3f05d376, 0x8, 0x4, 0x86fe, 0x6, 0xa, 0x2, 0x3, 0x5, 0x7, 0x1, 0xbad7, 0xa9, 0xc9e, 0x6, 0xfd, 0xc, 0x8001, 0x10000, 0x7, 0xfffffffb, 0x4, 0x7, 0x8000, 0xfffffffb, 0x1d19, 0x8, 0xffff, 0xfffff622, 0x8, 0x9042, 0x5, 0x4, 0xd, 0x647c, 0x4, 0x2, 0x17, 0x8, 0x9, 0x101, 0x4, 0x5ba7, 0x0, 0x2, 0x1, 0xffffffff, 0x200, 0x2, 0x8, 0x4, 0x2, 0x2, 0x148b, 0x2, 0x0, 0x2f, 0x5, 0x401, 0xed, 0x9, 0x3, 0x0, 0xc, 0x1, 0x7, 0x800, 0xfffffff9, 0x5, 0x7f, 0x5, 0x9, 0x2, 0x1ff, 0x800, 0x1ff, 0x15, 0x4, 0x5, 0x77, 0x9a3f, 0x7406a8a6, 0x1a44825d, 0xd719, 0x101, 0x10000, 0x5, 0x1, 0x3, 0x7]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xd, 0x3, 0x9, 0xb5, 0x45, {0x6, 0x0, 0x9, 0x9, 0x8, 0x6}, {0x6, 0x0, 0xfff8, 0x400, 0x4, 0xc}, 0x7, 0x800, 0x4c}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x12000, 0x6, 0x5b68, 0x4, 0x7f, 0x4, 0x5, 0xd0e, 0x15, 0x4c, 0x0, 0x7ff, 0xffffffff, 0x7fffffff, 0x81, 0x4, 0x1, 0xf, 0x8000, 0x727, 0x80000000, 0x4, 0x5fb, 0x0, 0x6, 0x8, 0x3, 0x2000, 0x101, 0x400, 0x1, 0x7fffffff, 0x1, 0x1052, 0x7ff, 0x3, 0xbfe, 0x4, 0x3, 0x5, 0x159, 0x1, 0x7, 0x3, 0x7, 0x3, 0x7, 0x1, 0x4, 0x4, 0xffff0000, 0x8001, 0x6, 0x7f, 0x2, 0x7fffffff, 0xffffffff, 0xd, 0x6, 0x8001, 0xc7, 0x6, 0x6, 0x8, 0x3, 0x661, 0x7fffffff, 0x40, 0x4, 0xd, 0x7f, 0x4c7, 0xec50, 0x80000000, 0x9, 0x1, 0x7, 0x25, 0x7, 0x3, 0x8000, 0xc, 0x400, 0x1, 0x8, 0x2, 0x4, 0xce0, 0x4, 0x7, 0x64, 0x9, 0x3, 0x1, 0xd9e, 0x2, 0x5, 0x5, 0x7, 0x0, 0x3, 0x4, 0x3, 0x5, 0x1, 0x3, 0x10, 0xfffffffb, 0x8, 0xffffffff, 0x5, 0x8, 0x3, 0x27d1, 0x3, 0xfffffffc, 0x9, 0x3, 0x5, 0x63c, 0xfffffe01, 0xc, 0x4, 0x3, 0xb2c, 0x42d3fd28, 0x0, 0x2, 0xfffffffe, 0x45, 0x200, 0xa, 0x52, 0xffffffff, 0x1ff, 0x7, 0x1, 0x5, 0xc4cd, 0x10000, 0x7fff, 0x0, 0xac4e, 0x7, 0xfffffc01, 0x4, 0x9707, 0x0, 0x1, 0x1, 0x1ff, 0x7, 0x3, 0x4, 0x6, 0x40, 0x9, 0x5, 0xa782, 0x10000000, 0x80, 0x800, 0x1, 0x7, 0x3, 0x3, 0xa, 0x60, 0x5188, 0xc5, 0x7, 0x2, 0x7fff, 0xb, 0x9af2, 0x7, 0x6e3, 0x3, 0x0, 0x5, 0x7, 0x9, 0x1, 0x8, 0x4, 0x6, 0x1ff, 0x9, 0x4e83, 0x2, 0x31d, 0x6, 0x8, 0x9, 0x9, 0x7, 0x6, 0xc7f5, 0x4, 0x7, 0x7, 0x7, 0x5, 0x3ff, 0x5, 0x1, 0x3, 0x6687, 0xc41, 0x4, 0x63d1, 0x96, 0x2, 0x0, 0xa77, 0xd, 0x4, 0x4, 0x9, 0x930, 0x10001, 0x9, 0x8, 0x5, 0x2, 0x3cb6, 0x5, 0x4, 0x1, 0x8, 0x5, 0x7ff, 0x7, 0x4, 0x5, 0xaa3, 0x9, 0x8001, 0xe90, 0x3ff, 0xfffffffa, 0x8, 0x2800000, 0x2, 0x9, 0x9, 0x8, 0x7, 0x2, 0x9cf, 0x719, 0xfffffff4, 0x4, 0x56, 0x8000, 0x2]}]]}, {0x71, 0x6, "fe6d860dd84cbb0f361d847bcdf4f1cca1e189ca63b31409d2acc4a678e75e5969d6bbe5a54ecf29b01ab3b4a3b575873b9ace4b4d426436bc19fe437db796f824b3650f50334b10d4b94e2d7d6c31aea3e06975ef3aaa1770d81ceb777a8a733f87a5fd75c8c7aaaf871120b4"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_skbedit={0x130, 0x9, 0x0, 0x0, {{0xc}, {0x44, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x8000}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x2}, @TCA_SKBEDIT_PTYPE={0x6}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xf, 0xf}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x9}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x7}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x7}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xf}}]}, {0xc1, 0x6, "14337e58be45d60f659754ec12e5d9ab30fcb57981051924d37f4f0fd25a3ef87b4e232d3bfdc9c80e6ee7845cbdd8ea6467a6e4d8f14d4a03a927cf8cd13c4b64426d975ee16c7b9e3ea473e415c230d4a08725de6d4cf8fa0a2ee1d29d4426544a0954a83455c69df54a86f88e23bdfc955eff64c7fb93320b3d431c93a09c51b007f50b01eda77a1d9eecd6c666f112264ca0082163908544f2055aff6b63df294e668556bd859c2aeeed83a0033d335fa628e8c8f83687fc15f992"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_skbmod={0x30, 0x0, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_simple={0x60, 0x18, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0x6, 0x3, '/\x00'}]}, {0x21, 0x6, "d6337fc71344d621b3f41a408848462f2be26f838c2124f3ed97095d70"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_police={0x490, 0x12, 0x0, 0x0, {{0xb}, {0x464, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x19c44db1, 0xdcb, 0x1, 0x1, 0x2, 0x1, 0xcd4, 0x7, 0x5, 0x1000, 0x4, 0xfffffffd, 0x1, 0xbb77, 0x1, 0x3, 0x8, 0x2, 0x4, 0xea, 0x2, 0x8b5c, 0x8, 0x34e, 0x8, 0x1, 0x80000001, 0x3, 0x932, 0x7, 0x9, 0x8001, 0x80, 0x2, 0x4, 0x10000, 0x9, 0x200, 0x3, 0x400, 0x4, 0xf, 0x6, 0x1a, 0x5, 0x5, 0x80000000, 0x1bb6, 0x2, 0x9, 0x4, 0x8, 0x6, 0x5, 0x9800, 0x1, 0x356, 0x3, 0x8, 0x1, 0xffffffff, 0xfffffff4, 0x7, 0x6599, 0x4, 0xe931, 0x0, 0x4, 0x5, 0x2, 0x7, 0x1, 0xda, 0x5, 0x75f3c000, 0xa, 0x8c0b, 0x560, 0x7c, 0x100, 0x0, 0xfffffffd, 0x78d7f19a, 0xc, 0x8, 0x7fffffff, 0x3, 0x9, 0x7f, 0x5, 0xffff5c04, 0x8000, 0xdfbe, 0xf6646b3e, 0xffff, 0x2, 0x2e4, 0x400, 0x780f, 0x9, 0x9, 0x9, 0x2, 0x5, 0x4, 0x6, 0x6, 0xd, 0x4, 0xfc, 0x58a6970a, 0x3, 0x1000, 0x12, 0xc, 0x1, 0xff, 0x9, 0x7, 0xe, 0x6, 0x8, 0x7a05cad8, 0x1, 0x84, 0x400, 0xfffffffb, 0x9, 0xe, 0x8, 0x5, 0x4, 0xfffff800, 0x6, 0x7, 0xffffffff, 0x41, 0x6, 0x100, 0xfb67, 0x7, 0xe698, 0x7, 0x4, 0x7, 0x1000, 0xfffffffd, 0x6, 0x9, 0x80000000, 0x0, 0xf, 0xc392, 0xdaa9, 0x7, 0x4, 0x1, 0x9, 0x7fffffff, 0x5d394290, 0x5, 0xd, 0x6, 0x6, 0x200, 0x8, 0x1, 0xa63, 0x5, 0x10001, 0x582, 0x6, 0x6, 0x2, 0x8001, 0x7, 0x8, 0x84c, 0xffff, 0x7, 0xffff, 0x5699, 0xd8fa, 0x7, 0x3, 0x0, 0xb396, 0x7fff, 0x2d3, 0x4, 0x5e73, 0x0, 0x1, 0x18a, 0x3ff, 0x0, 0xc4, 0x2, 0x3ff, 0x3, 0x1ff, 0x8, 0x5fd7000, 0xf3, 0x4, 0x3, 0xd8, 0x1, 0x8, 0x0, 0x8, 0x1, 0xca4a, 0xfffffffe, 0xb, 0x2, 0x3, 0x81, 0x7, 0x6, 0x200, 0x1, 0x39b2, 0x8, 0x1, 0x9, 0x0, 0x9, 0x9, 0x8, 0x4, 0x3, 0x2, 0x446, 0x839, 0x7, 0xea0b, 0x401, 0x1, 0x2, 0xa956, 0x9, 0x7, 0x8, 0x4, 0x1, 0x7f, 0x4d, 0x5, 0xf, 0x800000, 0x35, 0xaa, 0x0, 0x5, 0x4]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x75}], [@TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x0, 0x7, 0xd3b, 0x2, {0xf6, 0x1, 0x4, 0x200, 0x4597, 0x7fff}, {0x2, 0x2, 0x2, 0xbe, 0x9, 0x40}, 0x6, 0x10001, 0x2}}]]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}}]}, 0x18c8}}, 0x0) io_uring_enter(r1, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) r3 = socket(0x2a, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) add_key$fscrypt_v1(&(0x7f0000000440), 0x0, &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00", 0x16}, 0x48, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000000), 0x80) pipe2$watch_queue(0x0, 0x80) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_link_settings={0x4c, 0x5, 0xef, 0x1, 0x1, 0x0, 0x0, 0x9, 0x1, 0xb, [0x7fff, 0xa7, 0x806, 0x3, 0x1, 0x5, 0x1, 0x3], [0x800, 0x2, 0x7, 0xffffffff, 0x1]}}) 7.720956766s ago: executing program 2 (id=375): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0xffffffff, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x7}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xe4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 7.717123824s ago: executing program 1 (id=376): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x609, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88aefe86, 0x40000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_ADDRESS={0xa, 0x1, @remote}, @IFLA_LINKMODE={0x5, 0x11, 0x4}]}, 0x58}}, 0x0) r7 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000800000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003601008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r8], 0x5c}}, 0x40) 7.602381635s ago: executing program 2 (id=377): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000200)={0x0, 0x0}) sched_getparam(r1, &(0x7f0000000040)) syz_init_net_socket$ax25(0x3, 0x5, 0x1) r2 = socket$inet_icmp(0x2, 0x2, 0x1) r3 = epoll_create1(0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000180)={0xc0002000}) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xd) writev(r5, &(0x7f0000000980)=[{&(0x7f0000000040)='c', 0x1}], 0x1) fcntl$setown(r2, 0x8, r1) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x8, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @local, {[], @echo_request={0x2}}}}}}, 0x0) r6 = socket$key(0xf, 0x3, 0x2) recvmmsg(r6, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0216000002"], 0x10}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r7 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000001b80)={'team_slave_0\x00', 0x400}) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r8}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_GET(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x14, 0x0, 0x9a7d932b31cdcff5, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x94baeb72c85525e3}, 0x804) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) 6.802472066s ago: executing program 1 (id=380): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x16, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000006900000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) syz_open_dev$video(0x0, 0x7, 0x40) sched_setscheduler(0x0, 0x5, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r2, &(0x7f000001aa40)=""/102400, 0x19000) syz_open_dev$sndctrl(0x0, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000034c0)={0x2020}, 0x2020) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffff}, 0x50) 6.274028223s ago: executing program 4 (id=382): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040de28421100000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000001c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000085000000854eb1"], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r0}, 0x38) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001e80)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={0xffffffffffffffff, r3}, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, r4, 0x0, '\x00', 0x0, 0x0}, 0x50) add_key$fscrypt_provisioning(0x0, &(0x7f00000000c0)={'syz', 0x0}, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x48, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000000), 0x5, 0x0) read$msr(r5, &(0x7f0000000240)=""/2, 0x2) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(0xffffffffffffffff, 0x7a9, &(0x7f0000000040)={{@hyper, 0x783}, 0x6, 0x5, 0x2, 0xfffffffffffffffa, 0x7, 0x9, 0x0, 0xfffd}) r6 = socket$kcm(0x2, 0x3, 0x2) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_ep_read(r1, 0x3, 0x93, &(0x7f00000004c0)=""/147) sendmsg$nl_xfrm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000021aee3dece8055f60000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000040000000000000000000200000000000000000000000000000000000000100000300000000440005000a010101000000000000000000000000000004d62b"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r6, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xd}, @dev={0xac, 0x14, 0x14, 0x19}}}}], 0x20}, 0x0) 5.575930076s ago: executing program 0 (id=384): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}, 0x0, 0x1, 0x2, 0x0, 0x6, 0xfffc}, 0x20) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6900000000140601fe80000000fffffff500000000000039fe8000000000ee"], 0x0) 5.35181576s ago: executing program 0 (id=385): getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001a0001000000000000000a0080202000", @ANYRES32=0x0, @ANYBLOB="0000000008000f0000000000140001"], 0x38}}, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009e602206d0414c340000000000109022400010400a000090480000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000340)={0x24, &(0x7f0000000180)={0x20, 0x10, 0x6e, {0x6e, 0x22, "3bc24e37a90e7371dad2b738ec6d094f4ebeac10ca3177fbb2e8c328f834f77b4cc74b8967a901403eae7846920064d5320cbfc6d0c2cbc2297bd9a2c65c507db3c0c908f12e804d9786d557f0b57ba461a80794f142b1cac8b5312cd30e2b55403e7a1c4a9a07429a5a8810"}}, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1401}}, &(0x7f00000002c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x8, "59b7236f"}]}}, &(0x7f0000000300)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0x80, 0x1, {0x22, 0x20f}}}}, &(0x7f0000000600)={0x2c, &(0x7f0000000380)={0x20, 0xc, 0xa0, "929ebdff298be56f05dc5b03a6dfa593428f5948b575177b3a787c175f6c10dd48c0d87c9cf6ff4c219ab75314e0ea3078d35a80fb20f718de1e9c5aa5607b2344c48c87bbafd0089a0ac56eb72bc74cc701ff3ba114474b44df957eebdabf73550550841b91315fb9cc0da538f2f701b5f198ebc2e88ff0388638e1df242b54db9c64817e0dc98425ec255abbebea9664dd298231ba994da9f1e02092f33bbf"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x2f}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000500)={0x20, 0x1, 0xa6, "fb58c3b249e7eb4e3a9e0147f0bf6a658e7bae827d6c6c56409ba2798d993513f5a508b4fa694a9b522ad6eba75b18f373482f5f0f4211893fe947c3c350281e9615bd8f61ed1b40a96c3ad2999693c046dc1485619a0e48aefa4a22b6e9b9ea758d1fe8e16e207d57f59780d8b47960378a4ab73208c6c671a2af2624fe612766530c610ee2d930fb18bdb1f1eeec5faec012b1ded1d3e6252049aeacef8d57b63110e94a82"}, &(0x7f00000005c0)={0x20, 0x3, 0x1, 0x8}}) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000640)=0x2, 0x4) 5.141748528s ago: executing program 2 (id=386): socket$kcm(0x10, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000300)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f0000000080)=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r3, &(0x7f0000000380)="0099", &(0x7f0000000480)=@udp6=r1, 0x2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x5, 0xe, 0x0, &(0x7f00000003c0)="000000000000000000000001e370", 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 5.070044849s ago: executing program 2 (id=387): setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000}, 0x20) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], &(0x7f00000001c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000840}, 0x4800) removexattr(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) 4.382686367s ago: executing program 3 (id=388): syz_emit_ethernet(0x46, &(0x7f0000000200)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0xb00, 0x0, 0xfffd, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) 4.351310735s ago: executing program 3 (id=389): sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x1c}}, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd610000e500122f"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42}, 0xe0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0xfff5, 0x0, 0x0, 0x2}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x4044) 4.124152461s ago: executing program 3 (id=390): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = userfaultfd(0x80801) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000240)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fe3000/0x4000)=nil, 0x3000}) ioctl$IOMMU_VFIO_SET_IOMMU(0xffffffffffffffff, 0x3b66, 0x1) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r5, 0xa02000000000000, 0x60, &(0x7f0000000880)={'filter\x00', 0x1002, 0x4, 0x3f0, 0x1f8, 0x0, 0xe8, 0x308, 0x308, 0x1f8, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xe8}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0xf, 0xffffffff}}}, {{@arp={@loopback, @multicast1, 0xff000000, 0x0, 0x6, 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, {[0x0, 0x0, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x6, 0x81, 0x1, 0x1, 0xd13, 0xe106, 'pimreg1\x00', 'veth1_virt_wifi\x00', {0xff}, {0xff}, 0x0, 0x4}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac=@random="3330cb30ca8a", @private=0xa010102, @broadcast}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) 4.107449466s ago: executing program 2 (id=391): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r1, 0xc01864b0, &(0x7f0000000080)={r2, 0x0, 0x0, 0x0, 0x4}) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x800, 0x0) write$vhost_msg_v2(r3, &(0x7f0000000340)={0x2, 0x0, {&(0x7f0000000200)=""/87, 0x57, &(0x7f0000000280)=""/139, 0x3, 0x2}}, 0x48) write$char_usb(r3, &(0x7f00000003c0)="27dc8e7c1d99b7f142e0ec7cb4059ec0d15de113b32bb7966a6a72c8c9b5ef7c47f5f4e86ded5a7cf836e66854552b3a363579fb5eaba82924b12b532e9501a2bc271417bf074555000309a97c8044dd6fa02d0a0e2d249f55ba95bf8cc7589856d0047b3289553fad3aad78a0b3f5414cd1db8bd4760f68ffc552126919f6518a61ed9bdd7e3504766755e052d729241bb8754a22a0b5f94a154af060028dd00e820a6c419ff50e06bfd9d2c6907c8e47d199856be3e89de85f7177701201fca127e120d179808359ba51dca2227a58cd3ce35912923a53fff096e1c24b1cb3af62a103385055a356e172fbcf709d", 0xef) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0, 0x29}], 0x1, 0x44, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x6a8002, 0x0) ioctl$KVM_GET_CPUID2(r0, 0xc008ae91, &(0x7f0000000000)) 4.018721612s ago: executing program 1 (id=392): connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x10100, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x40005) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xd, &(0x7f0000000100)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) socket$nl_rdma(0x10, 0x3, 0x14) mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x2, &(0x7f0000000300)={0x0, 0x1, 0x6}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r2 = socket$inet_udp(0x2, 0x2, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x3) lseek(r4, 0x9, 0x0) r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYRESOCT=r4], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r5, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r3, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0xb, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x2, 0xc1}) 3.840909382s ago: executing program 2 (id=393): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x4, 0x1}, 0x6) syz_emit_ethernet(0x6e, &(0x7f00000001c0)=ANY=[@ANYBLOB="cfb14e407d33ffff"], 0x0) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000207d1e2e2c000000000046090224000100001000090400000903000000092103000001222900090581030000080005"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket$inet6(0xa, 0x80002, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0xc0145b0e, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 3.678682787s ago: executing program 4 (id=394): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) socket$unix(0x1, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setrlimit(0x9, &(0x7f0000000380)) getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, 0x0, &(0x7f0000000480)) io_setup(0x2004, &(0x7f0000000680)) getsockopt$sock_buf(r1, 0x1, 0x38, 0x0, &(0x7f0000000a40)) socket$alg(0x26, 0x5, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) prlimit64(r2, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r6, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x4) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) 3.042576995s ago: executing program 3 (id=395): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{0x6, 0x0, 0x600}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) memfd_create(&(0x7f0000000000)=')/--)\x00', 0x88fdc1d2ffe2dc66) 2.422982422s ago: executing program 3 (id=396): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f65, 0xfffffffd, 0xc5, 0xe23, 0x5, 0x1, 0x7fff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24008885}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000580)=@xdp={0x2c, 0x8, r5, 0x3e}, 0x80, &(0x7f0000000700)=[{&(0x7f00000004c0)="27030200590214000600002fb96d", 0x36}], 0x1}, 0x40084) 2.384980352s ago: executing program 0 (id=397): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan1\x00'}) open_tree(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x80801) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {&(0x7f00000005c0)="f2b314", 0x3}], 0x2}}], 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fbffffff0000040000ffed0085000000bc0000009500000000000000"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)={0x14, 0x0, 0x303, 0x3, 0x25dfdbfd, {0x3d}}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x0) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x82100, 0x0) ioctl$TCSETSF2(r9, 0x402c542d, &(0x7f0000000140)={0xffff0000, 0x6, 0x1ff, 0x2, 0x7, "d171a6100600000009e49200000000fdfd00", 0x802042, 0x200068e}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0xa, 0x0, &(0x7f0000000100)="443b6164ec0faec6180f", 0x0, 0x5008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 2.204562098s ago: executing program 4 (id=398): add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, &(0x7f0000000040)="01000000d4", 0x5, 0xfffffffffffffffb) userfaultfd(0x80001) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, 0x0, 0x0}, 0x20) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r3 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r4 = openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) close(r4) execveat$binfmt(0xffffffffffffff9c, r3, 0x0, 0x0, 0x0) close(0xffffffffffffffff) execveat$binfmt(0xffffffffffffff9c, r3, 0x0, 0x0, 0x0) execveat$binfmt(0xffffffffffffff9c, r3, 0x0, 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0xffa1, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d00200700ffff", @ANYRES32=r6, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 1.281667831s ago: executing program 0 (id=399): add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000002300), &(0x7f0000002340)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) syz_open_dev$video(0x0, 0x7, 0x0) getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000000c0)={0x0, 0x5, "00f400", 0x9, 0xf8}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/kcm\x00') preadv(r2, &(0x7f0000000080)=[{&(0x7f0000000100)=""/68, 0x44}], 0x1, 0x92, 0x0) write(r1, &(0x7f0000000040)="05000000010000", 0x7) shmctl$SHM_INFO(0x0, 0xe, 0x0) shmget(0x1, 0x8000, 0x54000000, &(0x7f0000ff8000/0x8000)=nil) 1.239459281s ago: executing program 3 (id=400): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, 0x0, 0x80000) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0xcb, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, 0x0) r2 = syz_io_uring_setup(0x890, &(0x7f0000000140)={0x0, 0x767c, 0x800, 0xffffffff, 0x299}, &(0x7f0000000040)=0x0, &(0x7f00000004c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x47f6, 0x0, 0x4, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NFC_CMD_ENABLE_SE(0xffffffffffffffff, 0x0, 0x4800) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x8, 0xfffffffe) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r6, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmmsg(r6, 0x0, 0x0, 0x0) syz_usbip_server_init(0x5) close_range(r0, 0xffffffffffffffff, 0x0) 660.590053ms ago: executing program 1 (id=401): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_int(r4, 0x1, 0x2f, 0x0, &(0x7f00000000c0)) 0s ago: executing program 0 (id=402): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000240)={0xa, @win={{0xffff, 0xeb03, 0xfffff4d7, 0x14}, 0x5, 0x7a, &(0x7f0000000340)={{0xb59, 0x8, 0x5}, &(0x7f0000000100)={{0xb, 0x3, 0x74ca, 0x5}}}, 0x83, &(0x7f0000000880)="49b1261c5ca10ab02e80c5cbdf9c7ae2975d3b04f2a3309c5ea544380f6221b3876054994d7bd5834f0570ed399b683efd9426c287ecace1310e8d6abf05d78073d83172db5386bf8ef3849409475d2e00650e3aca54b416f5212b77fe6a9a8d3706d4bb8f063cfb7539e240505fa666b6a582676515563022daa74f872ca5b2810c1fbb96352f9816270508cc27b9b129bca17f2de8e3b54dbdaecf653102c3c280ff5662616101879b945862bf999b9978e8d7283c1a292915c3a396e772103e621a47429f28eee75b6f013cdd62e86454e1325e78098100"/229, 0x9}}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000213c0000000e0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000100003800c0000900800034000cc"], 0xc0}}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="180200000100000000000000000000008500000053000000180100002020752500000000000020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fcffffff850000007300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000040)="e07b292fe079989cb9547ed387db", 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) setpriority(0x1, r4, 0x7fff) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$inet(0xa, 0x801, 0x84) connect$inet(r6, &(0x7f0000004cc0)={0x2, 0x4e20, @broadcast}, 0x10) listen(r6, 0xc) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvmmsg(r7, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}, 0x6e1}], 0x1, 0x20, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000005c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000001cb5d417e4c15804fc0000000000119078000002000000004e200008907800000027e788ef28fa038184ce3dee08858ee2372476ad92ef04d21bd228010b41ac109bce2ceeb7126aba416a12e4dc2804c773939ead10732b57b63eaa3a201df2e3ec5c35715b4491d89c04966813f5858fab1e4bbc048b28e209cf73f8dad98e89b659e2ac6b43a2dd3f2b14510a527db722ee4176948e765c60fba3bb2c824949a1f9d7f57fb131fea2cb34c79a4052543925e1b70d7637a0af1041a58945abfc7ba0a7da6640e1dd889f59e087b2a0d4ae7373f45b"], 0x0) r8 = accept4(r6, 0x0, 0x0, 0x0) sendto$inet(r8, &(0x7f00000004c0)="ccbec0216d7b8e0b75df8043b970c112f91ee0b5e1a2d3e8c189012652406e63281ef7e7dbfdb295ee33139ae9a7920111210c7c6a4d64a241c374967625aec812ed88", 0x43, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x3}, 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r8, 0x84, 0x22, &(0x7f0000000040)={0x8, 0x8204, 0xffffffff, 0x4}, 0x10) sendto$inet6(r8, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x2001}, 0x8) kernel console output (not intermixed with test programs): 30] audit: type=1400 audit(1767594760.975:113): avc: denied { create } for pid=5939 comm="syz.3.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 68.950435][ T4919] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.959314][ T4919] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.979558][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.051621][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.078979][ T1036] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.090093][ T1036] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.107579][ T1036] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.130722][ T1036] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.149056][ T1036] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.161567][ T2974] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.169661][ T1036] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.184014][ T2974] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.316848][ T4919] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.338554][ T4919] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.382461][ T2974] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.538827][ T2974] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.847435][ T2974] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.856148][ T2974] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.904214][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.914348][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.964649][ T5832] Bluetooth: hci1: command tx timeout [ 69.964766][ T5818] Bluetooth: hci3: command tx timeout [ 70.043632][ T5818] Bluetooth: hci4: command tx timeout [ 70.044090][ T5823] Bluetooth: hci0: command tx timeout [ 70.054627][ T5832] Bluetooth: hci2: command tx timeout [ 70.087705][ T79] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 71.234543][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.240934][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.264534][ T79] usb 2-1: device descriptor read/64, error -71 [ 71.322775][ T5880] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 71.488151][ T5880] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 71.537192][ T79] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 71.546681][ T5880] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 71.557716][ T5880] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 71.567047][ T5880] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.589877][ T5880] usb 4-1: config 0 descriptor?? [ 71.611433][ T5880] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 71.643017][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 71.651939][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 71.662507][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 71.670996][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 71.818328][ T5880] dvb-usb: bulk message failed: -22 (3/0) [ 71.830365][ T5880] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 71.840049][ T5880] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 71.847865][ T5880] usb 4-1: media controller created [ 72.407101][ T5990] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 72.419442][ T5823] Bluetooth: hci3: command tx timeout [ 72.499221][ T79] usb 2-1: device descriptor read/64, error -71 [ 72.507882][ T5880] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 72.516784][ T5832] Bluetooth: hci1: command tx timeout [ 72.523172][ T5832] Bluetooth: hci0: command tx timeout [ 72.528703][ T5832] Bluetooth: hci2: command tx timeout [ 72.534151][ T5832] Bluetooth: hci4: command tx timeout [ 72.656076][ T79] usb usb2-port1: attempt power cycle [ 72.764558][ T5880] dvb-usb: bulk message failed: -22 (6/0) [ 72.796542][ T5880] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 72.856379][ T5880] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input5 [ 72.968759][ T5880] dvb-usb: schedule remote query interval to 150 msecs. [ 72.986606][ T5880] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 73.020185][ T5880] usb 4-1: USB disconnect, device number 2 [ 73.027404][ T79] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 73.052823][ T79] usb 2-1: device descriptor read/8, error -71 [ 73.075707][ T5880] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 73.132166][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 73.261193][ T6001] syz.3.16 uses obsolete (PF_INET,SOCK_PACKET) [ 73.597073][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 73.699679][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 73.792228][ T30] kauditd_printk_skb: 64 callbacks suppressed [ 73.792242][ T30] audit: type=1400 audit(1767594765.605:178): avc: denied { open } for pid=6003 comm="syz.0.17" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 73.876403][ T79] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 73.883536][ T5951] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 73.902554][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 73.911597][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 73.920556][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 74.231946][ T30] audit: type=1400 audit(1767594765.705:179): avc: denied { bind } for pid=5998 comm="syz.4.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 74.287752][ T6013] netlink: 52 bytes leftover after parsing attributes in process `syz.1.18'. [ 74.300082][ T6013] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.307350][ T6013] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.429751][ T30] audit: type=1400 audit(1767594765.705:180): avc: denied { setopt } for pid=5998 comm="syz.4.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 74.453638][ T5951] usb 3-1: Using ep0 maxpacket: 16 [ 74.461692][ T6017] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6017 comm=syz.1.18 [ 74.461943][ T79] usb 2-1: device not accepting address 5, error -71 [ 74.512332][ T6017] netlink: 76 bytes leftover after parsing attributes in process `syz.1.18'. [ 74.529891][ T5951] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 74.547080][ T79] usb usb2-port1: unable to enumerate USB device [ 74.597878][ T30] audit: type=1400 audit(1767594765.715:181): avc: denied { write } for pid=5998 comm="syz.4.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 74.617678][ T5951] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 74.638475][ T6017] netlink: 52 bytes leftover after parsing attributes in process `syz.1.18'. [ 74.652000][ T5951] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 74.673080][ T30] audit: type=1400 audit(1767594766.175:182): avc: denied { ioctl } for pid=6000 comm="syz.3.16" path="socket:[7954]" dev="sockfs" ino=7954 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 74.703878][ T5951] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 74.757397][ T30] audit: type=1400 audit(1767594766.185:183): avc: denied { create } for pid=6000 comm="syz.3.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 74.781105][ T5951] usb 3-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 74.804445][ T5951] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.812947][ T5951] usb 3-1: Product: syz [ 74.817242][ T5951] usb 3-1: Manufacturer: syz [ 74.827169][ T5951] usb 3-1: SerialNumber: syz [ 74.838864][ T30] audit: type=1400 audit(1767594766.185:184): avc: denied { bind } for pid=6000 comm="syz.3.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 74.860453][ T5951] usb 3-1: config 0 descriptor?? [ 74.869517][ T30] audit: type=1400 audit(1767594766.545:185): avc: denied { sqpoll } for pid=6003 comm="syz.0.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 74.889963][ T5951] xbox_remote_probe: Unexpected endpoint_in [ 74.900075][ T30] audit: type=1400 audit(1767594766.985:186): avc: denied { create } for pid=6020 comm="syz.3.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 74.913544][ T6023] syzkaller0: entered promiscuous mode [ 75.062642][ T30] audit: type=1400 audit(1767594767.045:187): avc: denied { execute } for pid=6003 comm="syz.0.17" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=8828 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 75.093149][ T5995] ======================================================= [ 75.093149][ T5995] WARNING: The mand mount option has been deprecated and [ 75.093149][ T5995] and is ignored by this kernel. Remove the mand [ 75.093149][ T5995] option from the mount to silence this warning. [ 75.093149][ T5995] ======================================================= [ 75.184695][ T6030] overlayfs: failed to resolve 'hash': -2 [ 75.361962][ T6023] syzkaller0: entered allmulticast mode [ 75.374290][ T6035] batadv_slave_1: entered promiscuous mode [ 75.382651][ T6035] batman_adv: batadv0: Adding interface: macvlan2 [ 75.389062][ T6035] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.415180][ T6035] batman_adv: batadv0: Interface activated: macvlan2 [ 76.539382][ T5887] usb 3-1: USB disconnect, device number 2 [ 76.621851][ T6050] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 76.740442][ T6050] loop6: detected capacity change from 0 to 524287487 [ 76.794196][ T6050] Buffer I/O error on dev loop6, logical block 0, async page read [ 77.251514][ T6057] input: syz1 as /devices/virtual/input/input6 [ 77.803070][ T6050] Buffer I/O error on dev loop6, logical block 0, async page read [ 77.865192][ T6050] Buffer I/O error on dev loop6, logical block 0, async page read [ 77.937707][ T6050] Buffer I/O error on dev loop6, logical block 0, async page read [ 77.947481][ T6050] Buffer I/O error on dev loop6, logical block 0, async page read [ 77.955622][ T6050] Buffer I/O error on dev loop6, logical block 0, async page read [ 77.963815][ T6050] Buffer I/O error on dev loop6, logical block 0, async page read [ 77.981956][ T5887] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 78.032465][ T6050] Buffer I/O error on dev loop6, logical block 0, async page read [ 78.064156][ T6050] ldm_validate_partition_table(): Disk read failed. [ 78.113878][ T6050] Buffer I/O error on dev loop6, logical block 0, async page read [ 78.152143][ T5951] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 78.223389][ T5887] usb 3-1: too many configurations: 70, using maximum allowed: 8 [ 78.233333][ T5887] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.253186][ T5887] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 78.285830][ T5887] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.296606][ T5887] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 78.312072][ T5951] usb 4-1: Using ep0 maxpacket: 8 [ 78.319515][ T5951] usb 4-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 78.329902][ T5951] usb 4-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 78.340408][ T5887] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.360346][ T5951] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.406030][ T5887] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 78.452931][ T5887] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.466100][ T5887] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 78.480295][ T5887] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.490165][ T5887] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 78.516054][ T5887] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.534266][ T6050] Buffer I/O error on dev loop6, logical block 0, async page read [ 78.542158][ T6050] Dev loop6: unable to read RDB block 0 [ 78.558231][ T6050] loop6: unable to read partition table [ 78.568114][ T5887] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 78.620703][ T6062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.631953][ T6050] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 78.646218][ T6062] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.650411][ T5887] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.664202][ T5887] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 78.681811][ T5190] ldm_validate_partition_table(): Disk read failed. [ 78.689228][ T5190] Dev loop6: unable to read RDB block 0 [ 78.701156][ T5190] loop6: unable to read partition table [ 78.727812][ T5951] usb 4-1: string descriptor 0 read error: -71 [ 78.729948][ T5887] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.744568][ T5887] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 78.760919][ T5887] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 78.779459][ T5887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.822153][ T79] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 78.833723][ T5887] usb 3-1: config 0 descriptor?? [ 78.874305][ T5951] usb 4-1: USB disconnect, device number 3 [ 78.911446][ T5821] udevd[5821]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:32.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 78.994952][ T79] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 79.004471][ T79] usb 2-1: config 0 has no interface number 0 [ 79.032295][ T79] usb 2-1: config 0 interface 41 has no altsetting 0 [ 79.073195][ T79] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 79.082529][ T79] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.090592][ T79] usb 2-1: Product: syz [ 79.119891][ T79] usb 2-1: Manufacturer: syz [ 79.145050][ T79] usb 2-1: SerialNumber: syz [ 79.260741][ T79] usb 2-1: config 0 descriptor?? [ 79.271786][ T5887] lua 0003:1E7D:2C2E.0001: unknown main item tag 0x0 [ 79.294139][ T5887] lua 0003:1E7D:2C2E.0001: unknown main item tag 0x0 [ 79.302297][ T5887] lua 0003:1E7D:2C2E.0001: unknown main item tag 0x0 [ 79.309096][ T5887] lua 0003:1E7D:2C2E.0001: unknown main item tag 0x0 [ 79.318582][ T5887] lua 0003:1E7D:2C2E.0001: unknown main item tag 0x0 [ 79.326676][ T5887] lua 0003:1E7D:2C2E.0001: unknown main item tag 0x0 [ 79.337597][ T5887] lua 0003:1E7D:2C2E.0001: unknown main item tag 0x0 [ 79.345381][ T5887] lua 0003:1E7D:2C2E.0001: unknown main item tag 0x0 [ 79.358001][ T5887] lua 0003:1E7D:2C2E.0001: unknown main item tag 0x0 [ 79.366101][ T5887] lua 0003:1E7D:2C2E.0001: unknown main item tag 0x0 [ 79.409339][ T5887] lua 0003:1E7D:2C2E.0001: hidraw0: USB HID v0.03 Device [HID 1e7d:2c2e] on usb-dummy_hcd.2-1/input0 [ 79.487510][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 79.487526][ T30] audit: type=1400 audit(1767594771.805:221): avc: denied { create } for pid=6053 comm="syz.2.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 79.488322][ T6054] netlink: 32 bytes leftover after parsing attributes in process `syz.2.27'. [ 79.513780][ T30] audit: type=1400 audit(1767594771.805:222): avc: denied { write } for pid=6053 comm="syz.2.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 79.573990][ T6054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.612134][ T6054] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.653171][ T5887] usb 3-1: USB disconnect, device number 3 [ 80.301993][ T30] audit: type=1400 audit(1767594772.255:223): avc: denied { create } for pid=6071 comm="syz.4.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 80.306004][ T6067] netlink: 'syz.1.29': attribute type 5 has an invalid length. [ 80.356591][ T30] audit: type=1400 audit(1767594772.255:224): avc: denied { write } for pid=6071 comm="syz.4.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 80.388954][ T30] audit: type=1400 audit(1767594772.665:225): avc: denied { read write } for pid=6079 comm="syz.0.33" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 80.413349][ T30] audit: type=1400 audit(1767594772.665:226): avc: denied { open } for pid=6079 comm="syz.0.33" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 80.591834][ T79] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 80.670954][ T30] audit: type=1400 audit(1767594772.985:227): avc: denied { setopt } for pid=6082 comm="syz.3.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 80.725372][ T30] audit: type=1400 audit(1767594773.015:228): avc: denied { mounton } for pid=6082 comm="syz.3.34" path="/9/bus" dev="tmpfs" ino=69 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 80.809909][ T79] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 80.841858][ T79] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71 [ 80.845681][ T30] audit: type=1400 audit(1767594773.025:229): avc: denied { mount } for pid=6082 comm="syz.3.34" name="/" dev="overlay" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 80.852355][ T79] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71 [ 81.810891][ T30] audit: type=1400 audit(1767594773.145:230): avc: denied { unmount } for pid=5817 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 81.819065][ T24] cfg80211: failed to load regulatory.db [ 81.914279][ T6091] netlink: 8 bytes leftover after parsing attributes in process `syz.3.36'. [ 81.971504][ T79] usb 2-1: USB disconnect, device number 6 [ 82.749724][ T6106] netdevsim netdevsim0: Direct firmware load for failed with error -2 [ 82.760600][ T6106] netdevsim netdevsim0: Falling back to sysfs fallback for: [ 83.285060][ T6112] netlink: 'syz.2.37': attribute type 33 has an invalid length. [ 83.292834][ T6112] netlink: 152 bytes leftover after parsing attributes in process `syz.2.37'. [ 83.361960][ T79] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 83.544460][ T6115] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 83.556643][ T6115] cramfs: wrong magic [ 84.383463][ T79] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 84.394937][ T79] usb 5-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=9b.f7 [ 84.404030][ T79] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.415169][ T79] usb 5-1: config 0 descriptor?? [ 84.422832][ T79] metro_usb 5-1:0.0: required endpoints missing [ 85.655750][ T79] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 85.819504][ T6061] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 85.980341][ T79] usb 1-1: too many configurations: 70, using maximum allowed: 8 [ 86.009318][ T79] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.024146][ T6061] usb 4-1: too many configurations: 70, using maximum allowed: 8 [ 86.065916][ T6061] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.081719][ T79] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 86.095939][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 86.095965][ T30] audit: type=1326 audit(1767594778.405:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6136 comm="syz.1.49" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0d5d38f749 code=0x0 [ 86.131578][ T6061] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 86.150185][ T79] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.199177][ T79] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 86.258791][ T6061] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.271026][ T6061] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 86.273050][ T79] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.305827][ T79] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 86.327101][ T79] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.327575][ T6061] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.366922][ T79] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 86.383216][ T6061] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 86.419086][ T79] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.421946][ T5946] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 86.441284][ T79] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 86.460779][ T79] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.472912][ T79] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 86.489082][ T6061] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.508127][ T6061] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 86.526044][ T79] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.539403][ T79] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 86.563642][ T79] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.574280][ T6061] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.584412][ T79] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 86.599903][ T6061] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 86.619647][ T79] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 86.630583][ T79] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.640010][ T6061] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.650800][ T6061] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 86.666867][ T79] usb 1-1: config 0 descriptor?? [ 86.677818][ T6061] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.712220][ T5946] usb 3-1: Using ep0 maxpacket: 32 [ 86.712806][ T6061] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 86.732657][ T6061] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.752015][ T6061] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 86.752148][ T5946] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.765835][ T6061] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 86.785688][ T5946] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.786379][ T6061] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.808250][ T6061] usb 4-1: config 0 descriptor?? [ 86.931352][ T5946] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 86.940505][ T5946] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.208498][ T5880] usb 5-1: USB disconnect, device number 2 [ 87.341190][ T5946] usb 3-1: config 0 descriptor?? [ 87.350281][ T79] hid_parser_main: 28 callbacks suppressed [ 87.350299][ T79] lua 0003:1E7D:2C2E.0002: unknown main item tag 0x0 [ 87.373755][ T6061] lua 0003:1E7D:2C2E.0003: unknown main item tag 0x0 [ 87.412207][ T6061] lua 0003:1E7D:2C2E.0003: unknown main item tag 0x0 [ 87.418202][ T5946] hub 3-1:0.0: USB hub found [ 87.424681][ T30] audit: type=1400 audit(1767594779.685:235): avc: denied { write } for pid=6119 comm="syz.0.45" path="socket:[9041]" dev="sockfs" ino=9041 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 87.441250][ T79] lua 0003:1E7D:2C2E.0002: unknown main item tag 0x0 [ 87.456441][ T6061] lua 0003:1E7D:2C2E.0003: unknown main item tag 0x0 [ 87.468746][ T6061] lua 0003:1E7D:2C2E.0003: unknown main item tag 0x0 [ 87.479605][ T79] lua 0003:1E7D:2C2E.0002: unknown main item tag 0x0 [ 87.487818][ T6061] lua 0003:1E7D:2C2E.0003: unknown main item tag 0x0 [ 87.501455][ T79] lua 0003:1E7D:2C2E.0002: unknown main item tag 0x0 [ 87.509160][ T6122] netlink: 32 bytes leftover after parsing attributes in process `syz.3.46'. [ 87.518088][ T6061] lua 0003:1E7D:2C2E.0003: unknown main item tag 0x0 [ 87.528765][ T79] lua 0003:1E7D:2C2E.0002: hidraw0: USB HID v0.03 Device [HID 1e7d:2c2e] on usb-dummy_hcd.0-1/input0 [ 87.542291][ T6061] lua 0003:1E7D:2C2E.0003: hidraw1: USB HID v0.03 Device [HID 1e7d:2c2e] on usb-dummy_hcd.3-1/input0 [ 87.568743][ T79] usb 1-1: USB disconnect, device number 2 [ 87.583157][ T6122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.722619][ T30] audit: type=1400 audit(1767594779.955:236): avc: denied { setopt } for pid=6151 comm="syz.1.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 87.747881][ T6122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.756156][ T30] audit: type=1400 audit(1767594779.955:237): avc: denied { bind } for pid=6151 comm="syz.1.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 87.903134][ T6159] fido_id[6159]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 87.922832][ T6061] usb 4-1: USB disconnect, device number 4 [ 87.953930][ T30] audit: type=1400 audit(1767594779.955:238): avc: denied { name_bind } for pid=6151 comm="syz.1.53" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 88.003050][ T5946] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 88.004987][ T6158] fido_id[6158]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 88.024789][ T5946] usbhid 3-1:0.0: can't add hid device: -71 [ 88.026955][ T30] audit: type=1400 audit(1767594779.955:239): avc: denied { node_bind } for pid=6151 comm="syz.1.53" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 88.036462][ T5946] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 88.065432][ T30] audit: type=1400 audit(1767594779.955:240): avc: denied { write } for pid=6151 comm="syz.1.53" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 88.101195][ T30] audit: type=1400 audit(1767594779.955:241): avc: denied { connect } for pid=6151 comm="syz.1.53" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 88.219515][ T30] audit: type=1400 audit(1767594779.955:242): avc: denied { name_connect } for pid=6151 comm="syz.1.53" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 88.244418][ T30] audit: type=1400 audit(1767594780.245:243): avc: denied { write } for pid=6160 comm="syz.1.54" name="001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 88.294031][ T5946] usb 3-1: USB disconnect, device number 4 [ 88.302043][ T5991] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 88.307642][ T6167] netlink: 8 bytes leftover after parsing attributes in process `syz.4.56'. [ 88.882157][ T5991] usb 2-1: Using ep0 maxpacket: 8 [ 88.889878][ T5991] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 88.911829][ T5991] usb 2-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 88.929127][ T5991] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.942209][ T5991] usb 2-1: Product: syz [ 88.946421][ T5991] usb 2-1: Manufacturer: syz [ 88.951077][ T5991] usb 2-1: SerialNumber: syz [ 89.065808][ T5991] usb 2-1: config 0 descriptor?? [ 89.256627][ T6181] netlink: 216 bytes leftover after parsing attributes in process `syz.3.58'. [ 89.267255][ T6181] netlink: 40 bytes leftover after parsing attributes in process `syz.3.58'. [ 89.277413][ T6181] netlink: 36 bytes leftover after parsing attributes in process `syz.3.58'. [ 90.089391][ T5991] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 90.102025][ T5991] usb 2-1: selecting invalid altsetting 1 [ 90.303118][ T5991] gspca_stk014: init reg: 0x00 [ 90.307943][ T5991] stk014 2-1:0.0: probe with driver stk014 failed with error -5 [ 91.903740][ T5978] usb 2-1: USB disconnect, device number 7 [ 92.191461][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 92.191475][ T30] audit: type=1400 audit(1767594784.505:250): avc: denied { create } for pid=6208 comm="syz.4.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 92.223911][ T6204] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 92.230504][ T6204] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 92.279392][ T30] audit: type=1400 audit(1767594784.505:251): avc: denied { read } for pid=6208 comm="syz.4.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 92.359577][ T6204] vhci_hcd vhci_hcd.0: Device attached [ 92.425784][ T6205] vhci_hcd: connection closed [ 92.440177][ T6077] vhci_hcd vhci_hcd.2: stop threads [ 92.472193][ T6077] vhci_hcd vhci_hcd.2: release socket [ 92.500485][ T6077] vhci_hcd vhci_hcd.2: disconnect device [ 92.850292][ T6224] netlink: 'syz.4.71': attribute type 12 has an invalid length. [ 93.570598][ T6230] syzkaller0: entered promiscuous mode [ 93.570612][ T6230] syzkaller0: entered allmulticast mode [ 93.573193][ T6230] TC_ACT_REPEAT abuse ? [ 94.676343][ T6240] netlink: 52 bytes leftover after parsing attributes in process `syz.0.77'. [ 94.686136][ T6240] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.693679][ T6240] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.201980][ T30] audit: type=1400 audit(1767594784.715:252): avc: denied { create } for pid=6212 comm="syz.1.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 95.275844][ T30] audit: type=1400 audit(1767594784.725:253): avc: denied { write } for pid=6212 comm="syz.1.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 95.371117][ T30] audit: type=1400 audit(1767594784.725:254): avc: denied { read } for pid=6212 comm="syz.1.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 95.385528][ T6249] GUP no longer grows the stack in syz.1.80 (6249): 200000004000-200000008000 (200000002000) [ 95.390570][ T30] audit: type=1400 audit(1767594784.905:255): avc: denied { create } for pid=6212 comm="syz.1.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 95.411007][ T6249] CPU: 0 UID: 0 PID: 6249 Comm: syz.1.80 Not tainted syzkaller #0 PREEMPT(full) [ 95.411029][ T6249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 95.411039][ T6249] Call Trace: [ 95.411045][ T6249] [ 95.411052][ T6249] dump_stack_lvl+0x16c/0x1f0 [ 95.411078][ T6249] gup_vma_lookup+0x1d2/0x220 [ 95.411101][ T6249] __get_user_pages+0x241/0x3590 [ 95.411130][ T6249] ? find_held_lock+0x2b/0x80 [ 95.411155][ T6249] ? __pfx___get_user_pages+0x10/0x10 [ 95.411181][ T6249] get_user_pages_remote+0x243/0xab0 [ 95.411203][ T6249] ? mas_new_root+0x660/0x6e0 [ 95.411227][ T6249] ? __pfx_get_user_pages_remote+0x10/0x10 [ 95.411250][ T6249] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 95.411273][ T6249] __access_remote_vm+0x24d/0x850 [ 95.411295][ T6249] ? do_raw_spin_lock+0x12c/0x2b0 [ 95.411316][ T6249] ? __pfx___access_remote_vm+0x10/0x10 [ 95.411341][ T6249] proc_pid_cmdline_read+0x4de/0x8e0 [ 95.411361][ T6249] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 95.411380][ T6249] ? rw_verify_area+0xcf/0x6c0 [ 95.411399][ T6249] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 95.411414][ T6249] vfs_readv+0x5c1/0x8b0 [ 95.411437][ T6249] ? __pfx_vfs_readv+0x10/0x10 [ 95.411470][ T6249] ? __fget_files+0x20e/0x3c0 [ 95.411497][ T6249] ? do_preadv+0x1a6/0x270 [ 95.411514][ T6249] do_preadv+0x1a6/0x270 [ 95.411533][ T6249] ? __pfx_do_preadv+0x10/0x10 [ 95.411557][ T6249] do_syscall_64+0xcd/0xf80 [ 95.411579][ T6249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.411595][ T6249] RIP: 0033:0x7f0d5d38f749 [ 95.411608][ T6249] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.411623][ T6249] RSP: 002b:00007f0d5e2c2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 95.411639][ T6249] RAX: ffffffffffffffda RBX: 00007f0d5d5e6090 RCX: 00007f0d5d38f749 [ 95.411649][ T6249] RDX: 0000000000000001 RSI: 0000200000000d00 RDI: 0000000000000008 [ 95.411658][ T6249] RBP: 00007f0d5d413f91 R08: 0000000000000200 R09: 0000000000000000 [ 95.411668][ T6249] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 95.411678][ T6249] R13: 00007f0d5d5e6128 R14: 00007f0d5d5e6090 R15: 00007ffc7d96d0f8 [ 95.411702][ T6249] [ 95.716093][ T6251] mmap: syz.2.81 (6251) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 95.835773][ T30] audit: type=1400 audit(1767594784.925:256): avc: denied { connect } for pid=6212 comm="syz.1.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 95.903474][ T30] audit: type=1400 audit(1767594785.895:257): avc: denied { write } for pid=6229 comm="syz.2.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 95.976581][ T30] audit: type=1400 audit(1767594785.925:258): avc: denied { create } for pid=6223 comm="syz.4.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 96.078239][ T30] audit: type=1400 audit(1767594785.925:259): avc: denied { setopt } for pid=6223 comm="syz.4.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 96.518233][ T6263] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 96.524745][ T6263] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 96.532498][ T6264] vhci_hcd: connection closed [ 96.535940][ T6263] vhci_hcd vhci_hcd.0: Device attached [ 96.555834][ T13] vhci_hcd vhci_hcd.3: stop threads [ 96.568315][ T13] vhci_hcd vhci_hcd.3: release socket [ 96.593847][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 96.816730][ T6268] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 96.825608][ T6268] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 96.834760][ T6268] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 97.667908][ T6272] netlink: 28 bytes leftover after parsing attributes in process `syz.2.86'. [ 97.893925][ T6276] netlink: 8 bytes leftover after parsing attributes in process `syz.3.88'. [ 97.939275][ T30] audit: type=1400 audit(1767594790.255:260): avc: denied { append } for pid=6278 comm="syz.3.89" name="dlm_plock" dev="devtmpfs" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 98.076499][ T30] audit: type=1400 audit(1767594790.345:261): avc: denied { create } for pid=6273 comm="syz.2.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 98.414290][ T30] audit: type=1400 audit(1767594790.735:262): avc: denied { mount } for pid=6278 comm="syz.3.89" name="/" dev="ramfs" ino=10377 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 98.547369][ T30] audit: type=1400 audit(1767594790.865:263): avc: denied { read } for pid=6287 comm="syz.0.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 98.739164][ T30] audit: type=1400 audit(1767594790.895:264): avc: denied { create } for pid=6287 comm="syz.0.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 99.281277][ T30] audit: type=1400 audit(1767594790.895:265): avc: denied { bind } for pid=6287 comm="syz.0.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 99.302130][ T30] audit: type=1400 audit(1767594790.895:266): avc: denied { listen } for pid=6287 comm="syz.0.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 99.341428][ T30] audit: type=1400 audit(1767594790.895:267): avc: denied { connect } for pid=6287 comm="syz.0.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 99.452977][ T30] audit: type=1400 audit(1767594790.895:268): avc: denied { write } for pid=6287 comm="syz.0.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 99.518714][ T30] audit: type=1400 audit(1767594791.655:269): avc: denied { mounton } for pid=6296 comm="syz.4.94" path="/22/file0" dev="tmpfs" ino=130 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 99.719107][ T6311] netlink: 'syz.3.95': attribute type 2 has an invalid length. [ 99.727280][ T6311] netlink: 'syz.3.95': attribute type 2 has an invalid length. [ 99.962106][ T6315] netlink: 216 bytes leftover after parsing attributes in process `syz.1.96'. [ 99.972946][ T6315] netlink: 40 bytes leftover after parsing attributes in process `syz.1.96'. [ 100.042867][ T6315] netlink: 36 bytes leftover after parsing attributes in process `syz.1.96'. [ 100.828305][ T6323] netlink: 188 bytes leftover after parsing attributes in process `syz.0.99'. [ 100.861948][ T5900] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 101.043845][ T5900] usb 2-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config [ 101.056567][ T5900] usb 2-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=d1.6e [ 101.066035][ T5900] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.080099][ T5900] usb 2-1: Product: syz [ 101.091783][ T5900] usb 2-1: Manufacturer: syz [ 101.101534][ T5900] usb 2-1: SerialNumber: syz [ 101.209810][ T5900] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 101.209848][ T5900] dvb-usb: bulk message failed: -22 (3/0) [ 101.240544][ T5900] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 101.243315][ T5900] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 error while loading driver (-19) [ 101.243344][ T5900] dvb_usb_umt_010 2-1:54.0: probe with driver dvb_usb_umt_010 failed with error -22 [ 101.733379][ T6317] block nbd1: NBD_DISCONNECT [ 101.738719][ T6317] block nbd1: Disconnected due to user request. [ 101.745131][ T6317] block nbd1: shutting down sockets [ 101.786375][ T6317] netlink: 8 bytes leftover after parsing attributes in process `syz.1.98'. [ 101.819804][ T5880] usb 2-1: USB disconnect, device number 8 [ 102.248359][ T66] Bluetooth: hci5: Frame reassembly failed (-84) [ 102.256914][ T66] Bluetooth: hci5: Frame reassembly failed (-84) [ 102.812134][ T6344] netlink: 32 bytes leftover after parsing attributes in process `syz.1.105'. [ 102.982614][ T6346] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5124 sclass=netlink_route_socket pid=6346 comm=syz.4.106 [ 103.468106][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 103.468117][ T30] audit: type=1400 audit(1767594795.785:285): avc: denied { ioctl } for pid=6347 comm="syz.1.107" path="socket:[10526]" dev="sockfs" ino=10526 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 103.661519][ T6356] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 4, id = 0 [ 103.684190][ T6357] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 4, id = 1 [ 103.698844][ T30] audit: type=1400 audit(1767594795.825:286): avc: denied { setopt } for pid=6347 comm="syz.1.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 103.757592][ T6358] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 4, id = 2 [ 103.788036][ T6359] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 4, id = 3 [ 103.817241][ T30] audit: type=1400 audit(1767594795.825:287): avc: denied { write } for pid=6347 comm="syz.1.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 104.201947][ T5818] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 104.432415][ T30] audit: type=1400 audit(1767594796.745:288): avc: denied { unmount } for pid=5814 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 104.524388][ T6369] FAULT_INJECTION: forcing a failure. [ 104.524388][ T6369] name failslab, interval 1, probability 0, space 0, times 1 [ 104.537009][ T30] audit: type=1400 audit(1767594796.835:289): avc: denied { create } for pid=6368 comm="syz.4.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 104.564686][ T6369] CPU: 0 UID: 0 PID: 6369 Comm: syz.4.113 Not tainted syzkaller #0 PREEMPT(full) [ 104.564708][ T6369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 104.564719][ T6369] Call Trace: [ 104.564725][ T6369] [ 104.564732][ T6369] dump_stack_lvl+0x16c/0x1f0 [ 104.564760][ T6369] should_fail_ex+0x512/0x640 [ 104.564785][ T6369] ? fs_reclaim_acquire+0xae/0x150 [ 104.564818][ T6369] should_failslab+0xc2/0x120 [ 104.564841][ T6369] __kmalloc_noprof+0xeb/0x910 [ 104.564868][ T6369] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 104.564898][ T6369] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 104.564922][ T6369] tomoyo_realpath_from_path+0xc2/0x6e0 [ 104.564949][ T6369] ? tomoyo_profile+0x47/0x60 [ 104.564978][ T6369] tomoyo_path_number_perm+0x245/0x580 [ 104.564997][ T6369] ? tomoyo_path_number_perm+0x237/0x580 [ 104.565020][ T6369] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 104.565042][ T6369] ? find_held_lock+0x2b/0x80 [ 104.565091][ T6369] ? find_held_lock+0x2b/0x80 [ 104.565117][ T6369] ? hook_file_ioctl_common+0x144/0x410 [ 104.565151][ T6369] ? __fget_files+0x20e/0x3c0 [ 104.565181][ T6369] security_file_ioctl+0x9b/0x240 [ 104.565206][ T6369] __x64_sys_ioctl+0xb7/0x210 [ 104.565229][ T6369] do_syscall_64+0xcd/0xf80 [ 104.565254][ T6369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.565271][ T6369] RIP: 0033:0x7fe9b3b8f749 [ 104.565285][ T6369] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.565301][ T6369] RSP: 002b:00007fe9b4a46038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 104.565318][ T6369] RAX: ffffffffffffffda RBX: 00007fe9b3de5fa0 RCX: 00007fe9b3b8f749 [ 104.565329][ T6369] RDX: 0000200000000400 RSI: 00000000000089e0 RDI: 0000000000000004 [ 104.565339][ T6369] RBP: 00007fe9b4a46090 R08: 0000000000000000 R09: 0000000000000000 [ 104.565350][ T6369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.565359][ T6369] R13: 00007fe9b3de6038 R14: 00007fe9b3de5fa0 R15: 00007ffcf01deae8 [ 104.565385][ T6369] [ 104.804615][ T6373] netlink: 148 bytes leftover after parsing attributes in process `syz.1.112'. [ 104.881560][ T6369] ERROR: Out of memory at tomoyo_realpath_from_path. [ 105.202244][ T30] audit: type=1400 audit(1767594797.525:290): avc: denied { ioctl } for pid=6368 comm="syz.4.113" path="socket:[9848]" dev="sockfs" ino=9848 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 105.315860][ T30] audit: type=1400 audit(1767594797.565:291): avc: denied { create } for pid=6370 comm="syz.3.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 105.611314][ T30] audit: type=1400 audit(1767594797.735:292): avc: denied { write } for pid=6378 comm="syz.4.115" name="sg0" dev="devtmpfs" ino=776 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 105.729624][ T6386] hsr0: entered allmulticast mode [ 105.743372][ T6386] hsr_slave_0: entered allmulticast mode [ 105.749016][ T6386] hsr_slave_1: entered allmulticast mode [ 106.238224][ T6387] hsr_slave_0: left promiscuous mode [ 106.271513][ T6387] hsr_slave_1: left promiscuous mode [ 106.386702][ T30] audit: type=1400 audit(1767594797.735:293): avc: denied { open } for pid=6378 comm="syz.4.115" path="/dev/sg0" dev="devtmpfs" ino=776 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 106.411165][ T30] audit: type=1400 audit(1767594797.755:294): avc: denied { lock } for pid=6378 comm="syz.4.115" path="socket:[10566]" dev="sockfs" ino=10566 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 106.535147][ T6393] netlink: 216 bytes leftover after parsing attributes in process `syz.4.117'. [ 106.544217][ T6393] netlink: 40 bytes leftover after parsing attributes in process `syz.4.117'. [ 106.554280][ T6393] netlink: 36 bytes leftover after parsing attributes in process `syz.4.117'. [ 107.310970][ T6401] netlink: 216 bytes leftover after parsing attributes in process `syz.3.118'. [ 107.320338][ T6401] netlink: 40 bytes leftover after parsing attributes in process `syz.3.118'. [ 107.345008][ T6401] netlink: 36 bytes leftover after parsing attributes in process `syz.3.118'. [ 107.832587][ T6404] Zero length message leads to an empty skb [ 107.954027][ T6387] hsr0 (unregistering): left allmulticast mode [ 108.886850][ T6373] syz.1.112 (6373): drop_caches: 2 [ 108.994800][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 108.994815][ T30] audit: type=1400 audit(1767594801.315:301): avc: denied { create } for pid=6410 comm="syz.3.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 109.195354][ T30] audit: type=1400 audit(1767594801.515:302): avc: denied { name_bind } for pid=6410 comm="syz.3.121" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 109.217119][ T30] audit: type=1400 audit(1767594801.515:303): avc: denied { node_bind } for pid=6410 comm="syz.3.121" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 109.245660][ T6412] sp0: Synchronizing with TNC [ 109.291710][ T30] audit: type=1400 audit(1767594801.605:304): avc: denied { search } for pid=5485 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 109.384552][ T30] audit: type=1400 audit(1767594801.605:305): avc: denied { search } for pid=5485 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 109.450537][ T30] audit: type=1400 audit(1767594801.605:306): avc: denied { search } for pid=5485 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 109.796022][ T30] audit: type=1400 audit(1767594801.635:307): avc: denied { read } for pid=5485 comm="dhcpcd" name="n100" dev="tmpfs" ino=2514 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 109.842356][ T30] audit: type=1400 audit(1767594801.635:308): avc: denied { open } for pid=5485 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=2514 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 109.867222][ T30] audit: type=1400 audit(1767594801.635:309): avc: denied { getattr } for pid=5485 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=2514 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 109.991723][ T30] audit: type=1400 audit(1767594801.655:310): avc: denied { name_bind } for pid=6413 comm="syz.4.122" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 110.356720][ T6432] netlink: 28 bytes leftover after parsing attributes in process `syz.4.125'. [ 110.617383][ T6430] xt_bpf: check failed: parse error [ 110.640488][ T6430] SELinux: Context ? is not valid (left unmapped). [ 111.246771][ T6445] netlink: 52 bytes leftover after parsing attributes in process `syz.1.129'. [ 111.360730][ T6445] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6445 comm=syz.1.129 [ 111.724795][ T6453] FAULT_INJECTION: forcing a failure. [ 111.724795][ T6453] name failslab, interval 1, probability 0, space 0, times 0 [ 111.768066][ T6453] CPU: 1 UID: 0 PID: 6453 Comm: syz.1.131 Not tainted syzkaller #0 PREEMPT(full) [ 111.768091][ T6453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 111.768101][ T6453] Call Trace: [ 111.768107][ T6453] [ 111.768114][ T6453] dump_stack_lvl+0x16c/0x1f0 [ 111.768142][ T6453] should_fail_ex+0x512/0x640 [ 111.768168][ T6453] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 111.768187][ T6453] should_failslab+0xc2/0x120 [ 111.768209][ T6453] kmem_cache_alloc_noprof+0x83/0x770 [ 111.768228][ T6453] ? skb_clone+0x190/0x3f0 [ 111.768250][ T6453] ? skb_clone+0x190/0x3f0 [ 111.768265][ T6453] skb_clone+0x190/0x3f0 [ 111.768283][ T6453] netlink_deliver_tap+0xabd/0xd30 [ 111.768310][ T6453] netlink_unicast+0x64c/0x870 [ 111.768334][ T6453] ? __pfx_netlink_unicast+0x10/0x10 [ 111.768363][ T6453] netlink_sendmsg+0x8c8/0xdd0 [ 111.768388][ T6453] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.768416][ T6453] ____sys_sendmsg+0xa5d/0xc30 [ 111.768440][ T6453] ? copy_msghdr_from_user+0x10a/0x160 [ 111.768456][ T6453] ? __pfx_____sys_sendmsg+0x10/0x10 [ 111.768496][ T6453] ___sys_sendmsg+0x134/0x1d0 [ 111.768515][ T6453] ? __pfx____sys_sendmsg+0x10/0x10 [ 111.768562][ T6453] __sys_sendmsg+0x16d/0x220 [ 111.768580][ T6453] ? __pfx___sys_sendmsg+0x10/0x10 [ 111.768612][ T6453] do_syscall_64+0xcd/0xf80 [ 111.768636][ T6453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.768652][ T6453] RIP: 0033:0x7f0d5d38f749 [ 111.768666][ T6453] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.768682][ T6453] RSP: 002b:00007f0d5e2e3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 111.768699][ T6453] RAX: ffffffffffffffda RBX: 00007f0d5d5e5fa0 RCX: 00007f0d5d38f749 [ 111.768709][ T6453] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000003 [ 111.768719][ T6453] RBP: 00007f0d5e2e3090 R08: 0000000000000000 R09: 0000000000000000 [ 111.768728][ T6453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.768737][ T6453] R13: 00007f0d5d5e6038 R14: 00007f0d5d5e5fa0 R15: 00007ffc7d96d0f8 [ 111.768761][ T6453] [ 111.770058][ T6453] netlink: 4 bytes leftover after parsing attributes in process `syz.1.131'. [ 113.233208][ T6473] netlink: 'syz.4.137': attribute type 1 has an invalid length. [ 113.251265][ T6473] netlink: 476 bytes leftover after parsing attributes in process `syz.4.137'. [ 113.265108][ T6473] netlink: 1041 bytes leftover after parsing attributes in process `syz.4.137'. [ 113.903188][ T6480] netlink: 64 bytes leftover after parsing attributes in process `syz.4.140'. [ 113.970504][ T6480] syzkaller1: entered promiscuous mode [ 114.001960][ T6480] syzkaller1: entered allmulticast mode [ 114.377760][ T6483] netlink: 52 bytes leftover after parsing attributes in process `syz.2.142'. [ 114.414264][ T6486] netlink: 11 bytes leftover after parsing attributes in process `syz.3.141'. [ 114.430449][ T6489] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6489 comm=syz.2.142 [ 114.437685][ T6486] netlink: 24 bytes leftover after parsing attributes in process `syz.3.141'. [ 114.520284][ T6486] netlink: 24 bytes leftover after parsing attributes in process `syz.3.141'. [ 114.558945][ T6483] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.566129][ T6483] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.139205][ T6506] bridge0: entered allmulticast mode [ 115.467039][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 115.467054][ T30] audit: type=1800 audit(1767594807.785:319): pid=6512 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.152" name="file0" dev="overlay" ino=204 res=0 errno=0 [ 115.503688][ T6512] evm: overlay not supported [ 115.898659][ T6509] program syz.2.151 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 115.951913][ T6088] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 115.953195][ T6522] netlink: 12 bytes leftover after parsing attributes in process `syz.0.154'. [ 115.972758][ T6522] netlink: 4 bytes leftover after parsing attributes in process `syz.0.154'. [ 116.058550][ T30] audit: type=1400 audit(1767594808.215:320): avc: denied { read } for pid=6501 comm="syz.2.151" name="sg0" dev="devtmpfs" ino=776 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 116.254660][ T6088] usb 4-1: config 0 has no interfaces? [ 116.270666][ T6088] usb 4-1: New USB device found, idVendor=0424, idProduct=9e01, bcdDevice=b9.c4 [ 116.314136][ T6088] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.378060][ T6088] usb 4-1: Product: syz [ 116.393491][ T6088] usb 4-1: Manufacturer: syz [ 116.430276][ T6088] usb 4-1: SerialNumber: syz [ 116.500536][ T6088] usb 4-1: config 0 descriptor?? [ 116.747518][ T6088] usb 4-1: USB disconnect, device number 5 [ 117.625212][ T30] audit: type=1400 audit(1767594809.945:321): avc: denied { nlmsg_read } for pid=6553 comm="syz.4.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 117.625233][ T6558] netlink: 16 bytes leftover after parsing attributes in process `syz.4.157'. [ 118.666174][ T30] audit: type=1400 audit(1767594810.985:322): avc: denied { read } for pid=6585 comm="syz.4.162" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 118.779480][ T30] audit: type=1400 audit(1767594810.985:323): avc: denied { open } for pid=6585 comm="syz.4.162" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 118.779524][ T30] audit: type=1400 audit(1767594810.985:324): avc: denied { ioctl } for pid=6585 comm="syz.4.162" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x7010 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 118.848626][ T30] audit: type=1400 audit(1767594811.165:325): avc: denied { getopt } for pid=6589 comm="syz.2.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 120.707915][ T6608] netlink: 11 bytes leftover after parsing attributes in process `syz.4.168'. [ 120.716833][ T6608] netlink: 24 bytes leftover after parsing attributes in process `syz.4.168'. [ 120.725732][ T6608] netlink: 24 bytes leftover after parsing attributes in process `syz.4.168'. [ 120.762019][ T6613] netlink: 'syz.0.169': attribute type 1 has an invalid length. [ 120.770894][ T30] audit: type=1400 audit(1767594813.085:326): avc: denied { append } for pid=6612 comm="syz.0.169" name="event3" dev="devtmpfs" ino=1001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 120.858105][ T30] audit: type=1400 audit(1767594813.115:327): avc: denied { setattr } for pid=6612 comm="syz.0.169" name="event3" dev="devtmpfs" ino=1001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 120.913438][ T30] audit: type=1400 audit(1767594813.115:328): avc: denied { read } for pid=6612 comm="syz.0.169" name="usbmon6" dev="devtmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 120.945604][ T30] audit: type=1400 audit(1767594813.115:329): avc: denied { open } for pid=6612 comm="syz.0.169" path="/dev/usbmon6" dev="devtmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 120.981156][ T30] audit: type=1400 audit(1767594813.115:330): avc: denied { ioctl } for pid=6612 comm="syz.0.169" path="/dev/usbmon6" dev="devtmpfs" ino=734 ioctlcmd=0x9204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 121.043042][ T5947] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 121.302158][ T5947] usb 4-1: device descriptor read/64, error -71 [ 121.345172][ T30] audit: type=1400 audit(1767594813.665:331): avc: denied { ioctl } for pid=6620 comm="syz.2.172" path="socket:[11018]" dev="sockfs" ino=11018 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 121.370695][ T30] audit: type=1400 audit(1767594813.665:332): avc: denied { create } for pid=6620 comm="syz.2.172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 121.392133][ T30] audit: type=1400 audit(1767594813.665:333): avc: denied { bind } for pid=6620 comm="syz.2.172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 121.418969][ T30] audit: type=1400 audit(1767594813.665:334): avc: denied { ioctl } for pid=6620 comm="syz.2.172" path="socket:[11447]" dev="sockfs" ino=11447 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 121.466814][ T30] audit: type=1400 audit(1767594813.665:335): avc: denied { read } for pid=6620 comm="syz.2.172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 121.571957][ T5947] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 121.712162][ T5947] usb 4-1: device descriptor read/64, error -71 [ 121.824608][ T5947] usb usb4-port1: attempt power cycle [ 121.902021][ T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 122.074437][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 122.095878][ T10] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 122.115320][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 129 [ 122.135738][ T10] usb 5-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 122.145636][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.156627][ T10] usb 5-1: config 0 descriptor?? [ 122.211941][ T5947] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 122.354755][ T5947] usb 4-1: device descriptor read/8, error -71 [ 122.386425][ T6645] netlink: 'syz.4.177': attribute type 1 has an invalid length. [ 122.960488][ T5947] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 122.969775][ T6633] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 123.002794][ T5947] usb 4-1: device descriptor read/8, error -71 [ 123.047574][ T10] usb 5-1: string descriptor 0 read error: -71 [ 123.058489][ T10] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 123.067853][ T10] usb 5-1: USB disconnect, device number 3 [ 123.223429][ T5947] usb usb4-port1: unable to enumerate USB device [ 123.657055][ T6657] netlink: 11 bytes leftover after parsing attributes in process `syz.0.182'. [ 123.665936][ T6657] netlink: 24 bytes leftover after parsing attributes in process `syz.0.182'. [ 123.675295][ T6657] netlink: 24 bytes leftover after parsing attributes in process `syz.0.182'. [ 124.498920][ T6672] netlink: 188 bytes leftover after parsing attributes in process `syz.1.185'. [ 125.292009][ T5873] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 125.292021][ T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 125.491921][ T10] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 125.511928][ T5873] usb 3-1: Using ep0 maxpacket: 8 [ 125.530377][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.532538][ T5873] usb 3-1: New USB device found, idVendor=0471, idProduct=0313, bcdDevice=81.d5 [ 125.548019][ T5873] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.549664][ T10] usb 1-1: config 0 descriptor?? [ 125.598796][ T10] cp210x 1-1:0.0: cp210x converter detected [ 125.607863][ T5873] usb 3-1: Product: syz [ 125.629525][ T5873] usb 3-1: Manufacturer: syz [ 125.690386][ T5873] usb 3-1: SerialNumber: syz [ 125.746852][ T5873] usb 3-1: config 0 descriptor?? [ 125.802290][ T10] cp210x 1-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 125.817067][ T5873] pwc: Philips PCVC720K/40 (ToUCam XS) USB webcam detected. [ 125.847126][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 125.849196][ T30] audit: type=1400 audit(1767594818.165:339): avc: denied { shutdown } for pid=6690 comm="syz.4.191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 125.849846][ T6692] bridge0: entered promiscuous mode [ 125.888213][ T10] cp210x 1-1:0.0: querying part number failed [ 125.908020][ T10] usb 1-1: cp210x converter now attached to ttyUSB0 [ 126.044281][ T30] audit: type=1400 audit(1767594818.365:340): avc: denied { nlmsg_write } for pid=6673 comm="syz.2.186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 126.092671][ T6679] netlink: 64 bytes leftover after parsing attributes in process `syz.2.186'. [ 126.647851][ T30] audit: type=1400 audit(1767594818.835:341): avc: denied { execute } for pid=6697 comm="syz.1.192" path="/35/file0" dev="tmpfs" ino=206 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 126.691917][ T6088] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 126.786930][ T30] audit: type=1804 audit(1767594818.835:342): pid=6699 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.192" name="/newroot/35/file0" dev="tmpfs" ino=206 res=1 errno=0 [ 126.891943][ T6088] usb 4-1: device descriptor read/64, error -71 [ 127.068718][ T6704] netlink: 11 bytes leftover after parsing attributes in process `syz.1.194'. [ 127.083425][ T6704] netlink: 24 bytes leftover after parsing attributes in process `syz.1.194'. [ 127.119110][ T6704] netlink: 24 bytes leftover after parsing attributes in process `syz.1.194'. [ 127.265057][ T5900] usb 1-1: USB disconnect, device number 3 [ 127.274052][ T5900] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 127.281182][ T6690] bridge0: left promiscuous mode [ 127.327726][ T5900] cp210x 1-1:0.0: device disconnected [ 127.382090][ T6088] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 128.228081][ T6088] usb 4-1: device descriptor read/64, error -71 [ 128.259342][ T5873] pwc: send_video_command error -71 [ 128.265105][ T5873] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 128.273482][ T5873] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 128.342194][ T6088] usb usb4-port1: attempt power cycle [ 128.382664][ T5873] usb 3-1: USB disconnect, device number 5 [ 128.415527][ T6713] netlink: 88 bytes leftover after parsing attributes in process `syz.0.196'. [ 128.525509][ T6717] netlink: 52 bytes leftover after parsing attributes in process `syz.4.199'. [ 128.620265][ T6717] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.627581][ T6717] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.701941][ T6088] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 128.738727][ T6720] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6720 comm=syz.4.199 [ 128.831467][ T6720] netlink: 76 bytes leftover after parsing attributes in process `syz.4.199'. [ 128.919487][ T30] audit: type=1400 audit(1767594821.205:343): avc: denied { read write } for pid=6721 comm="syz.1.200" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 128.954316][ T6720] netlink: 52 bytes leftover after parsing attributes in process `syz.4.199'. [ 129.143727][ T30] audit: type=1400 audit(1767594821.225:344): avc: denied { open } for pid=6721 comm="syz.1.200" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 129.303175][ T6088] usb 4-1: device descriptor read/8, error -71 [ 129.344338][ T30] audit: type=1400 audit(1767594821.375:345): avc: denied { mount } for pid=6721 comm="syz.1.200" name="/" dev="configfs" ino=74 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 130.077989][ T30] audit: type=1400 audit(1767594822.395:346): avc: denied { read } for pid=6733 comm="syz.2.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 130.143059][ T30] audit: type=1400 audit(1767594822.455:347): avc: denied { ioctl } for pid=6733 comm="syz.2.202" path="/dev/sg0" dev="devtmpfs" ino=776 ioctlcmd=0x2288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 130.152649][ T6737] netlink: 12 bytes leftover after parsing attributes in process `syz.2.202'. [ 130.359331][ T30] audit: type=1326 audit(1767594822.675:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6735 comm="syz.4.205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9b3b8f749 code=0x7ffc0000 [ 130.452407][ T6747] netlink: 11 bytes leftover after parsing attributes in process `syz.1.206'. [ 130.452476][ T6747] netlink: 24 bytes leftover after parsing attributes in process `syz.1.206'. [ 130.452523][ T6747] netlink: 24 bytes leftover after parsing attributes in process `syz.1.206'. [ 131.023436][ T30] audit: type=1326 audit(1767594822.705:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6735 comm="syz.4.205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9b3b8f749 code=0x7ffc0000 [ 131.048017][ T30] audit: type=1326 audit(1767594822.715:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6735 comm="syz.4.205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fe9b3b8f749 code=0x7ffc0000 [ 131.522173][ T30] audit: type=1326 audit(1767594822.715:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6735 comm="syz.4.205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9b3b8f749 code=0x7ffc0000 [ 132.007245][ T30] audit: type=1326 audit(1767594822.715:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6735 comm="syz.4.205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe9b3b8f749 code=0x7ffc0000 [ 132.088659][ T30] audit: type=1326 audit(1767594822.715:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6735 comm="syz.4.205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9b3b8f749 code=0x7ffc0000 [ 132.141948][ T30] audit: type=1326 audit(1767594822.725:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6735 comm="syz.4.205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe9b3b8f749 code=0x7ffc0000 [ 132.843396][ T6766] veth1_macvtap: left promiscuous mode [ 132.848973][ T6766] macsec0: entered promiscuous mode [ 132.849305][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.860910][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.930025][ T30] audit: type=1326 audit(1767594822.725:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6735 comm="syz.4.205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9b3b8f749 code=0x7ffc0000 [ 133.025071][ T6769] netlink: 8 bytes leftover after parsing attributes in process `syz.2.214'. [ 133.282111][ T30] audit: type=1326 audit(1767594822.725:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6735 comm="syz.4.205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fe9b3b8f749 code=0x7ffc0000 [ 133.391953][ T30] audit: type=1326 audit(1767594822.725:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6735 comm="syz.4.205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9b3b8f749 code=0x7ffc0000 [ 133.466416][ T30] audit: type=1326 audit(1767594822.725:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6735 comm="syz.4.205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe9b3b8f749 code=0x7ffc0000 [ 134.029008][ T6788] dvmrp0: entered allmulticast mode [ 135.425836][ T6806] netlink: 88 bytes leftover after parsing attributes in process `syz.0.221'. [ 136.028894][ T6816] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=49936 sclass=netlink_route_socket pid=6816 comm=syz.1.224 [ 136.254875][ T5880] libceph: connect (1)[c::]:6789 error -101 [ 136.273579][ T5880] libceph: mon0 (1)[c::]:6789 connect error [ 136.281608][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 136.281616][ T30] audit: type=1400 audit(1767594828.595:379): avc: denied { remove_name } for pid=6824 comm="rm" name="resolv.conf.lapb4.link" dev="tmpfs" ino=2949 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 136.312850][ T6822] ceph: No mds server is up or the cluster is laggy [ 136.322203][ T30] audit: type=1400 audit(1767594828.635:380): avc: denied { unlink } for pid=6824 comm="rm" name="resolv.conf.lapb4.link" dev="tmpfs" ino=2949 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 136.471958][ T5947] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 136.575289][ T6832] syzkaller0: entered promiscuous mode [ 136.660092][ T6835] netlink: 216 bytes leftover after parsing attributes in process `syz.1.227'. [ 136.669476][ T6835] netlink: 40 bytes leftover after parsing attributes in process `syz.1.227'. [ 136.693973][ T6835] netlink: 36 bytes leftover after parsing attributes in process `syz.1.227'. [ 136.711228][ T30] audit: type=1400 audit(1767594828.955:381): avc: denied { create } for pid=6828 comm="syz.1.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 137.014991][ T6832] syzkaller0: entered allmulticast mode [ 137.051939][ T5947] usb 1-1: Using ep0 maxpacket: 16 [ 137.065140][ T5947] usb 1-1: New USB device found, idVendor=0458, idProduct=704a, bcdDevice=3a.55 [ 137.084687][ T5947] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.103297][ T5947] usb 1-1: Product: syz [ 137.334448][ T5947] usb 1-1: Manufacturer: syz [ 137.346682][ T5947] usb 1-1: SerialNumber: syz [ 137.393267][ T5947] usb 1-1: config 0 descriptor?? [ 137.453592][ T5947] gspca_main: gspca_sn9c20x-2.14.0 probing 0458:704a [ 137.824620][ T6848] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 137.831153][ T6848] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 137.872320][ T6849] vhci_hcd: connection closed [ 137.872474][ T6848] vhci_hcd vhci_hcd.0: Device attached [ 137.973024][ T1089] vhci_hcd vhci_hcd.1: stop threads [ 137.978246][ T1089] vhci_hcd vhci_hcd.1: release socket [ 138.466308][ T6859] input: syz1 as /devices/virtual/input/input7 [ 138.933034][ T5947] gspca_sn9c20x: Write register 1001 failed -110 [ 138.940538][ T5947] gspca_sn9c20x: Device initialization failed [ 138.951114][ T5947] gspca_sn9c20x 1-1:0.0: probe with driver gspca_sn9c20x failed with error -110 [ 139.382912][ T1089] vhci_hcd vhci_hcd.1: disconnect device [ 139.974450][ T6869] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 140.000676][ T6869] CIFS mount error: No usable UNC path provided in device string! [ 140.000676][ T6869] [ 140.010843][ T6869] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 140.994740][ T30] audit: type=1400 audit(1767594833.305:382): avc: denied { watch watch_reads } for pid=6877 comm="syz.1.235" path="/45/file0" dev="tmpfs" ino=261 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 141.200935][ T6088] usb 1-1: USB disconnect, device number 4 [ 141.315242][ T6061] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 141.715244][ T6061] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 141.755398][ T6061] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 141.771560][ T6061] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 141.780557][ T6061] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.077040][ T6061] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 142.086171][ T6061] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 142.111689][ T6061] usb 2-1: Product: syz [ 142.138471][ T6061] usb 2-1: Manufacturer: syz [ 142.198654][ T6061] cdc_wdm 2-1:1.0: skipping garbage [ 142.224431][ T6061] cdc_wdm 2-1:1.0: skipping garbage [ 142.251095][ T6061] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 142.292247][ T6061] cdc_wdm 2-1:1.0: Unknown control protocol [ 142.396760][ T30] audit: type=1400 audit(1767594834.715:383): avc: denied { read write } for pid=6877 comm="syz.1.235" name="cdc-wdm0" dev="devtmpfs" ino=2872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 142.425088][ T6884] netlink: 224 bytes leftover after parsing attributes in process `syz.1.235'. [ 142.446621][ T5818] Bluetooth: hci4: connection err: -111 [ 142.549759][ T30] audit: type=1400 audit(1767594834.745:384): avc: denied { open } for pid=6877 comm="syz.1.235" path="/dev/cdc-wdm0" dev="devtmpfs" ino=2872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 142.648633][ T6902] syzkaller0: entered promiscuous mode [ 142.655336][ T6902] syzkaller0: entered allmulticast mode [ 142.664294][ T6902] TC_ACT_REPEAT abuse ? [ 143.957553][ T10] usb 2-1: USB disconnect, device number 9 [ 143.984520][ T30] audit: type=1400 audit(1767594836.305:385): avc: denied { listen } for pid=6932 comm="syz.0.237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 144.307850][ T30] audit: type=1400 audit(1767594836.435:386): avc: denied { ioctl } for pid=6932 comm="syz.0.237" path="socket:[12076]" dev="sockfs" ino=12076 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 145.518476][ T30] audit: type=1400 audit(1767594837.735:387): avc: denied { map } for pid=6947 comm="syz.0.246" path="socket:[12650]" dev="sockfs" ino=12650 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 145.543976][ T6956] netlink: 8 bytes leftover after parsing attributes in process `syz.4.247'. [ 145.651946][ T6956] netlink: 4 bytes leftover after parsing attributes in process `syz.4.247'. [ 145.661899][ T6956] netlink: 'syz.4.247': attribute type 12 has an invalid length. [ 145.669620][ T6956] netlink: 'syz.4.247': attribute type 11 has an invalid length. [ 145.781954][ T6061] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 146.357483][ T6061] usb 4-1: Using ep0 maxpacket: 8 [ 146.361271][ T6061] usb 4-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 146.388682][ T6061] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 146.399619][ T6061] usb 4-1: Product: syz [ 146.407020][ T6061] usb 4-1: Manufacturer: syz [ 146.419315][ T6061] usb 4-1: SerialNumber: syz [ 146.433998][ T6061] usb 4-1: config 0 descriptor?? [ 146.642902][ T6975] netlink: 'syz.4.249': attribute type 21 has an invalid length. [ 146.700796][ T6975] IPv6: NLM_F_CREATE should be specified when creating new route [ 147.140410][ T6981] netlink: 'syz.1.251': attribute type 1 has an invalid length. [ 147.178073][ T6061] usb 4-1: USB disconnect, device number 14 [ 147.289705][ T5821] udevd[5821]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 147.491180][ T6989] FAULT_INJECTION: forcing a failure. [ 147.491180][ T6989] name failslab, interval 1, probability 0, space 0, times 0 [ 147.512021][ T5991] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 147.521901][ T6989] CPU: 1 UID: 0 PID: 6989 Comm: syz.0.252 Not tainted syzkaller #0 PREEMPT(full) [ 147.521923][ T6989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 147.521933][ T6989] Call Trace: [ 147.521939][ T6989] [ 147.521945][ T6989] dump_stack_lvl+0x16c/0x1f0 [ 147.521972][ T6989] should_fail_ex+0x512/0x640 [ 147.521998][ T6989] ? fs_reclaim_acquire+0xae/0x150 [ 147.522024][ T6989] should_failslab+0xc2/0x120 [ 147.522047][ T6989] __kmalloc_noprof+0xeb/0x910 [ 147.522073][ T6989] ? tomoyo_encode2+0x100/0x3e0 [ 147.522100][ T6989] ? tomoyo_encode2+0x100/0x3e0 [ 147.522129][ T6989] tomoyo_encode2+0x100/0x3e0 [ 147.522155][ T6989] tomoyo_unix_entry+0x341/0x650 [ 147.522178][ T6989] ? __pfx_tomoyo_unix_entry+0x10/0x10 [ 147.522217][ T6989] tomoyo_socket_connect_permission+0x31f/0x360 [ 147.522243][ T6989] ? __pfx_tomoyo_socket_connect_permission+0x10/0x10 [ 147.522272][ T6989] ? __might_fault+0xe3/0x190 [ 147.522287][ T6989] ? __might_fault+0x13b/0x190 [ 147.522308][ T6989] security_socket_connect+0x9b/0x240 [ 147.522328][ T6989] __sys_connect_file+0x8f/0x1a0 [ 147.522357][ T6989] __sys_connect+0x13b/0x160 [ 147.522381][ T6989] ? __pfx___sys_connect+0x10/0x10 [ 147.522414][ T6989] ? __pfx___do_sys_rt_sigreturn+0x10/0x10 [ 147.522445][ T6989] __x64_sys_connect+0x72/0xb0 [ 147.522468][ T6989] ? lockdep_hardirqs_on+0x7c/0x110 [ 147.522490][ T6989] do_syscall_64+0xcd/0xf80 [ 147.522513][ T6989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.522530][ T6989] RIP: 0033:0x7f5d6258f749 [ 147.522543][ T6989] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.522558][ T6989] RSP: 002b:00007f5d6338c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 147.522573][ T6989] RAX: ffffffffffffffda RBX: 00007f5d627e5fa0 RCX: 00007f5d6258f749 [ 147.522584][ T6989] RDX: 000000000000006e RSI: 0000200000000280 RDI: 0000000000000005 [ 147.522594][ T6989] RBP: 00007f5d6338c090 R08: 0000000000000000 R09: 0000000000000000 [ 147.522603][ T6989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 147.522613][ T6989] R13: 00007f5d627e6038 R14: 00007f5d627e5fa0 R15: 00007ffe398e5258 [ 147.522636][ T6989] [ 148.182010][ T5991] usb 2-1: Using ep0 maxpacket: 32 [ 148.196884][ T5991] usb 2-1: config 4 has an invalid interface number: 128 but max is 0 [ 148.208977][ T5991] usb 2-1: config 4 has no interface number 0 [ 148.621821][ T5991] usb 2-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.704828][ T5991] usb 2-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.756140][ T5991] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 148.798542][ T5991] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.977923][ T5991] hub 2-1:4.128: USB hub found [ 149.088605][ T5991] hub 2-1:4.128: config failed, hub has too many ports! (err -19) [ 149.118405][ T30] audit: type=1400 audit(1767594841.435:388): avc: denied { map } for pid=7005 comm="syz.2.254" path="/dev/comedi4" dev="devtmpfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 149.154848][ T30] audit: type=1400 audit(1767594841.435:389): avc: denied { ioctl } for pid=7005 comm="syz.2.254" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 149.676555][ T6061] usb 2-1: USB disconnect, device number 10 [ 150.411807][ T30] audit: type=1400 audit(1767594842.725:390): avc: denied { append } for pid=7025 comm="syz.0.259" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 151.828522][ T5947] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 152.338638][ T30] audit: type=1400 audit(1767594844.655:391): avc: denied { read } for pid=7058 comm="syz.4.270" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 152.381061][ T30] audit: type=1400 audit(1767594844.655:392): avc: denied { open } for pid=7058 comm="syz.4.270" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 152.427831][ T5947] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 152.441075][ T30] audit: type=1400 audit(1767594844.655:393): avc: denied { ioctl } for pid=7058 comm="syz.4.270" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 152.466325][ T5947] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 152.478185][ T5947] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 152.494359][ T5947] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 152.575503][ T5947] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 152.589657][ T7064] netlink: 44 bytes leftover after parsing attributes in process `syz.1.272'. [ 152.600826][ T5947] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 152.610294][ T5947] usb 3-1: Manufacturer: syz [ 152.629753][ T5947] usb 3-1: config 0 descriptor?? [ 152.647108][ T7064] netlink: 72 bytes leftover after parsing attributes in process `syz.1.272'. [ 152.657044][ T30] audit: type=1400 audit(1767594844.975:394): avc: denied { getopt } for pid=7063 comm="syz.1.272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 152.848724][ T7067] netlink: 16 bytes leftover after parsing attributes in process `syz.0.273'. [ 153.077119][ T30] audit: type=1400 audit(1767594845.395:395): avc: denied { create } for pid=7070 comm="syz.1.274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 153.213726][ T5947] rc_core: IR keymap rc-hauppauge not found [ 153.219714][ T5947] Registered IR keymap rc-empty [ 153.226010][ T5947] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 153.237426][ T7075] netlink: 8 bytes leftover after parsing attributes in process `syz.4.276'. [ 153.256252][ T5947] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 153.280744][ T7075] netlink: 'syz.4.276': attribute type 20 has an invalid length. [ 153.284514][ T5947] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 153.350899][ T5947] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input8 [ 153.368201][ T5947] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 153.368847][ T7075] netlink: 'syz.4.276': attribute type 29 has an invalid length. [ 153.392952][ T5947] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 153.415596][ T7075] netlink: 4 bytes leftover after parsing attributes in process `syz.4.276'. [ 153.418056][ T5947] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 153.461672][ T5947] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 153.500439][ T5947] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 153.532771][ T5947] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 153.575959][ T5947] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 153.613447][ T5947] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 153.643592][ T5947] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 153.672224][ T5947] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 153.703378][ T5947] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 153.713563][ T5947] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 153.735017][ T5947] usb 3-1: USB disconnect, device number 6 [ 153.781996][ T5991] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 153.903415][ T7090] netlink: 8 bytes leftover after parsing attributes in process `syz.3.282'. [ 153.933946][ T5991] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.944600][ T5991] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 153.971834][ T5991] usb 5-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 153.984621][ T5991] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.997873][ T5991] usb 5-1: config 0 descriptor?? [ 154.061965][ T5947] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 154.215916][ T5947] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.234277][ T5947] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.321957][ T5951] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 154.387597][ T5947] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 8.00 [ 154.402031][ T5947] usb 3-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 154.415480][ T5947] usb 3-1: Product: syz [ 154.421928][ T6061] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 154.851223][ T30] audit: type=1400 audit(1767594847.005:396): avc: denied { block_suspend } for pid=7084 comm="syz.4.280" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 154.883854][ T5991] hid_parser_main: 66 callbacks suppressed [ 154.883873][ T5991] elecom 0003:056E:00E6.0004: unknown main item tag 0x0 [ 154.898470][ T5947] usb 3-1: config 0 descriptor?? [ 154.905366][ T5991] elecom 0003:056E:00E6.0004: unknown main item tag 0x0 [ 154.922652][ T5951] usb 1-1: Using ep0 maxpacket: 8 [ 154.931414][ T5991] elecom 0003:056E:00E6.0004: unknown main item tag 0x0 [ 154.946471][ T5951] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 154.955645][ T5991] elecom 0003:056E:00E6.0004: unknown main item tag 0x0 [ 154.963747][ T5951] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.971817][ T5991] elecom 0003:056E:00E6.0004: unknown main item tag 0x0 [ 154.979806][ T5951] usb 1-1: Product: syz [ 154.985300][ T5991] elecom 0003:056E:00E6.0004: hidraw0: USB HID v0.00 Device [HID 056e:00e6] on usb-dummy_hcd.4-1/input0 [ 154.997760][ T5951] usb 1-1: Manufacturer: syz [ 155.006588][ T5951] usb 1-1: SerialNumber: syz [ 155.028331][ T5991] usb 5-1: USB disconnect, device number 4 [ 155.039652][ T5951] usb 1-1: config 0 descriptor?? [ 155.060249][ T5951] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 155.070593][ T7107] fido_id[7107]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 155.086236][ T6061] usb 4-1: Using ep0 maxpacket: 8 [ 155.187193][ T6061] usb 4-1: New USB device found, idVendor=0471, idProduct=0313, bcdDevice=81.d5 [ 155.196593][ T6061] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.204798][ T6061] usb 4-1: Product: syz [ 155.214972][ T6061] usb 4-1: Manufacturer: syz [ 155.224865][ T6061] usb 4-1: SerialNumber: syz [ 155.355288][ T6061] usb 4-1: config 0 descriptor?? [ 155.396702][ T6061] pwc: Philips PCVC720K/40 (ToUCam XS) USB webcam detected. [ 155.398985][ T5947] cm6533_jd 0003:0D8C:0022.0005: unknown main item tag 0x0 [ 155.423206][ T5947] cm6533_jd 0003:0D8C:0022.0005: unknown main item tag 0x0 [ 155.602584][ T7087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.906905][ T7096] netlink: 64 bytes leftover after parsing attributes in process `syz.3.283'. [ 155.924541][ T7087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.948185][ T5947] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0D8C:0022.0005/input/input9 [ 155.951086][ T7087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.991287][ T7087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.027190][ T5947] cm6533_jd 0003:0D8C:0022.0005: input,hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 156.091013][ T5947] usb 3-1: USB disconnect, device number 7 [ 156.243798][ T7114] fido_id[7114]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 156.271918][ T5815] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 156.283747][ T7118] ip6gre1: entered allmulticast mode [ 156.349107][ T5951] gspca_sonixj: reg_w1 err -71 [ 156.422000][ T5815] usb 5-1: Using ep0 maxpacket: 8 [ 156.429058][ T5815] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 156.431982][ T5951] sonixj 1-1:0.0: probe with driver sonixj failed with error -71 [ 156.440508][ T5815] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.483410][ T5951] usb 1-1: USB disconnect, device number 5 [ 156.504428][ T5815] pvrusb2: Hardware description: Terratec Grabster AV400 [ 156.529179][ T5815] pvrusb2: ********** [ 156.548529][ T5815] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 156.594205][ T5815] pvrusb2: Important functionality might not be entirely working. [ 156.617304][ T5815] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 156.667204][ T5815] pvrusb2: ********** [ 156.701331][ T2340] pvrusb2: Invalid write control endpoint [ 156.864543][ T2340] pvrusb2: Invalid write control endpoint [ 156.875801][ T2340] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 156.889410][ T2340] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 156.951999][ T2340] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 156.975077][ T2340] pvrusb2: Device being rendered inoperable [ 157.000585][ T2340] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 157.095756][ T7131] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 157.119237][ T7131] netlink: 'syz.4.288': attribute type 5 has an invalid length. [ 157.132864][ T7131] ip6erspan0: entered promiscuous mode [ 157.149386][ T7131] pvrusb2: Killing an I2C read to 9 that has wlen too large (desired=61 limit=60) [ 157.186097][ T2340] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 157.207056][ T2340] pvrusb2: Attached sub-driver cx25840 [ 157.236955][ T30] audit: type=1400 audit(1767594849.555:397): avc: denied { read } for pid=7132 comm="syz.0.294" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 157.239912][ T2340] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 157.278755][ T2340] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 157.670555][ T30] audit: type=1400 audit(1767594849.595:398): avc: denied { bind } for pid=7133 comm="syz.1.293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 157.790863][ T6061] pwc: send_video_command error -71 [ 157.803264][ T6061] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 157.865157][ T6061] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 158.064466][ T6061] usb 4-1: USB disconnect, device number 15 [ 158.101261][ T30] audit: type=1400 audit(1767594850.245:399): avc: denied { shutdown } for pid=7137 comm="syz.0.296" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 158.711948][ T5951] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 158.955558][ T5951] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 158.970115][ T5951] usb 3-1: config 0 has no interface number 0 [ 159.024355][ T5951] usb 3-1: config 0 interface 41 has no altsetting 0 [ 159.040209][ T5951] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 159.056972][ T5951] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.076644][ T5951] usb 3-1: Product: syz [ 159.193370][ T7161] vivid-001: ================= START STATUS ================= [ 159.201242][ T7161] vivid-001: Radio HW Seek Mode: Bounded [ 159.207519][ T7161] vivid-001: Radio Programmable HW Seek: false [ 159.213925][ T7161] vivid-001: RDS Rx I/O Mode: Block I/O [ 159.219729][ T7161] vivid-001: Generate RBDS Instead of RDS: false [ 159.226259][ T7161] vivid-001: RDS Reception: true [ 159.232045][ T7161] vivid-001: RDS Program Type: 0 inactive [ 159.237967][ T7161] vivid-001: RDS PS Name: inactive [ 159.244521][ T7161] vivid-001: RDS Radio Text: inactive [ 159.250679][ T7161] vivid-001: RDS Traffic Announcement: false inactive [ 159.257610][ T7161] vivid-001: RDS Traffic Program: false inactive [ 159.264188][ T7161] vivid-001: RDS Music: false inactive [ 159.269870][ T7161] vivid-001: ================== END STATUS ================== [ 159.398687][ T5951] usb 3-1: Manufacturer: syz [ 159.405551][ T5951] usb 3-1: SerialNumber: syz [ 159.419980][ T5951] usb 3-1: config 0 descriptor?? [ 159.771998][ T30] audit: type=1400 audit(1767594852.075:400): avc: denied { append } for pid=7170 comm="syz.3.305" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 159.791993][ T6061] usb 5-1: USB disconnect, device number 5 [ 159.891448][ T7174] process 'syz.3.305' launched './file1' with NULL argv: empty string added [ 159.919655][ T30] audit: type=1400 audit(1767594852.225:401): avc: denied { execute_no_trans } for pid=7170 comm="syz.3.305" path="/58/file1" dev="tmpfs" ino=340 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 160.124238][ T5951] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 160.230045][ T5951] usb 3-1: USB disconnect, device number 8 [ 161.330533][ T7189] Illegal XDP return value 4294967294 on prog (id 72) dev N/A, expect packet loss! [ 162.611913][ T6061] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 162.643084][ T7209] netlink: 64 bytes leftover after parsing attributes in process `syz.4.317'. [ 162.838059][ T6061] usb 3-1: config 222 has an invalid interface number: 233 but max is 0 [ 162.846616][ T6061] usb 3-1: config 222 has no interface number 0 [ 162.885489][ T6061] usb 3-1: New USB device found, idVendor=0f11, idProduct=1100, bcdDevice=2e.87 [ 162.901437][ T6061] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.911666][ T6061] usb 3-1: Product: syz [ 162.917418][ T5947] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 162.917996][ T6061] usb 3-1: Manufacturer: syz [ 162.985112][ T6061] usb 3-1: SerialNumber: syz [ 163.111502][ T7215] hsr0: entered allmulticast mode [ 163.125157][ T7215] hsr_slave_0: entered allmulticast mode [ 163.130811][ T7215] hsr_slave_1: entered allmulticast mode [ 163.157770][ T7215] hsr_slave_0: left promiscuous mode [ 163.164157][ T5947] usb 5-1: config index 0 descriptor too short (expected 7768, got 18) [ 163.174662][ T7215] hsr_slave_1: left promiscuous mode [ 163.174662][ T5947] usb 5-1: config 0 has an invalid interface number: 112 but max is 0 [ 163.174683][ T5947] usb 5-1: config 0 has no interface number 0 [ 163.194941][ T5947] usb 5-1: too many endpoints for config 0 interface 112 altsetting 58: 105, using maximum allowed: 30 [ 163.209971][ T5947] usb 5-1: config 0 interface 112 altsetting 58 has 0 endpoint descriptors, different from the interface descriptor's value: 105 [ 163.210576][ T7215] hsr0 (unregistering): left allmulticast mode [ 163.236541][ T5947] usb 5-1: config 0 interface 112 has no altsetting 0 [ 163.247015][ T5947] usb 5-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 163.255868][ T6061] ldusb 3-1:222.233: Interrupt in endpoint not found [ 163.258112][ T5947] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.265426][ T6061] usb 3-1: USB disconnect, device number 9 [ 163.280926][ T5947] usb 5-1: config 0 descriptor?? [ 163.351741][ T5947] ftdi_sio 5-1:0.112: FTDI USB Serial Device converter detected [ 163.362058][ T5951] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 163.392432][ T5947] ftdi_sio ttyUSB0: unknown device type: 0x524d [ 163.442169][ T6088] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 163.522473][ T5951] usb 4-1: too many configurations: 70, using maximum allowed: 8 [ 163.531108][ T5951] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.545976][ T5951] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 163.570152][ T5951] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.619854][ T5951] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 163.657821][ T5951] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.667756][ T5951] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 163.683730][ T5951] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.687918][ T6088] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 163.697846][ T5951] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 163.736429][ T6088] usb 2-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 163.736819][ T5951] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.755640][ T5951] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 163.774021][ T5951] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.783899][ T5951] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 163.788440][ T6088] usb 2-1: config 220 interface 0 has no altsetting 0 [ 163.797876][ T5951] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.830985][ T5951] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 163.845024][ T5951] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.855087][ T5951] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 163.874969][ T5951] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 163.889957][ T6088] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 163.899237][ T6088] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.907605][ T5951] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.923735][ T5951] usb 4-1: config 0 descriptor?? [ 163.939746][ T6088] usb 2-1: Product: syz [ 163.946009][ T6088] usb 2-1: Manufacturer: syz [ 163.985747][ T6088] usb 2-1: SerialNumber: syz [ 164.046300][ T6061] usb 5-1: USB disconnect, device number 6 [ 164.063606][ T6061] ftdi_sio 5-1:0.112: device disconnected [ 164.421942][ T5947] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 164.439533][ T5951] lua 0003:1E7D:2C2E.0006: unknown main item tag 0x0 [ 164.465784][ T6088] usb 2-1: USB disconnect, device number 11 [ 164.480209][ T5951] lua 0003:1E7D:2C2E.0006: unknown main item tag 0x0 [ 164.506609][ T5951] lua 0003:1E7D:2C2E.0006: unknown main item tag 0x0 [ 164.522782][ T5951] lua 0003:1E7D:2C2E.0006: unknown main item tag 0x0 [ 164.539765][ T5951] lua 0003:1E7D:2C2E.0006: unknown main item tag 0x0 [ 164.704703][ T5951] lua 0003:1E7D:2C2E.0006: unknown main item tag 0x0 [ 164.711773][ T5951] lua 0003:1E7D:2C2E.0006: unknown main item tag 0x0 [ 164.718817][ T5947] usb 3-1: Using ep0 maxpacket: 16 [ 164.725627][ T5951] lua 0003:1E7D:2C2E.0006: unknown main item tag 0x0 [ 164.732616][ T5947] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.743899][ T5951] lua 0003:1E7D:2C2E.0006: unknown main item tag 0x0 [ 164.751308][ T5947] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.558319][ T5951] lua 0003:1E7D:2C2E.0006: unknown main item tag 0x0 [ 165.565332][ T5947] usb 3-1: config 0 interface 0 has no altsetting 0 [ 165.575985][ T5951] lua 0003:1E7D:2C2E.0006: hidraw0: USB HID v0.03 Device [HID 1e7d:2c2e] on usb-dummy_hcd.3-1/input0 [ 165.586928][ T5947] usb 3-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 165.602328][ T5947] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.611728][ T5951] usb 4-1: USB disconnect, device number 16 [ 165.620583][ T5947] usb 3-1: config 0 descriptor?? [ 165.896365][ T7244] netlink: 36 bytes leftover after parsing attributes in process `syz.0.326'. [ 165.982165][ T7244] netlink: 36 bytes leftover after parsing attributes in process `syz.0.326'. [ 166.022516][ T7242] fido_id[7242]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 166.209347][ T5947] apple 0003:05AC:0247.0007: unexpected long global item [ 166.217006][ T7244] netlink: 36 bytes leftover after parsing attributes in process `syz.0.326'. [ 166.242428][ T7244] netlink: 36 bytes leftover after parsing attributes in process `syz.0.326'. [ 166.255431][ T5947] apple 0003:05AC:0247.0007: parse failed [ 166.272980][ T5947] apple 0003:05AC:0247.0007: probe with driver apple failed with error -22 [ 166.405300][ T5947] usb 3-1: USB disconnect, device number 10 [ 166.437538][ T7244] netlink: 36 bytes leftover after parsing attributes in process `syz.0.326'. [ 166.447881][ T7244] netlink: 36 bytes leftover after parsing attributes in process `syz.0.326'. [ 167.215180][ T7272] netlink: 8 bytes leftover after parsing attributes in process `syz.3.330'. [ 168.221912][ T6088] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 168.951897][ T5951] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 168.965831][ T6088] usb 5-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 168.995238][ T6088] usb 5-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 169.028485][ T6088] usb 5-1: Product: syz [ 169.044529][ T6088] usb 5-1: Manufacturer: syz [ 169.054594][ T6088] usb 5-1: SerialNumber: syz [ 169.069609][ T7302] netlink: 12 bytes leftover after parsing attributes in process `syz.2.341'. [ 169.083159][ T6088] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 169.114058][ T5951] usb 2-1: too many configurations: 70, using maximum allowed: 8 [ 169.133271][ T5951] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.151974][ T5951] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 169.183085][ T5951] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.202200][ T5951] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 169.233487][ T5951] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.260820][ T5951] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 169.285385][ T5951] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.302442][ T5951] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 169.333020][ T5951] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.352557][ T5951] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 169.382579][ T5951] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.401965][ T5947] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 169.409971][ T5951] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 169.442918][ T5951] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.478712][ T5951] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 169.496947][ T5951] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.934798][ T5947] usb 3-1: Using ep0 maxpacket: 32 [ 169.944805][ T5951] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 169.956358][ T6088] vp7045: USB control message 'in' went wrong. [ 169.958511][ T5947] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 169.972397][ T5951] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 169.980839][ T6088] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 169.981423][ T5951] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.999996][ T5947] usb 3-1: config 0 has no interface number 0 [ 170.005012][ T6088] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 170.006136][ T5947] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.028402][ T5947] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.031831][ T6088] usb 5-1: USB disconnect, device number 7 [ 170.038684][ T5951] usb 2-1: config 0 descriptor?? [ 170.054387][ T5947] usb 3-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 170.070026][ T5947] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.107876][ T5947] usb 3-1: config 0 descriptor?? [ 170.268753][ T7318] netlink: 'syz.3.346': attribute type 1 has an invalid length. [ 170.342675][ T7319] netlink: 8 bytes leftover after parsing attributes in process `syz.3.346'. [ 170.351508][ T7319] netlink: 20 bytes leftover after parsing attributes in process `syz.3.346'. [ 170.402622][ T7302] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 170.565299][ T5951] hid_parser_main: 941 callbacks suppressed [ 170.565317][ T5951] lua 0003:1E7D:2C2E.0008: unknown main item tag 0x0 [ 170.578514][ T5951] lua 0003:1E7D:2C2E.0008: unknown main item tag 0x0 [ 170.580309][ T5951] lua 0003:1E7D:2C2E.0008: unknown main item tag 0x0 [ 170.580351][ T5951] lua 0003:1E7D:2C2E.0008: unknown main item tag 0x0 [ 170.580370][ T5951] lua 0003:1E7D:2C2E.0008: unknown main item tag 0x0 [ 170.580390][ T5951] lua 0003:1E7D:2C2E.0008: unknown main item tag 0x0 [ 170.580410][ T5951] lua 0003:1E7D:2C2E.0008: unknown main item tag 0x0 [ 170.580430][ T5951] lua 0003:1E7D:2C2E.0008: unknown main item tag 0x0 [ 170.580450][ T5951] lua 0003:1E7D:2C2E.0008: unknown main item tag 0x0 [ 170.580488][ T5951] lua 0003:1E7D:2C2E.0008: unknown main item tag 0x0 [ 170.588754][ T5951] lua 0003:1E7D:2C2E.0008: hidraw0: USB HID v0.03 Device [HID 1e7d:2c2e] on usb-dummy_hcd.1-1/input0 [ 170.718610][ T5951] usb 2-1: USB disconnect, device number 12 [ 171.011819][ T5818] Bluetooth: hci0: connection err: -111 [ 172.032810][ T5947] usbhid 3-1:0.1: can't add hid device: -71 [ 172.038808][ T5947] usbhid 3-1:0.1: probe with driver usbhid failed with error -71 [ 172.061321][ T5947] usb 3-1: USB disconnect, device number 11 [ 173.445010][ T30] audit: type=1400 audit(1767594865.755:402): avc: denied { setattr } for pid=7359 comm="syz.1.357" name="" dev="pipefs" ino=4860 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 174.342151][ T5900] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 174.491902][ T5900] usb 5-1: Using ep0 maxpacket: 32 [ 174.500124][ T5900] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.512620][ T5900] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.526728][ T5900] usb 5-1: New USB device found, idVendor=0b05, idProduct=1807, bcdDevice= 0.00 [ 174.557344][ T5900] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.601160][ T5900] usb 5-1: config 0 descriptor?? [ 174.842511][ T5900] asus 0003:0B05:1807.0009: hidraw0: USB HID v0.00 Device [HID 0b05:1807] on usb-dummy_hcd.4-1/input0 [ 174.892018][ T5900] asus 0003:0B05:1807.0009: Asus input not registered [ 174.920610][ T5900] asus 0003:0B05:1807.0009: probe with driver asus failed with error -12 [ 174.977636][ T5900] usb 5-1: USB disconnect, device number 8 [ 175.037913][ T7391] fido_id[7391]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 175.205335][ T30] audit: type=1400 audit(1767594867.525:403): avc: denied { name_connect } for pid=7397 comm="syz.0.368" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 175.258667][ T30] audit: type=1400 audit(1767594867.575:404): avc: denied { listen } for pid=7397 comm="syz.0.368" lport=56614 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 175.314224][ T7400] fuse: root generation should be zero [ 175.461761][ T7414] syz.0.368 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 175.626010][ T30] audit: type=1400 audit(1767594867.945:405): avc: denied { read write } for pid=7397 comm="syz.0.368" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 175.629257][ T7414] random: crng reseeded on system resumption [ 175.667050][ T30] audit: type=1400 audit(1767594867.945:406): avc: denied { ioctl open } for pid=7397 comm="syz.0.368" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 176.178677][ T30] audit: type=1400 audit(1767594868.495:407): avc: denied { accept } for pid=7397 comm="syz.0.368" lport=56614 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 176.851999][ T5900] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 177.101906][ T5900] usb 1-1: device descriptor read/64, error -71 [ 177.172787][ T30] audit: type=1400 audit(1767594869.495:408): avc: denied { read } for pid=7436 comm="syz.2.377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 177.315412][ T7442] netlink: 'syz.1.376': attribute type 1 has an invalid length. [ 177.361828][ T5900] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 177.365405][ T1036] Bluetooth: hci5: Frame reassembly failed (-84) [ 177.433697][ T7442] 8021q: adding VLAN 0 to HW filter on device bond1 [ 177.449786][ T7449] bond1: (slave gretap1): making interface the new active one [ 177.614166][ T5900] usb 1-1: device descriptor read/64, error -71 [ 177.704850][ T7449] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 177.823408][ T5900] usb usb1-port1: attempt power cycle [ 178.155277][ T30] audit: type=1400 audit(1767594870.415:409): avc: denied { getopt } for pid=7452 comm="syz.3.379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 178.223318][ T5900] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 178.629553][ T7467] netlink: 216 bytes leftover after parsing attributes in process `syz.3.381'. [ 178.638945][ T7467] netlink: 40 bytes leftover after parsing attributes in process `syz.3.381'. [ 178.649057][ T7467] netlink: 36 bytes leftover after parsing attributes in process `syz.3.381'. [ 178.770520][ T7474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.870107][ T7475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.918491][ T7474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.973932][ T7475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.031911][ T5873] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 179.039424][ T6088] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 179.110369][ T5900] usb 1-1: device descriptor read/8, error -71 [ 179.202086][ T6088] usb 4-1: Using ep0 maxpacket: 32 [ 179.213152][ T5873] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.247404][ T6088] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.274374][ T5873] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.302121][ T6088] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 179.334191][ T5873] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 179.358521][ T6088] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 179.364416][ T7486] netlink: 'syz.0.385': attribute type 1 has an invalid length. [ 179.377820][ T5873] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.394687][ T6088] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.402908][ T5823] Bluetooth: hci5: command 0x1003 tx timeout [ 179.403912][ T5818] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 179.439950][ T5873] usb 5-1: config 0 descriptor?? [ 179.445138][ T6088] usb 4-1: Product: ࠠ [ 179.449337][ T6088] usb 4-1: Manufacturer: 缳虢刍쇁䍑ԫ牏䨍锅㥇큏퇆⺷쨌犮嚌끏珆㨥塭﮵胚쎚堝猞敕侬뭀Ꮻ隢䢘劄 [ 179.470629][ T6088] usb 4-1: SerialNumber: 〉 [ 179.733794][ T6088] cdc_ncm 4-1:1.0: bind() failure [ 179.851527][ T6088] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 179.858604][ T6088] cdc_ncm 4-1:1.1: bind() failure [ 179.881206][ T6088] usb 4-1: USB disconnect, device number 17 [ 180.254163][ T5873] hid_parser_main: 29 callbacks suppressed [ 180.254181][ T5873] hid-steam 0003:28DE:1142.000A: unknown main item tag 0x0 [ 180.271153][ T5900] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 180.314527][ T5900] usb 1-1: Using ep0 maxpacket: 32 [ 180.321587][ T5873] hid-steam 0003:28DE:1142.000A: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 180.356138][ T5900] usb 1-1: config 4 has an invalid interface number: 128 but max is 0 [ 180.366171][ T5900] usb 1-1: config 4 has no interface number 0 [ 180.374092][ T5900] usb 1-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.386170][ T5900] usb 1-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.397970][ T5900] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 180.407925][ T5900] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.432093][ T5873] hid-steam 0003:28DE:1142.000A: Steam wireless receiver connected [ 180.440361][ T5900] hub 1-1:4.128: USB hub found [ 180.445948][ T5873] hid-steam 0003:28DE:1142.000A: No HID_FEATURE_REPORT submitted - nothing to read [ 180.483282][ T5873] hid-steam 0003:28DE:1142.000B: unknown main item tag 0x0 [ 180.505889][ T5873] hid-steam 0003:28DE:1142.000B: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 180.646706][ T5900] hub 1-1:4.128: config failed, hub has too many ports! (err -19) [ 180.684025][ T5873] usb 5-1: USB disconnect, device number 9 [ 180.735143][ T5873] hid-steam 0003:28DE:1142.000A: Steam wireless receiver disconnected [ 180.737163][ T30] audit: type=1400 audit(1767594873.055:410): avc: denied { read } for pid=7501 comm="syz.2.391" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 180.779680][ T30] audit: type=1400 audit(1767594873.095:411): avc: denied { open } for pid=7501 comm="syz.2.391" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 181.057342][ T30] audit: type=1400 audit(1767594873.095:412): avc: denied { read } for pid=7501 comm="syz.2.391" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 181.083285][ T30] audit: type=1400 audit(1767594873.095:413): avc: denied { open } for pid=7501 comm="syz.2.391" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 181.282140][ T6170] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 181.537195][ T5873] usb 1-1: USB disconnect, device number 9 [ 181.691710][ T30] audit: type=1804 audit(1767594873.855:415): pid=7504 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.392" name="/newroot/80/file0" dev="tmpfs" ino=445 res=1 errno=0 [ 181.762061][ T30] audit: type=1400 audit(1767594873.855:414): avc: denied { ioctl } for pid=7508 comm="syz.4.394" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 181.898507][ T6170] usb 3-1: too many configurations: 70, using maximum allowed: 8 [ 182.274785][ T6170] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.290963][ T6170] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 182.328452][ T6170] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.351424][ T6170] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 182.357900][ T7516] syzkaller0: entered promiscuous mode [ 182.373063][ T6170] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.383325][ T6170] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 182.528712][ T6170] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.534906][ T7516] syzkaller0: entered allmulticast mode [ 182.538856][ T6170] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 182.558030][ T6170] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.568016][ T6170] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 183.029657][ T6170] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.039593][ T6170] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 183.054237][ T6170] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.064180][ T6170] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 183.509804][ T6170] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.522249][ T6170] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 183.535978][ T6170] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 183.552349][ T6170] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.638463][ T6170] usb 3-1: config 0 descriptor?? [ 183.992322][ T7530] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 183.998865][ T7530] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 184.009019][ T7530] vhci_hcd vhci_hcd.0: Device attached [ 184.188991][ T6170] usbhid 3-1:0.0: can't add hid device: -71 [ 184.215331][ T6170] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 184.222561][ T7533] vhci_hcd: connection closed [ 184.226634][ T1089] vhci_hcd vhci_hcd.3: stop threads [ 184.243927][ T1089] vhci_hcd vhci_hcd.3: release socket [ 184.256381][ T6170] usb 3-1: USB disconnect, device number 12 [ 184.334564][ T7526] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 184.689678][ T1089] vhci_hcd vhci_hcd.3: disconnect device [ 289.761808][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 289.768761][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P7524/1:b..l [ 289.776907][ C1] rcu: (detected by 1, t=10502 jiffies, g=17193, q=416 ncpus=2) [ 289.784593][ C1] task:syz.4.398 state:R running task stack:24344 pid:7524 tgid:7520 ppid:5814 task_flags:0x400140 flags:0x00080002 [ 289.798346][ C1] Call Trace: [ 289.801602][ C1] [ 289.804506][ C1] ? __schedule+0x10b9/0x6150 [ 289.809160][ C1] __schedule+0x1139/0x6150 [ 289.813647][ C1] ? __pfx___schedule+0x10/0x10 [ 289.818473][ C1] ? mark_held_locks+0x49/0x80 [ 289.823211][ C1] preempt_schedule_irq+0x51/0x90 [ 289.828207][ C1] irqentry_exit+0x1d8/0x8c0 [ 289.832772][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 289.838723][ C1] RIP: 0010:__rcu_read_lock+0xa7/0xf0 [ 289.844081][ C1] Code: 48 b8 00 00 00 00 00 fc ff df 89 9d 84 04 00 00 65 48 8b 1d e3 b1 0f 12 48 8d bb 84 04 00 00 48 89 fa 48 c1 ea 03 0f b6 14 02 <48> 89 f8 83 e0 07 83 c0 03 38 d0 7c 04 84 d2 75 1f 8b 83 84 04 00 [ 289.863659][ C1] RSP: 0018:ffffc9000587e8a8 EFLAGS: 00000a07 [ 289.869697][ C1] RAX: dffffc0000000000 RBX: ffff8880753924c0 RCX: ffffc9000587e9c8 [ 289.877641][ C1] RDX: 0000000000000000 RSI: ffffffff81a9639e RDI: ffff888075392944 [ 289.885583][ C1] RBP: ffff8880753924c0 R08: 0000000000000001 R09: 000000004a498739 [ 289.893526][ C1] R10: 0000000000000002 R11: 000000000000637a R12: ffffffff81a960f0 [ 289.901465][ C1] R13: ffffc9000587e930 R14: 0000000000000000 R15: ffff8880753924c0 [ 289.909411][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 289.915540][ C1] ? stack_trace_save+0x8e/0xc0 [ 289.920367][ C1] unwind_next_frame+0xae/0x20b0 [ 289.925280][ C1] ? stack_trace_save+0x8e/0xc0 [ 289.930114][ C1] ? __unwind_start+0x45f/0x7f0 [ 289.934938][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 289.941072][ C1] arch_stack_walk+0x94/0x100 [ 289.945723][ C1] ? stack_trace_save+0x8e/0xc0 [ 289.950546][ C1] stack_trace_save+0x8e/0xc0 [ 289.955195][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 289.960538][ C1] ? __lock_acquire+0x436/0x2890 [ 289.965450][ C1] ? __vlan_add+0x2312/0x2df0 [ 289.970096][ C1] ? nbp_vlan_add+0x261/0x3f0 [ 289.974742][ C1] kasan_save_stack+0x33/0x60 [ 289.979410][ C1] kasan_save_track+0x14/0x30 [ 289.984059][ C1] kasan_save_free_info+0x3b/0x60 [ 289.989053][ C1] __kasan_slab_free+0x5f/0x80 [ 289.993799][ C1] kmem_cache_free+0x2d8/0x770 [ 289.998533][ C1] ? kfree_skbmem+0x1a4/0x1f0 [ 290.003185][ C1] ? kfree_skbmem+0x1a4/0x1f0 [ 290.007833][ C1] kfree_skbmem+0x1a4/0x1f0 [ 290.012308][ C1] consume_skb+0xcc/0x100 [ 290.016610][ C1] netlink_broadcast_filtered+0x3ee/0xf90 [ 290.022305][ C1] ? __asan_memcpy+0x3c/0x60 [ 290.026869][ C1] ? __pfx_netlink_broadcast_filtered+0x10/0x10 [ 290.033086][ C1] nlmsg_notify+0x9e/0x220 [ 290.037476][ C1] br_vlan_notify+0x42c/0x8a0 [ 290.042127][ C1] __vlan_add+0x2312/0x2df0 [ 290.046607][ C1] ? __pfx___vlan_add+0x10/0x10 [ 290.051433][ C1] nbp_vlan_add+0x261/0x3f0 [ 290.055907][ C1] br_vlan_info+0x159/0x3d0 [ 290.060388][ C1] ? __pfx_br_vlan_info+0x10/0x10 [ 290.065386][ C1] ? __pfx___might_resched+0x10/0x10 [ 290.070646][ C1] br_process_vlan_info+0x435/0xa10 [ 290.075817][ C1] ? __pfx_br_process_vlan_info+0x10/0x10 [ 290.081506][ C1] ? stack_depot_save_flags+0x29/0x9b0 [ 290.086946][ C1] br_afspec+0x573/0x650 [ 290.091159][ C1] ? __pfx_br_afspec+0x10/0x10 [ 290.095891][ C1] ? __sys_sendmsg+0x16d/0x220 [ 290.100623][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.106668][ C1] br_setlink+0x374/0x630 [ 290.110969][ C1] ? __pfx_br_setlink+0x10/0x10 [ 290.115810][ C1] ? __lock_acquire+0x436/0x2890 [ 290.120719][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 290.125718][ C1] ? __pfx_br_setlink+0x10/0x10 [ 290.130540][ C1] rtnl_bridge_setlink+0x56d/0x740 [ 290.135624][ C1] ? __pfx_rtnl_bridge_setlink+0x10/0x10 [ 290.141232][ C1] ? __pfx_rtnl_bridge_setlink+0x10/0x10 [ 290.146834][ C1] rtnetlink_rcv_msg+0x3c9/0xe90 [ 290.151743][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 290.157185][ C1] ? ref_tracker_free+0x37c/0x830 [ 290.162179][ C1] netlink_rcv_skb+0x158/0x420 [ 290.166915][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 290.172345][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 290.177608][ C1] ? netlink_deliver_tap+0x1ae/0xd30 [ 290.182868][ C1] netlink_unicast+0x5aa/0x870 [ 290.187606][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 290.192868][ C1] netlink_sendmsg+0x8c8/0xdd0 [ 290.197604][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 290.202862][ C1] ? call_depth_return_thunk+0xd0/0xd0 [ 290.208293][ C1] ____sys_sendmsg+0xa5d/0xc30 [ 290.213030][ C1] ? copy_msghdr_from_user+0x10a/0x160 [ 290.218460][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 290.223720][ C1] ? __pfx_futex_wake_mark+0x10/0x10 [ 290.228977][ C1] ___sys_sendmsg+0x134/0x1d0 [ 290.233623][ C1] ? __pfx____sys_sendmsg+0x10/0x10 [ 290.238794][ C1] ? futex_private_hash_put+0x160/0x1b0 [ 290.244325][ C1] __sys_sendmsg+0x16d/0x220 [ 290.248884][ C1] ? __pfx___sys_sendmsg+0x10/0x10 [ 290.253965][ C1] ? __x64_sys_futex+0x1e0/0x4c0 [ 290.258885][ C1] do_syscall_64+0xcd/0xf80 [ 290.263363][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.269225][ C1] RIP: 0033:0x7fe9b3b8f749 [ 290.273609][ C1] RSP: 002b:00007fe9b4a04038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 290.281991][ C1] RAX: ffffffffffffffda RBX: 00007fe9b3de6180 RCX: 00007fe9b3b8f749 [ 290.289931][ C1] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000009 [ 290.297880][ C1] RBP: 00007fe9b3c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 290.305821][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 290.313760][ C1] R13: 00007fe9b3de6218 R14: 00007fe9b3de6180 R15: 00007ffcf01deae8 [ 290.321708][ C1] [ 290.324708][ C1] rcu: rcu_preempt kthread starved for 10557 jiffies! g17193 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 290.335866][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 290.345813][ C1] rcu: RCU grace-period kthread stack dump: [ 290.351667][ C1] task:rcu_preempt state:R running task stack:28328 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 290.365117][ C1] Call Trace: [ 290.368368][ C1] [ 290.371272][ C1] ? __schedule+0x10b9/0x6150 [ 290.375922][ C1] __schedule+0x1139/0x6150 [ 290.380403][ C1] ? __pfx___schedule+0x10/0x10 [ 290.385223][ C1] ? find_held_lock+0x2b/0x80 [ 290.389873][ C1] ? schedule+0x2d7/0x3a0 [ 290.394175][ C1] schedule+0xe7/0x3a0 [ 290.398216][ C1] schedule_timeout+0x123/0x290 [ 290.403039][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 290.408381][ C1] ? __pfx_process_timeout+0x10/0x10 [ 290.413638][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 290.419415][ C1] ? prepare_to_swait_event+0xf5/0x480 [ 290.424845][ C1] rcu_gp_fqs_loop+0x1ea/0xaf0 [ 290.429583][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 290.434841][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 290.440012][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 290.444922][ C1] ? rcu_gp_cleanup+0x7c1/0xe90 [ 290.449747][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 290.455524][ C1] rcu_gp_kthread+0x26d/0x380 [ 290.460172][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 290.465344][ C1] ? rcu_is_watching+0x12/0xc0 [ 290.470075][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 290.475245][ C1] ? __kthread_parkme+0x19e/0x250 [ 290.480240][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 290.485410][ C1] kthread+0x3c5/0x780 [ 290.489462][ C1] ? __pfx_kthread+0x10/0x10 [ 290.494035][ C1] ? rcu_is_watching+0x12/0xc0 [ 290.498766][ C1] ? __pfx_kthread+0x10/0x10 [ 290.503327][ C1] ret_from_fork+0x983/0xb10 [ 290.507889][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 290.512982][ C1] ? __switch_to+0x7af/0x10d0 [ 290.517635][ C1] ? __pfx_kthread+0x10/0x10 [ 290.522207][ C1] ret_from_fork_asm+0x1a/0x30 [ 290.526952][ C1] [ 290.529941][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 290.536230][ C1] Sending NMI from CPU 1 to CPUs 0: [ 290.541414][ C0] NMI backtrace for cpu 0 [ 290.541426][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 290.541445][ C0] Tainted: [L]=SOFTLOCKUP [ 290.541449][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 290.541457][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 290.541473][ C0] Code: c6 5f 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 49 12 00 fb f4 cc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 290.541486][ C0] RSP: 0018:ffffffff8e007df8 EFLAGS: 000002c6 [ 290.541498][ C0] RAX: 0000000000cd5e23 RBX: 0000000000000000 RCX: ffffffff8b7816d9 [ 290.541506][ C0] RDX: 0000000000000000 RSI: ffffffff8dace4f3 RDI: ffffffff8bf2b480 [ 290.541515][ C0] RBP: fffffbfff1c12f68 R08: 0000000000000001 R09: ffffed101708673d [ 290.541523][ C0] R10: ffff8880b84339eb R11: ffffffff8e098670 R12: 0000000000000000 [ 290.541532][ C0] R13: ffffffff8e097b40 R14: ffffffff9088b9d0 R15: 0000000000000000 [ 290.541541][ C0] FS: 0000000000000000(0000) GS:ffff8881248f5000(0000) knlGS:0000000000000000 [ 290.541555][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 290.541564][ C0] CR2: 000000110c3bb6a4 CR3: 000000004b937000 CR4: 00000000003526f0 [ 290.541574][ C0] Call Trace: [ 290.541578][ C0] [ 290.541583][ C0] default_idle+0x13/0x20 [ 290.541601][ C0] default_idle_call+0x6c/0xb0 [ 290.541619][ C0] do_idle+0x38d/0x510 [ 290.541640][ C0] ? __pfx_do_idle+0x10/0x10 [ 290.541661][ C0] cpu_startup_entry+0x4f/0x60 [ 290.541680][ C0] rest_init+0x16b/0x2b0 [ 290.541691][ C0] ? acpi_subsystem_init+0x133/0x180 [ 290.541704][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 290.541718][ C0] start_kernel+0x3ef/0x4d0 [ 290.541738][ C0] x86_64_start_reservations+0x18/0x30 [ 290.541759][ C0] x86_64_start_kernel+0x130/0x190 [ 290.541771][ C0] common_startup_64+0x13e/0x148 [ 290.541792][ C0]