last executing test programs: 6.072834895s ago: executing program 4 (id=25): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x2, 0x0, 0xffffe000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) 6.049876857s ago: executing program 4 (id=26): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000280)={0x0, 0x0, 0x6, "ef3dfeee7630"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) 4.448352936s ago: executing program 3 (id=37): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x40, r1, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}]}, 0x40}, 0x4, 0x700000000000000}, 0x0) 4.404674189s ago: executing program 3 (id=38): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000500), r0) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000c040}, 0x48d5) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f00000005c0)={0x4c, r1, 0x1, 0x70bd2a, 0x25dfdc00, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xd}, @device_b, @device_a, @from_mac=@broadcast, {0x3, 0x17}}, 0x37, @val={0x8c, 0x10, {0x4b4, "6a944faa886e", @short="87ce28ffd27f1b96"}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040080}, 0x28040010) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010800d972a440b72040155ab7010203010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$rtl8150(r3, 0x0, 0x0) syz_usb_control_io$uac2(r3, 0x0, &(0x7f0000000bc0)={0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="e01506"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r3, &(0x7f00000001c0)={0x14, &(0x7f0000000040)={0x40, 0xb, 0x89, {0x89, 0x6, "d9dc3d5c0991ec694f8bd35cc71ade50d9012c1e7c0e4945ac48957f3ec8e6ee166da3e2b3fa1f3cbdd50b34dd29beda61b63381c092a5bf1f13c76810447fc334bdfaa75dd40b6f55f1cc9ba4469495e466d417c4b5254ae990f5951712e832603cf0802f65615c295f56932cd93a6d32e2725154c04f26e3d04681661ba2f4d13419b275b7dc"}}, &(0x7f0000000100)={0x0, 0x3, 0x91, @string={0x91, 0x3, "366d21215a2f7d11bc1e778a97cdcef451636783754ad84c20b463053ef22a422006a1075e0327cfc0de1386dc689aee49d927c337e5942dad576c72a40e8c91719bc7378b3ef1036d4294c4abac98f225cb0736398bbc115cfd2162d0ae96d19095d0decb46f93c372b49917f96e4149f287111897a3f1b96caeff98ae709b8dd61a57aa2c850c6575c8670d655c0"}}}, &(0x7f0000000480)={0x34, &(0x7f0000000200)={0x0, 0xe, 0x3b, "064dc24c4ec12874a6b300a18cb22db1aeae9139da438826f5c74f6baafe56c68141a570519316b79433dce2abb4ea254f03402227a32e894dcb82"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x8}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000300)={0x20, 0x0, 0xd8, {0xd6, "1d2381474532a5d97440b1f658094c4d3a83da838d9572ddc01a824e93696ee6274a203bd0242da52f9b17a3b69f34dd0ffb029209ff6cb06eb838ce4cebb04b4ca4d9755ad30b28d09a029430740be94e429065f8af9255ea6ac4c80ee01a4b8f4bf9b8b05154ff18169e152c081e7ccab52bb8241e4545f8849884d6049bb8e952ac364adb8cdbfdfc794c1ba8b04dcc20a8a189b60759de5b34e94dfb2699768a4d5ce4c0b38b55c24193d26b38c6e4d5e6c9fcbde3ea35ccb027575771a71a39579eb55c98692fa34e4358caa30b4980f421a95b"}}, &(0x7f0000000400)={0x20, 0x1, 0x1, 0x53}, &(0x7f0000000440)={0x20, 0x0, 0x1, 0xf7}}) syz_usb_control_io$rtl8150(r3, 0x0, 0x0) 4.064082796s ago: executing program 1 (id=40): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x1}, 0x10) sendmsg$tipc(r1, &(0x7f00000008c0)={&(0x7f0000000600)=@name, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 3.248078727s ago: executing program 1 (id=41): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000180)={0x60, 0x1, &(0x7f0000ff3000/0xb000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0xff, 0x0, 0x0, 0x0, 0x0, 0x10, 0x41, 0x73}) 3.235926688s ago: executing program 1 (id=42): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x14) 3.173272261s ago: executing program 1 (id=43): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) syz_usb_connect(0x3, 0x6b, &(0x7f0000000140)=ANY=[@ANYBLOB="12010102c441c8102104280139a6010203010902590001070530080904c009000202ff0005240600010524006a050d240f01000400002b07ff030606241a0300021524120668"], &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0}) 2.908422864s ago: executing program 4 (id=51): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xd7f, 0x0, &(0x7f00000014c0)="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"}) 2.908220174s ago: executing program 0 (id=52): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000070000000000000009000000850000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a"], 0xf0}}, 0x0) 2.908121474s ago: executing program 0 (id=53): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e0000000000000008000f0001000000", 0x24) 2.764993701s ago: executing program 0 (id=54): inotify_add_watch(0xffffffffffffffff, 0x0, 0x80000001) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000007c0)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x5, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x4, 0x1, 0x69b, 0x1fb, 0xffffffff, 0xfffffff7}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0x5, 0x8}}]}}}]}, 0x58}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x55}, 0xc010) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 2.464457936s ago: executing program 0 (id=57): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10023, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x1c, r4, 0x321, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044094}, 0x4) 2.017116999s ago: executing program 4 (id=58): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x43, &(0x7f00000000c0)=0x7, 0x4) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x48040) 1.58508764s ago: executing program 2 (id=59): r0 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) r1 = socket(0x1e, 0x1, 0x0) connect$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r1, &(0x7f0000000340), 0x2000011a) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x12, r0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r1) 1.472839057s ago: executing program 2 (id=60): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0xfffd, @loopback}, 0x10, &(0x7f000000c540)=[{&(0x7f0000000280)='\b\x00', 0x2}, {&(0x7f000000b540)="920ca227df6561", 0x7}], 0x2, &(0x7f000000b440)=ANY=[@ANYBLOB="1c000000000000000000000007"], 0x20}, 0x20000890) 1.472573246s ago: executing program 0 (id=61): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x1040200001edfffe, 0x400000000000da6c}) 1.472494047s ago: executing program 2 (id=62): r0 = epoll_create1(0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)={0xe0000010}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x775409462d9a369f}) 1.472326387s ago: executing program 0 (id=63): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe8a, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$HIDIOCGUCODE(0xffffffffffffffff, 0xc018480d, 0x0) syz_usb_connect$printer(0x2, 0x0, 0x0, 0x0) 1.472232016s ago: executing program 2 (id=64): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c0000001000ffff26bd7000eedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="350c040000000000240012800b0001006d6163736563000014000280050007000100000005000600010000000800050042032bcd04"], 0x4c}, 0x1, 0x0, 0x0, 0x28001}, 0x4008800) 1.454101497s ago: executing program 2 (id=65): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000880)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x4, @empty}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0xfffe, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) read(r1, &(0x7f0000000300)=""/212, 0xd4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x13, r0, 0x0) 1.385760661s ago: executing program 3 (id=66): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000070601010000000000000000030000080500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x40801}, 0x8000) 1.324704174s ago: executing program 3 (id=67): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0xe, 0xf1, 0x5, 0xfd, 0xd4, 0xa, 0x0, 0xd7, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0x8080000, 0xdddd1000, 0xb, 0x0, 0x2, 0x0, 0x4, 0x1, 0xe, 0x0, 0xc4, 0x5}, {0x8000000, 0x2000, 0xb, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x3, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x1, 0x3, 0x9, 0xd, 0x6, 0x5, 0x4, 0x2e, 0x4b}, {0x100000, 0x8000000, 0xb, 0x0, 0x3, 0x1, 0x1, 0xff, 0x4, 0x90, 0x2, 0xfc}, {0x2, 0x4000, 0xf, 0xff, 0x3, 0x1, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0x4, 0x8000000, 0xf, 0x5, 0x18, 0x3, 0xa, 0x9, 0x54, 0x1, 0xff, 0x7}, {0xb000, 0x9}, {0x1000, 0x9}, 0x40010000, 0x0, 0x100000, 0x300, 0x5, 0x2000, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x80, 0x0, 0x8, '\x00', 0xe4}) 1.299060835s ago: executing program 3 (id=68): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) r1 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000000c0)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 1.175453341s ago: executing program 1 (id=69): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xc018480b, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)=ANY=[], 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) uname(0x0) 1.068645117s ago: executing program 4 (id=70): ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)={0xbe, 0x0, 0x1}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001c00010a00000000fbc298"], 0x14}}, 0x20008000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x3, 0x2, 0x0, 0x2, 0x0, 0x0, 0x89}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x3}}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x0, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0xfffffffd}]}]}, 0xfc}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x1000000000, 0x5, 0x41, 0x4, 0x0, 0x2004cb, 0x0, 0x40000000000a1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 59.842997ms ago: executing program 4 (id=71): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000280)={0x0, 0x0, 0x6, "ef3dfeee7630"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) 58.137887ms ago: executing program 2 (id=72): r0 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000140)={0x0, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, {0x2, 0x4e23, @local}, 0x2a6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x792d7b3c, 0xfffe}) 390.33µs ago: executing program 1 (id=73): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0x8, 0x5, 0x1e6}) 0s ago: executing program 3 (id=74): setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@multicast2, 0x404d3, 0x32}, 0x0, @in=@empty}}, 0xe8) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'geneve0\x00'}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}, 0x1, 0x0, 0x0, 0x4004040}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet(0x2, 0x2, 0x0) close(0x3) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x4e21, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0xb}}}, 0xb8}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.132' (ED25519) to the list of known hosts. [ 25.147064][ T30] audit: type=1400 audit(1774139421.774:64): avc: denied { mounton } for pid=273 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 25.150983][ T273] cgroup: Unknown subsys name 'net' [ 25.170628][ T30] audit: type=1400 audit(1774139421.784:65): avc: denied { mount } for pid=273 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.198322][ T30] audit: type=1400 audit(1774139421.814:66): avc: denied { unmount } for pid=273 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.198681][ T273] cgroup: Unknown subsys name 'devices' [ 25.369584][ T273] cgroup: Unknown subsys name 'hugetlb' [ 25.375421][ T273] cgroup: Unknown subsys name 'rlimit' [ 25.636759][ T30] audit: type=1400 audit(1774139422.264:67): avc: denied { setattr } for pid=273 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 25.660267][ T30] audit: type=1400 audit(1774139422.264:68): avc: denied { mounton } for pid=273 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 25.677901][ T275] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 25.685895][ T30] audit: type=1400 audit(1774139422.274:69): avc: denied { mount } for pid=273 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 25.716870][ T30] audit: type=1400 audit(1774139422.324:70): avc: denied { relabelto } for pid=275 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.742689][ T30] audit: type=1400 audit(1774139422.324:71): avc: denied { write } for pid=275 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.807461][ T30] audit: type=1400 audit(1774139422.444:72): avc: denied { read } for pid=273 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.833372][ T30] audit: type=1400 audit(1774139422.444:73): avc: denied { open } for pid=273 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.833416][ T273] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 26.699315][ T281] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.706398][ T281] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.714299][ T281] device bridge_slave_0 entered promiscuous mode [ 26.722300][ T281] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.729401][ T281] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.736851][ T281] device bridge_slave_1 entered promiscuous mode [ 26.795879][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.803158][ T282] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.810668][ T282] device bridge_slave_0 entered promiscuous mode [ 26.818828][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.825901][ T282] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.833681][ T282] device bridge_slave_1 entered promiscuous mode [ 26.886521][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.893826][ T284] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.901590][ T284] device bridge_slave_0 entered promiscuous mode [ 26.909371][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.916473][ T284] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.924059][ T284] device bridge_slave_1 entered promiscuous mode [ 27.038658][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.045741][ T283] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.053277][ T283] device bridge_slave_0 entered promiscuous mode [ 27.062927][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.070114][ T283] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.077622][ T283] device bridge_slave_1 entered promiscuous mode [ 27.108106][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.115180][ T285] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.122753][ T285] device bridge_slave_0 entered promiscuous mode [ 27.144367][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.151479][ T285] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.159094][ T285] device bridge_slave_1 entered promiscuous mode [ 27.188741][ T281] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.196027][ T281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.203377][ T281] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.210434][ T281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.218579][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.225635][ T284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.232944][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.240031][ T284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.255719][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.262835][ T282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.270165][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.277228][ T282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.346925][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.354799][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.362442][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.369933][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.377244][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.385373][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.392801][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.430612][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.438296][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.446547][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.453646][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.461965][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.470331][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.477397][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.484955][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.493226][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.500358][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.507965][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.516141][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.523215][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.541872][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 27.549472][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.556913][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.565223][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.572269][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.580493][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.588907][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.595940][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.603831][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.628925][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.636910][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.645030][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.654771][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.677527][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 27.685051][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.692870][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 27.701417][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.709749][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.716806][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.724926][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 27.733662][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.742265][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 27.750907][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.759193][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.766243][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.791245][ T282] device veth0_vlan entered promiscuous mode [ 27.797538][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 27.805291][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 27.813672][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.822275][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 27.830598][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.838786][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 27.847190][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.855555][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 27.863882][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.871990][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 27.879929][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.888250][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 27.896109][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.904287][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.911882][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.919532][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.926994][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.943951][ T284] device veth0_vlan entered promiscuous mode [ 27.952974][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 27.961371][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.969140][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 27.978943][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.987468][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.994521][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.002194][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 28.015880][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 28.024405][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.033088][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.040196][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.047771][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 28.056102][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.071599][ T281] device veth0_vlan entered promiscuous mode [ 28.081971][ T283] device veth0_vlan entered promiscuous mode [ 28.088928][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 28.097773][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.106313][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 28.114633][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.122967][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 28.131105][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.139379][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.146990][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.154794][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.162333][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.171401][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 28.179771][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.190224][ T284] device veth1_macvtap entered promiscuous mode [ 28.201075][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.209397][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 28.217633][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.226064][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 28.234012][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 28.246330][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.254810][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.266937][ T282] device veth1_macvtap entered promiscuous mode [ 28.276845][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 28.285101][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.293658][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 28.303027][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.311427][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 28.319340][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.327755][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.336919][ T283] device veth1_macvtap entered promiscuous mode [ 28.350354][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 28.358660][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.375277][ T281] device veth1_macvtap entered promiscuous mode [ 28.384076][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 28.392805][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.401518][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.403901][ T284] request_module fs-gadgetfs succeeded, but still no fs? [ 28.411225][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.425583][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.454026][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.462837][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.471933][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.480722][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.490004][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.498758][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.507759][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.516030][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.552496][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.571952][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.600707][ T285] device veth0_vlan entered promiscuous mode [ 28.622494][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.634425][ T317] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4'. [ 28.641613][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.665348][ T285] device veth1_macvtap entered promiscuous mode [ 28.673288][ T321] capability: warning: `syz.4.7' uses deprecated v2 capabilities in a way that may be insecure [ 28.702399][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.763549][ T318] device syzkaller0 entered promiscuous mode [ 28.777408][ T331] overlayfs: unrecognized mount option "\" or missing value [ 28.811385][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.836240][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.875357][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.887852][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.919293][ T342] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 28.947190][ T6] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 29.187187][ T6] usb 2-1: Using ep0 maxpacket: 32 [ 29.307294][ T6] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 29.359306][ T304] syz.0.1 (304) used greatest stack depth: 21408 bytes left [ 29.396580][ T377] binder: Unknown parameter 'smackfshat' [ 29.417242][ T58] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 29.477298][ T6] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 29.486791][ T6] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 29.495814][ T6] usb 2-1: Product: syz [ 29.500365][ T6] usb 2-1: Manufacturer: syz [ 29.505050][ T6] usb 2-1: SerialNumber: syz [ 29.507310][ T316] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 29.515664][ T6] usb 2-1: config 0 descriptor?? [ 29.537353][ T315] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 29.762718][ T6] usb 2-1: USB disconnect, device number 2 [ 29.777212][ T316] usb 5-1: Using ep0 maxpacket: 16 [ 29.787255][ T58] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 29.795723][ T58] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 29.804750][ T58] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 29.815332][ T58] usb 4-1: config 220 has no interface number 2 [ 29.822337][ T58] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 29.835732][ T58] usb 4-1: config 220 interface 0 has no altsetting 0 [ 29.842641][ T58] usb 4-1: config 220 interface 76 has no altsetting 0 [ 29.850108][ T58] usb 4-1: config 220 interface 1 has no altsetting 0 [ 29.897281][ T316] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 29.905986][ T316] usb 5-1: config 0 has no interface number 0 [ 29.912157][ T316] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 29.922129][ T316] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 29.932111][ T316] usb 5-1: config 0 interface 41 has no altsetting 0 [ 30.017232][ T58] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 30.026345][ T58] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.034737][ T58] usb 4-1: Product: syz [ 30.039100][ T58] usb 4-1: Manufacturer: syz [ 30.043730][ T58] usb 4-1: SerialNumber: syz [ 30.097251][ T316] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 30.106526][ T316] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.114659][ T316] usb 5-1: Product: syz [ 30.118963][ T316] usb 5-1: Manufacturer: syz [ 30.123616][ T316] usb 5-1: SerialNumber: syz [ 30.129166][ T316] usb 5-1: config 0 descriptor?? [ 30.137286][ T295] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 30.147313][ T373] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 30.154631][ T373] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 30.287238][ T30] kauditd_printk_skb: 61 callbacks suppressed [ 30.287252][ T30] audit: type=1400 audit(1774139426.924:135): avc: denied { write } for pid=386 comm="syz.1.32" name="raw" dev="proc" ino=4026532398 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 30.336918][ T30] audit: type=1400 audit(1774139426.964:136): avc: denied { create } for pid=388 comm="syz.1.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 30.366705][ T30] audit: type=1400 audit(1774139426.964:137): avc: denied { bind } for pid=388 comm="syz.1.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 30.387402][ T373] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 30.394054][ T30] audit: type=1400 audit(1774139426.994:138): avc: denied { listen } for pid=388 comm="syz.1.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 30.396889][ T295] usb 3-1: Using ep0 maxpacket: 8 [ 30.417835][ T30] audit: type=1400 audit(1774139426.994:139): avc: denied { connect } for pid=388 comm="syz.1.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 30.419699][ T373] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 30.445673][ T30] audit: type=1400 audit(1774139427.024:140): avc: denied { accept } for pid=388 comm="syz.1.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 30.465510][ T30] audit: type=1400 audit(1774139427.074:141): avc: denied { read } for pid=388 comm="syz.1.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 30.487449][ T58] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 30.494042][ T58] usb 4-1: No valid video chain found. [ 30.499860][ T58] usb 4-1: selecting invalid altsetting 0 [ 30.521448][ T393] Disabled LAPIC found during irq injection [ 30.577261][ T295] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 30.584837][ T295] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 30.596321][ T295] usb 3-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 30.601055][ T58] usb 4-1: USB disconnect, device number 2 [ 30.687261][ T295] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 30.694818][ T295] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 30.706425][ T295] usb 3-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 30.797258][ T295] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 30.804745][ T295] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 30.816344][ T295] usb 3-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 30.833889][ T30] audit: type=1400 audit(1774139427.464:142): avc: denied { ioctl } for pid=400 comm="syz.3.37" path="socket:[16182]" dev="sockfs" ino=16182 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 30.837291][ T6] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 31.097323][ T316] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 31.109519][ T6] usb 1-1: Using ep0 maxpacket: 8 [ 31.109519][ T295] usb 3-1: string descriptor 0 read error: -22 [ 31.109969][ T295] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 31.130043][ T295] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.147369][ T58] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 31.186818][ T30] audit: type=1400 audit(1774139427.814:143): avc: denied { create } for pid=406 comm="syz.1.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 31.206303][ T30] audit: type=1400 audit(1774139427.814:144): avc: denied { bind } for pid=406 comm="syz.1.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 31.267220][ T6] usb 1-1: config 0 has an invalid interface number: 186 but max is 0 [ 31.275520][ T6] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 31.286691][ T6] usb 1-1: config 0 has no interface number 0 [ 31.381371][ T322] usb 3-1: USB disconnect, device number 2 [ 31.447228][ T6] usb 1-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 31.456505][ T6] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.464923][ T6] usb 1-1: Product: syz [ 31.469466][ T6] usb 1-1: Manufacturer: syz [ 31.474212][ T6] usb 1-1: SerialNumber: syz [ 31.480243][ T6] usb 1-1: config 0 descriptor?? [ 31.687210][ T58] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 31.696490][ T58] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.705170][ T58] usb 4-1: Product: syz [ 31.709714][ T58] usb 4-1: Manufacturer: syz [ 31.714433][ T58] usb 4-1: SerialNumber: syz [ 31.721310][ T295] usb 1-1: USB disconnect, device number 2 [ 31.724704][ T58] usb 4-1: config 0 descriptor?? [ 32.247209][ T316] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 32.260058][ T316] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to power up PHY: -71 [ 32.270366][ T316] CoreChips: probe of 5-1:0.41 failed with error -71 [ 32.282928][ T316] usb 5-1: USB disconnect, device number 2 [ 32.353656][ T437] netlink: 4 bytes leftover after parsing attributes in process `syz.0.53'. [ 32.362550][ T26] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 32.607309][ T26] usb 2-1: Using ep0 maxpacket: 16 [ 32.613036][ T441] Zero length message leads to an empty skb [ 32.767233][ T26] usb 2-1: unable to get BOS descriptor or descriptor too short [ 32.867200][ T26] usb 2-1: config 7 has an invalid interface number: 192 but max is 0 [ 32.875516][ T26] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 32.886053][ T26] usb 2-1: config 7 has no interface number 0 [ 32.892386][ T26] usb 2-1: config 7 interface 192 has no altsetting 0 [ 33.057332][ T26] usb 2-1: New USB device found, idVendor=0421, idProduct=0128, bcdDevice=a6.39 [ 33.066567][ T26] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.075369][ T26] usb 2-1: Product: syz [ 33.079668][ T26] usb 2-1: Manufacturer: syz [ 33.084583][ T26] usb 2-1: SerialNumber: syz [ 33.469839][ T26] usb 2-1: bad CDC descriptors [ 33.478293][ T26] usb 2-1: USB disconnect, device number 3 [ 33.882064][ T20] usb 4-1: USB disconnect, device number 3 [ 33.922979][ T477] APIC base relocation is unsupported by KVM [ 35.283396][ T497] ================================================================== [ 35.297512][ T497] BUG: KASAN: slab-out-of-bounds in xfrm_policy_inexact_list_reinsert+0x606/0x6c0 [ 35.306765][ T497] Read of size 1 at addr ffff88811639a3f8 by task syz.3.74/497 [ 35.314354][ T497] [ 35.316710][ T497] CPU: 1 PID: 497 Comm: syz.3.74 Not tainted syzkaller #0 [ 35.323848][ T497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 35.333957][ T497] Call Trace: [ 35.337272][ T497] [ 35.340316][ T497] __dump_stack+0x21/0x30 [ 35.344695][ T497] dump_stack_lvl+0x110/0x170 [ 35.344729][ T497] ? show_regs_print_info+0x20/0x20 [ 35.344753][ T497] ? load_image+0x3e0/0x3e0 [ 35.344774][ T497] ? unwind_get_return_address+0x4d/0x90 [ 35.364943][ T497] print_address_description+0x7f/0x2c0 [ 35.370572][ T497] ? xfrm_policy_inexact_list_reinsert+0x606/0x6c0 [ 35.377109][ T497] kasan_report+0xf1/0x140 [ 35.381699][ T497] ? xfrm_policy_inexact_list_reinsert+0x606/0x6c0 [ 35.388245][ T497] __asan_report_load1_noabort+0x14/0x20 [ 35.394049][ T497] xfrm_policy_inexact_list_reinsert+0x606/0x6c0 [ 35.400425][ T497] xfrm_policy_inexact_insert_node+0x938/0xb50 [ 35.406626][ T497] ? xfrm_netlink_rcv+0x72/0x90 [ 35.411523][ T497] ? netlink_unicast+0x876/0xa40 [ 35.416504][ T497] ? netlink_sendmsg+0x879/0xb80 [ 35.421483][ T497] ? ____sys_sendmsg+0x5b7/0x8f0 [ 35.426544][ T497] ? ___sys_sendmsg+0x236/0x2e0 [ 35.431406][ T497] ? x64_sys_call+0x4b/0x9a0 [ 35.436032][ T497] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 35.442110][ T497] xfrm_policy_inexact_alloc_chain+0x53d/0xb30 [ 35.448400][ T497] xfrm_policy_inexact_insert+0x70/0x1130 [ 35.454131][ T497] ? __kasan_check_write+0x14/0x20 [ 35.459657][ T497] ? _raw_spin_lock_bh+0x94/0xf0 [ 35.464611][ T497] ? policy_hash_bysel+0x13f/0x6f0 [ 35.469843][ T497] xfrm_policy_insert+0x126/0x9a0 [ 35.474877][ T497] ? xfrm_policy_construct+0x54f/0x1f00 [ 35.480460][ T497] xfrm_add_policy+0x4ed/0x850 [ 35.485231][ T497] ? xfrm_dump_sa_done+0xc0/0xc0 [ 35.490203][ T497] xfrm_user_rcv_msg+0x4dc/0x7b0 [ 35.495162][ T497] ? xfrm_netlink_rcv+0x90/0x90 [ 35.500081][ T497] ? avc_has_perm_noaudit+0x490/0x490 [ 35.505465][ T497] ? x64_sys_call+0x4b/0x9a0 [ 35.510064][ T497] ? selinux_nlmsg_lookup+0x237/0x4c0 [ 35.515464][ T497] netlink_rcv_skb+0x1f5/0x440 [ 35.520255][ T497] ? xfrm_netlink_rcv+0x90/0x90 [ 35.525114][ T497] ? netlink_ack+0xb50/0xb50 [ 35.527292][ T20] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 35.529801][ T497] ? wait_for_completion_killable_timeout+0x10/0x10 [ 35.543878][ T497] ? __netlink_lookup+0x387/0x3b0 [ 35.548928][ T497] xfrm_netlink_rcv+0x72/0x90 [ 35.553654][ T497] netlink_unicast+0x876/0xa40 [ 35.558467][ T497] netlink_sendmsg+0x879/0xb80 [ 35.563270][ T497] ? netlink_getsockopt+0x530/0x530 [ 35.568481][ T497] ? do_futex+0xde8/0x2800 [ 35.573037][ T497] ? security_socket_sendmsg+0x82/0xa0 [ 35.578517][ T497] ? netlink_getsockopt+0x530/0x530 [ 35.584011][ T497] ____sys_sendmsg+0x5b7/0x8f0 [ 35.588813][ T497] ? __sys_sendmsg_sock+0x40/0x40 [ 35.593847][ T497] ? import_iovec+0x7c/0xb0 [ 35.598447][ T497] ___sys_sendmsg+0x236/0x2e0 [ 35.603390][ T497] ? __sys_sendmsg+0x280/0x280 [ 35.608173][ T497] ? __fdget+0x1a1/0x230 [ 35.612434][ T497] __x64_sys_sendmsg+0x206/0x2f0 [ 35.617393][ T497] ? ___sys_sendmsg+0x2e0/0x2e0 [ 35.622346][ T497] ? __kasan_check_write+0x14/0x20 [ 35.627461][ T497] ? switch_fpu_return+0x15d/0x2c0 [ 35.632671][ T497] x64_sys_call+0x4b/0x9a0 [ 35.637186][ T497] do_syscall_64+0x4c/0xa0 [ 35.641625][ T497] ? clear_bhb_loop+0x50/0xa0 [ 35.646314][ T497] ? clear_bhb_loop+0x50/0xa0 [ 35.651004][ T497] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 35.656922][ T497] RIP: 0033:0x7f47454c2799 [ 35.661338][ T497] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 35.681024][ T497] RSP: 002b:00007f4743f1d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 35.689505][ T497] RAX: ffffffffffffffda RBX: 00007f474573bfa0 RCX: 00007f47454c2799 [ 35.697497][ T497] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000007 [ 35.705497][ T497] RBP: 00007f4745558c99 R08: 0000000000000000 R09: 0000000000000000 [ 35.713581][ T497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 35.721578][ T497] R13: 00007f474573c038 R14: 00007f474573bfa0 R15: 00007ffce2bf8448 [ 35.729580][ T497] [ 35.732696][ T497] [ 35.735082][ T497] Allocated by task 497: [ 35.739419][ T497] __kasan_kmalloc+0xda/0x110 [ 35.744126][ T497] __kmalloc+0x13d/0x2c0 [ 35.748396][ T497] sk_prot_alloc+0xed/0x320 [ 35.752912][ T497] sk_alloc+0x38/0x430 [ 35.756991][ T497] pfkey_create+0x12a/0x660 [ 35.761504][ T497] __sock_create+0x38d/0x7a0 [ 35.766112][ T497] __sys_socket+0xec/0x190 [ 35.770544][ T497] __x64_sys_socket+0x7a/0x90 [ 35.775233][ T497] x64_sys_call+0x8c5/0x9a0 [ 35.779752][ T497] do_syscall_64+0x4c/0xa0 [ 35.784187][ T497] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 35.790102][ T497] [ 35.792441][ T497] The buggy address belongs to the object at ffff88811639a000 [ 35.792441][ T497] which belongs to the cache kmalloc-1k of size 1024 [ 35.806514][ T497] The buggy address is located 1016 bytes inside of [ 35.806514][ T497] 1024-byte region [ffff88811639a000, ffff88811639a400) [ 35.820175][ T497] The buggy address belongs to the page: [ 35.825931][ T497] page:ffffea000458e600 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x116398 [ 35.836312][ T497] head:ffffea000458e600 order:3 compound_mapcount:0 compound_pincount:0 [ 35.844653][ T497] flags: 0x4000000000010200(slab|head|zone=1) [ 35.850763][ T497] raw: 4000000000010200 ffffea0004580c00 0000000200000002 ffff888100043080 [ 35.859556][ T497] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 35.868266][ T497] page dumped because: kasan: bad access detected [ 35.874719][ T497] page_owner tracks the page as allocated [ 35.880452][ T497] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 104, ts 6392783287, free_ts 0 [ 35.898541][ T497] post_alloc_hook+0x192/0x1b0 [ 35.903325][ T497] prep_new_page+0x1c/0x110 [ 35.907840][ T497] get_page_from_freelist+0x2d3a/0x2dc0 [ 35.913404][ T497] __alloc_pages+0x1a2/0x460 [ 35.918002][ T497] new_slab+0xa1/0x4d0 [ 35.922079][ T497] ___slab_alloc+0x381/0x810 [ 35.926679][ T497] __slab_alloc+0x49/0x90 [ 35.931024][ T497] __kmalloc_track_caller+0x169/0x2c0 [ 35.936409][ T497] __alloc_skb+0x21a/0x740 [ 35.940837][ T497] netlink_sendmsg+0x611/0xb80 [ 35.945970][ T497] ____sys_sendmsg+0x5b7/0x8f0 [ 35.950838][ T497] ___sys_sendmsg+0x236/0x2e0 [ 35.955623][ T497] __x64_sys_sendmsg+0x206/0x2f0 [ 35.960575][ T497] x64_sys_call+0x4b/0x9a0 [ 35.965039][ T497] do_syscall_64+0x4c/0xa0 [ 35.969558][ T497] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 35.975468][ T497] page_owner free stack trace missing [ 35.980840][ T497] [ 35.983348][ T497] Memory state around the buggy address: [ 35.988984][ T497] ffff88811639a280: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 35.997062][ T497] ffff88811639a300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 36.005219][ T497] >ffff88811639a380: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc [ 36.013389][ T497] ^ [ 36.021464][ T497] ffff88811639a400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 36.029537][ T497] ffff88811639a480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 36.037608][ T497] ================================================================== [ 36.045673][ T497] Disabling lock debugging due to kernel taint [ 36.054976][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 36.054989][ T30] audit: type=1400 audit(1774139432.684:168): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 36.084869][ T30] audit: type=1400 audit(1774139432.684:169): avc: denied { search } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 36.097264][ T20] usb 5-1: Using ep0 maxpacket: 16 [ 36.109713][ T30] audit: type=1400 audit(1774139432.684:170): avc: denied { write } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 36.133558][ T30] audit: type=1400 audit(1774139432.684:171): avc: denied { add_name } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 36.154284][ T30] audit: type=1400 audit(1774139432.684:172): avc: denied { create } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 36.175724][ T30] audit: type=1400 audit(1774139432.684:173): avc: denied { append open } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 36.199217][ T30] audit: type=1400 audit(1774139432.684:174): avc: denied { getattr } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 36.237228][ T20] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 36.245788][ T20] usb 5-1: config 0 has no interface number 0 [ 36.251982][ T20] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 36.262211][ T20] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 36.272444][ T20] usb 5-1: config 0 interface 41 has no altsetting 0 [ 36.437269][ T20] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 36.446487][ T20] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.454549][ T20] usb 5-1: Product: syz [ 36.459099][ T20] usb 5-1: Manufacturer: syz [ 36.463765][ T20] usb 5-1: SerialNumber: syz [ 36.470065][ T20] usb 5-1: config 0 descriptor?? [ 36.487346][ T493] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 36.494416][ T493] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 36.708796][ T493] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 36.716011][ T493] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 37.387214][ T20] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 38.837252][ T20] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Error reading RX_CTL register:ffffffb9 [ 38.867236][ T20] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 38.878673][ T20] CoreChips: probe of 5-1:0.41 failed with error -71 [ 38.886525][ T20] usb 5-1: USB disconnect, device number 3