last executing test programs: 12.336032885s ago: executing program 3 (id=542): ioperm(0x2, 0x7ff, 0x8) ioperm(0x9, 0x6, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x4) socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000480)={'filter\x00', 0x104, 0x4, 0x3c0, 0x0, 0xe8, 0xe8, 0x2d8, 0x2d8, 0x2d8, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'dvmrp0\x00', 'macvlan0\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28}}, {{@arp={@loopback, @multicast2, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg0\x00', 'veth0\x00'}, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xe0}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410) sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x6) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000240)={0x1, @raw_data="a425e2f1a54b24f15655595860608d70ff6e425a6c36af37b33facd22dc8a9c7044410d324b03e654156762092a62fea8f13441431ce248bfc73a6726ee61b5191d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d100a05e97ed3dcad452db6e08a991e2c78b057f55deebde6f0b11ce65700c0a1ad7946ff7c355db87566e3e5abb7a37b52876fd9fa194c09273031900"}) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, &(0x7f0000000000)=0x1001, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) migrate_pages(r1, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0x40008000a) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1, 0x10000053}}, {{0xa, 0xce21, 0x0, @empty, 0x5}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x190) 10.5276965s ago: executing program 3 (id=547): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0xfff, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2a}], {0x95, 0x0, 0x0, 0x4000000}}, &(0x7f0000000080)='GPL\x00'}, 0x94) 9.908087529s ago: executing program 3 (id=549): syz_emit_ethernet(0xa6, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010120", 0x70, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96489269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "00000000040026000480ffff"}]}}}}}}, 0x0) 9.217270392s ago: executing program 3 (id=550): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000001dc0)='afs_flock_ev\x00', r0, 0x0, 0x7}, 0x18) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x44080) r1 = getpid() setrlimit(0xb, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mlock2(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0) sysfs$2(0x2, 0x817fff, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000100)={0xf030000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f90d, 0x9, '\x00', @p_u8=0x0}}) mlock2(&(0x7f0000a20000/0x1000)=nil, 0x1000, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f0000000500)={'syz', 0x3}, &(0x7f0000000040)="42d7386debb9c100", 0x8, 0xfffffffffffffffe) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r4) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000480)="baf4d747dee9c0f0d5c218348924", 0xe, 0x40, &(0x7f0000000240)={0x11, 0x88a8, 0x0, 0x1, 0xd8, 0x6, @broadcast}, 0x14) sendmmsg$inet(r3, &(0x7f00000027c0)=[{{&(0x7f00000001c0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000540)="9a24f37d536bf2e5a366540e4b40a60a98c74b46d8dcc3baefe3d7e5221a33545a637a829b744d5b175ee36960833d0c9e0e61497d1ae2266d28e0ec9f8603529aea4d2eaee85f14566b63b3bcbcedacb406a802211f8a1d3d0007dc80a58c688a9dfecc37f9bf72b2310dc8ebb6dda9c6d57890b0759775505b7626d1f36b09102e61aa6064e5de2470dfe2f66efefa7c5b4b170739c0ce41a8bf96426fb916e44fbd6766390c6a8383d4c1e788f5a88f05a79b2618576e25589e8b649cd8eb188e8075cf1c03ecba4d10a657457f8df09e20f60970880a15145356e85cbeb5b7ff06968f1e3cd3ee95dab42c680c549a", 0xf1}, {&(0x7f0000000640)="6ccdac1bb45a0b4ded07352222a79f9355ee2de6245e107c0d36fff9904d845404ce73989144da0951e97f5e0658f1859a023a7fae9e5b00d087f2e02afc1102db1c633aec7e2e1c7f66643799ec06369cf584f5cd285402d246db1bd2798af0059178dc7a3dd685419a57e80574abd38043b36bac7c59800b70d173c99f4ea0e8d63d1b50b5daa6d535bf63bca9754987e173a3e36b603154dad2eb28d73a2c33ac22b86a8f48f76b98069ad881411799ae2c8608fe0abb7cfc55137382984156a4af4dc80d", 0xc6}, {&(0x7f0000000740)="43ed82450359215f43e31fdf0c1732ccd30e68b80d282638a60421f7464f640d9b41f8c6610841031b9bf8548a349f23c09569c93bab3f2f5e9028885c266016557772cf5aeec10cdfebfba6a3b37262bee31b69ef9f224ec1b4e533bfdeea4ee56bc8fcb911b1746ed6f6f3492787e30f53b826c104cc184b7be7c2701f28bf358e06a9140d08ad226e75496452dfb87545a3e97995db8ddf1de8c9a7ee98508638753fc6f7dd5bf7771b43ce4b22c5e7a4efb051bb83b044fda24e83627b9a3fc4", 0xc2}], 0x3, &(0x7f0000000840)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0xffffffef}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @local}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_retopts={{0x14, 0x0, 0x7, {[@noop, @end]}}}, @ip_retopts={{0xa4, 0x0, 0x7, {[@lsrr={0x83, 0x2b, 0xa0, [@loopback, @loopback, @multicast1, @dev={0xac, 0x14, 0x14, 0x20}, @multicast1, @broadcast, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @remote]}, @rr={0x7, 0xf, 0xbd, [@multicast1, @remote, @broadcast]}, @lsrr={0x83, 0x1b, 0x59, [@multicast2, @remote, @empty, @loopback, @private=0xa010102, @multicast2]}, @timestamp_addr={0x44, 0x34, 0x68, 0x1, 0xd, [{@loopback, 0x2}, {@empty, 0x1}, {@dev={0xac, 0x14, 0x14, 0x3d}, 0xffff0aad}, {@empty, 0x100}, {@rand_addr=0x64010101, 0x8}, {@remote}]}, @rr={0x7, 0xb, 0x63, [@multicast2, @private=0xa010102]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}], 0x158}}, {{&(0x7f00000002c0)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000300)="050e7a7b064d7b7a437a9b25e599a7bf97726569cf1ee937b6c85fce0cb8d71bbcaafcef516bdc3af5957ad7dfcc348abb0c24ce34c5e1", 0x37}], 0x1}}, {{&(0x7f00000003c0)={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f0000001ac0)=[{&(0x7f00000009c0)="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", 0x1000}, {&(0x7f0000000400)="73a147f279", 0x5}, {&(0x7f00000019c0)="903f572b2951e8afa48b5358f06007fadc3109c665ec5ff66aa829217be1969d4da48f31cb60154b3d780673242f1aa30f0cf40446f652a1479921f7c45b7d298cfbe59eb2ff48c6af5fb7b649c14f7e7e160d1d112f991131550b995b6d743f563a4c4755e33ab31675321b4e8634cc541d42eb0567a6349639cb135d0be90c25485cf94168cfcdc71fd63a73361525ea745e0c77ec640d00835dd6982a662dcccdd53212ad8b68c436e277b3ad45055856abf2ce83b704c8ce6d756cba77c0830cf1d396f34ca6f9e92c252bf2de1c9e20135a1ad3b6978022f65b3d", 0xdd}, {&(0x7f0000000480)="2ac242322c4a5e1421ba6f2876faeeea7b8ef7413726315422022308c577eeb49046adad572bda937edc4c5aea37946c909630db6a824cf6c6279cf174193ab5c8d15764188f54520291fafedd613707cbc188d136ebd78c", 0x58}], 0x4, &(0x7f0000001b00)=ANY=[@ANYBLOB="6c0000a653aea631611c354c341457de039086000000000000000000c3000000441c2b11ffffffff00000007ac1414320000e000ac1414bb0000000101443ca191ac1414adbb00005db764010100000036510c8fdda629fcedd9c0d80800e0000002000006d87f00000100000009ac1414aa0000007f6401010100000009ac1414aa0000ffff0000"], 0x88}}, {{&(0x7f0000001bc0)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10, &(0x7f0000001c80)=[{&(0x7f0000001c00)="c445aef2ab1d4509097bab44bcc6365f30bbec5a068711774e81e67c61c67eb6182b01147838bab173d73a4117f19c81f519bceaedb66d37f49aa9d6713c648e71cd", 0x42}], 0x1, &(0x7f0000001cc0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xe0}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7f}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xb4}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8f1}}], 0xc0}}, {{&(0x7f0000001d80)={0x2, 0x4e22, @private=0xa010102}, 0x10, &(0x7f0000002280)=[{&(0x7f0000001dc0)}, {&(0x7f0000001e00)="b2253b69d68dad59a316aa35d5754c21c5382b7a43736cc2a35915ac927be078f1c32170e7d4ae5fecbd703ba4c4292e9aa69eb70692d6affd0e8218295182c35ac3f959af6f22b541688bb41113c031cf9af92ba93d5b97d2452c31d23db9c7d5250bd04dc97660c5eacf2d4ce0e4f23fad26ca0533ce004624394ead51d33b08168771d94972639201aa9646e1d6cf65938963b28ee600be9d", 0x9a}, {&(0x7f0000001ec0)="58cde14e6acc5ffe3fff77fa694f2e3b1e154198a83bbbac9f72a4deb1d049e88dbfcba991f157d72d39036136fdbbfd8eda20fd5a9524bef158e81bbc1a32efdb13299230571a0f6f37bcd9693a17a3f1cecfb210972b44ca6fcae562841e8024a6fe644cc5f503145473aa3dd351746c5203ca8d90beb6cc53d4f6958bc4", 0x7f}, {&(0x7f0000001f40)="1e792951bacf9576febda23776e49a46a201c2fa0c487363ea97a0ec1008b54b337f9dca6edac22dcb501fb966f484ac7cd472b1d7627ebfdf6f153606", 0x3d}, {&(0x7f0000001f80)="32f75d7e762ec3b793319e4009c4a69f4a1de5f7934135afbfadd174f1476e85864a006017591c10e6be02d1624475c6f781617d30e42fd324a586c43ed761a352b760a3b58df45692d082fb14440ce1ab973a7de1bfe9d3cef8a08163be101bd662fc083af3731a8380217616f7da39dc11b29a6d021ce9003ac167b9a85894623274a9170a3b521f66d1d4453303534be344a32e55508729595a5f54d48ede843dea0531d41b3bac2e74d3515b3fdc6459c8d74c351d496645735c448e7457527e1b96ea967cf1b4b1054a0dadd6", 0xcf}, {&(0x7f0000002080)="49daacd0d2ffb7c2d9573ec92656160105d570591035bca93e325c26c06ceaa14ac64b4471210fb46bfeba28601e5ea210db88650fd862f61a4b0b7b7024946a22d8c1ea9a865bec46", 0x49}, {&(0x7f0000002100)="a51f900e3f56de68ef959c7c1e0d18b6719d1f2ce9b867aa30cc0df5411afbb4c63820bb7bba2d9f06e4148d313bd551979373edb08c4df2e88b29d7fdb3cd52fdd4b7d1a20bcbab354a99b8c8cecd43a2035b8388c70e6ec27360a7ba6f2467cb1641f3992473b775807c01e457ae9a7e27faf6bcd85ba5f13b10bc7cb3549d01e5a1b6", 0x84}, {&(0x7f00000021c0)="6e54c88292a9899a72e9cf772d78a5b1d147c01a5dffbdbcdf1a0a86f64b1faf796e20ab9d422f5ad2699555ac143f55dbef640c70cb373ae8c1ff6d6ba063e91c088fd821fdf1fb2f98f608269831193bc9db1b1f2e5cb281ccbfd1376740ca6098e5cc4d87bc73277a63e8ec33ce9154b8e4cff881deba96b88e9dbebbdda856619943fd23bc2f6ecb472053084c9e52cbd92d3c692e15ce01a41cbcf658932a", 0xa1}], 0x8, &(0x7f0000002300)}}, {{&(0x7f0000002340)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000002480)=[{&(0x7f0000002380)="27ba10aa7cbcc718067874f148f19cc8364c015af5f76b2dba153cc8284d5be4a0202b7ea83262781cb3992ec398a370c909a28a9a2602c5222e0f3ed1de5b9971654ffc830c92b791f7607fad7cdc3492638b4123c122140c47ab8ec0327336b29824ebca413bd415b597", 0x6b}, {&(0x7f0000002400)="3990b822cb636e5a6c04fcd7b267cbc8ca552b4a902d0ecade45116b", 0x1c}, {&(0x7f0000002440)="e3b10ecfb83aa431e8328051c5", 0xd}], 0x3, &(0x7f00000024c0)=ANY=[@ANYBLOB="ac000000000000000000000007000000940401004408fc70800000014454a751ac1e0101fffffffe0000020000000200ac14142f00000003e00000020000b50eac141441000031020004ac141424000000046401010100191eb81ddb89915263c20000000000067f000001fffffff7440500130a01010000000004ac1414aa00000002014424aef3ac1414bb00000401e000000100000001e0000002000000026401010200000003000000000000001400000000000000000000000200"], 0xc8}}, {{&(0x7f00000025c0)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f0000002780)=[{&(0x7f0000002600)="26c491", 0x3}, {&(0x7f0000002640)="af59854bab98dd9b4df591d3094daf60d2fce52764b9bd2de408559b6d6e049eb47dd379f643d9f8547152dd610d7c784d90df5e784a8284b6092d39590e50911f4bcd08e25742b46f8aa3a7b2c7214721950c23ada74ea235ea173437459f8f4bd387ac19ecff49701053b95e4d2f666b5f9974f08b518273eeda038cbf415a5765b4d55f7d91f86916c333da458e14722bf5a54c8fa775224d15b94b1c8cf431bedfe1eb667b4bc7f5dbc8ec8f9d7395902e8229b7a1f70eca97ec7310befad53d26d3", 0xc4}, {&(0x7f0000002740)="01988dcd460944061d1812fb45285a5b6f9f03cbaeeb185e91ab4445fe5b7e67a7fa3172e23662f2c2d527b9bd5bf50801cdbfd9", 0x34}], 0x3}}], 0x7, 0x8000) keyctl$read(0xb, r5, 0x0, 0x0) r7 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e29, 0x6, @dev={0xfe, 0x80, '\x00', 0x2d}, 0xf}, 0x1c) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000100)=0xc081, 0x4) syz_usb_connect(0x2, 0x3d, 0x0, 0x0) 6.699810316s ago: executing program 2 (id=564): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40010) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x58, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)=@gettfilter={0x3c, 0x2e, 0x200, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x10, 0xfff3}, {0x10}, {0xf, 0x4}}, [{0x8, 0xb, 0x3}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040000) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r3, &(0x7f0000000ac0)=[{0x0}, {&(0x7f0000006340)="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", 0xffe}], 0x2) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000040)={r3, &(0x7f00000000c0)="9773fae403e8851ac30dd87d1f659b289c4ba1fb980577dfbe8ff0296473690aa4b45c0ba2de8c714904c5f559a32d5263840e54b963f55bb495c0e0eb8383529a2033fffb4b47d72fee4d4d8029fcebd3fcb49097cfa6bbbe9d88d4a1bd9f33e26bb68d414f16cd84568a918e5759293bff6fdae854a07aa45bc9556c5f86ca", 0x0}, 0x20) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f0000000080)=@framed, 0x0}, 0x94) stat(0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newlink={0x64, 0x10, 0x401, 0x4002, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x1d188}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0xffffffc0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x9}}]}]}}}, @IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}]}, 0x64}}, 0x6008010) 6.219951918s ago: executing program 2 (id=565): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000002e00090027bd700000000000040000002930118031f9e05e2f826cfc31dc2af824704f63dac994ce05dc7224e5479795b50d9015"], 0x40}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 6.035931556s ago: executing program 3 (id=566): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000cc0)=@newqdisc={0x34, 0x24, 0x1, 0x200001, 0xfffffffc, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}}, 0x24008004) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) unshare(0x24020400) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r7, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getpeername(r6, 0x0, &(0x7f00000000c0)) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r9, 0x421, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x4000000000000000, 0xc35d4f6d52288271}, 0x200048c4) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=0x0) sched_setscheduler(r10, 0x1, &(0x7f0000000100)=0x5) r11 = getpid() r12 = syz_pidfd_open(r11, 0x0) setns(r12, 0x24020000) syz_socket_connect_nvme_tcp() ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r12, 0x81f8943c, &(0x7f0000000300)) 5.909960899s ago: executing program 2 (id=567): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="600000000206010100000000000000000000000805000100070000000900020073797a32000000001400078005001500ff000000080012400000000612000300686173683a6e65742c706f7274000000050005000a000000050004"], 0x60}}, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="23010002aa774e20ba0d00306f190102030109021200000030000904f0fc005803be0400"], 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) r2 = syz_open_pts(0xffffffffffffffff, 0x20800) dup3(r2, 0xffffffffffffffff, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) fanotify_init(0x4000, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1d}}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d658ec87bb53679fd0000078548ceb6c4414fab0919616e19aecedec1b76aea5922406b64cddaeb9d339ba3c01c2c7b8df8e61740b9af2d4d58654a4af0fa0ce1f830cc1eaf991fd00"}, 0xd8) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001600)}, 0x0) 5.343782262s ago: executing program 1 (id=569): r0 = io_uring_setup(0x7d98, &(0x7f0000000940)={0x0, 0xdf07, 0x40, 0x1, 0x8105}) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) read(r1, &(0x7f0000000100)=""/41, 0x29) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = fanotify_init(0x2, 0x8000) fanotify_mark(r3, 0x1, 0x8000018, r2, 0x0) pipe(&(0x7f0000005880)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r4, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) (async) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x54, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xff7f}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCI={0xc, 0x1, 0xfffffffe000000}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macsec0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000001340)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x14, 0x0, 0x7, {[@ssrr={0x89, 0x3, 0x75}]}}}], 0x18}, 0x8000) (async) r6 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$COMEDI_RANGEINFO(r6, 0x80106408, &(0x7f0000000080)={0x8000, &(0x7f0000000040)=[{}, {}, {}, {}, {}]}) 5.316132598s ago: executing program 1 (id=571): r0 = epoll_create1(0x0) setxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)={'U+', 0x6}, 0x16, 0x3) r1 = fsopen(&(0x7f0000000100)='fusectl\x00', 0x0) fcntl$lock(r1, 0x25, &(0x7f0000000240)={0x2, 0x0, 0x7fffffffffffffff, 0x9}) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000180)={[0x4]}, 0x8) syz_usb_connect(0x5, 0x34, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f00000000c0)) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x1, 0x0, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0xfffffffffffffe05, 0x8, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x5}) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000001500)=@multiplanar_overlay={0xf8, 0x1, 0x4, 0x40, 0x3f7402, {}, {0x5, 0x1, 0x7, 0x1, 0x6, 0x8, "7bd4cf5c"}, 0x1000, 0x3, {0x0}, 0xfffffffc}) signalfd(r2, &(0x7f0000000b80)={[0xfffffffffffffffc]}, 0x8) syz_usb_connect(0x3, 0xa, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0) 5.063697028s ago: executing program 3 (id=572): socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r2, &(0x7f0000004d00), 0x7fffffffffffd33, 0x20000890) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101a01) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='rtc_alarm_irq_enable\x00', r8}, 0x18) r9 = openat$rtc(0xffffffffffffff9c, &(0x7f00000004c0), 0x22000, 0x0) ioctl$RTC_AIE_OFF(r9, 0x7002) write$binfmt_script(r4, &(0x7f00000007c0)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r3, 0x80045519, &(0x7f00000003c0)=0xc7a) 5.063369347s ago: executing program 4 (id=573): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x1}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000004000000000800040001000000", 0x24) 4.974450618s ago: executing program 4 (id=574): capset(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x19) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0}, 0x68) (async) r3 = io_uring_setup(0x4126, &(0x7f00000007c0)={0x0, 0x0, 0x800, 0x0, 0x1000000}) io_uring_register$IORING_REGISTER_RING_FDS(r3, 0x13, &(0x7f0000001bc0), 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async) r4 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4}) (async) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES8=r0], 0x50) io_uring_enter(r4, 0x2219, 0xcf74, 0x0, 0x0, 0x0) 4.112687642s ago: executing program 0 (id=576): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001c00357428bd7000fed3df2502000000", @ANYRES32, @ANYBLOB="4000b00408000100e0"], 0x30}, 0x1, 0x0, 0x0, 0x20004001}, 0x80c0) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[], 0x48) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x20000, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000100)={0x2, 0x4e22, @private=0xa010102}, 0x10) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001b700)=""/102392, 0x18ff8) r2 = syz_open_dev$loop(&(0x7f0000000280), 0xa4f, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) write$binfmt_misc(r3, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001004000", "2809e8dbe108598948224ad54afac11d875397bdb22d00009520a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bc0007008019000000000000000000000000af1e4ccfb7b3cad80004010400", [0x1, 0x2000000000001]}}) 3.682086842s ago: executing program 2 (id=577): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="20000000f100000000000000000000f8ffffff0400"/40], 0x0) r1 = syz_open_dev$loop(&(0x7f0000000280), 0xa4f, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) write$FUSE_BMAP(r2, &(0x7f00000000c0)={0x18, 0xfffffffffffffff5, 0x0, {0x8000000000000001}}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0500000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000009f000000000000"], 0x50) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r4, 0x4038ae7a, &(0x7f0000000040)={0x2, 0x12, &(0x7f0000000240), 0x0}) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d00009520a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bc0007008019000000000000000000000000af1e4ccfb7b3cad80004010400", [0x1, 0x2000000000001]}}) 3.632175263s ago: executing program 0 (id=578): socket$inet6(0xa, 0x80002, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x149002, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$can_raw(0x1d, 0x3, 0x1) syz_open_dev$cec(&(0x7f0000000180), 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010001ffe00989837a182138b00268f1c", @ANYRES32=0x0, @ANYBLOB="ff7f000080000000140012800a00010076786c616e0000000400028008000a00", @ANYRES64=r0], 0x3c}, 0x1, 0x8000a0ffffffff, 0x2000000}, 0x0) 3.425205352s ago: executing program 4 (id=579): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000600)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000bc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=0x1, @ANYRES32=r4, @ANYBLOB='7'], 0x20) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x4c, 0x0, &(0x7f0000000440)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000380)={@flat=@binder={0x73622a85, 0x0, 0x1, 0x30}, @flat=@binder={0x73622a85, 0x1, 0x2}, @fd}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) 3.389744444s ago: executing program 0 (id=580): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x25dfdbff, {0x7}, [@NDA_LLADDR={0xa}]}, 0x28}}, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x14, 0x2f, 0x1, 0x0, 0x25dddbfb, "", [@nested={0x4, 0xf2}]}, 0x14}], 0x1, 0x0, 0x0, 0x41}, 0x4008080) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000180)={'pcl816\x00', [0x4f27, 0x6, 0x3, 0x4, 0x5, 0xcc9, 0xf, 0x4, 0xa, 0xfffffffc, 0x2, 0x3, 0xfffffffe, 0x1, 0x7, 0x101, 0x0, 0x1a449, 0x3, 0x40000003, 0x2, 0xcaa7, 0x0, 0x20001e58, 0x7, 0x63e, 0x3c, 0x8, 0xfffffffe, 0x0, 0xfffffff8]}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r2}, 0x8) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x40}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44881}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd25, 0x25df9bfb, {0x0, 0x0, 0x0, r6, {0xd, 0xe}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0x54, 0x2, [@TCA_ROUTE4_ACT={0x50, 0x6, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xa, 0x5, 0x4, 0x7, 0x8}, 0x39}}]}, {0xfffffffffffffe7a}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x80, 0x3}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8010}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f0000000040)=@gettaction={0x14, 0x32, 0x10, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x20000000) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x4d, 0x0, 0x0}, 0x50) 3.295670462s ago: executing program 4 (id=581): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4004044}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffff274}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0x4a, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6010104000140600fe8000000000000000000000000000bbfe8000000000000000000000008d00aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5470000b90780000"], 0x0) 3.241871817s ago: executing program 1 (id=582): socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000202dd4ecc570a42900"/28, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYRESOCT=0x0, @ANYRES64=r3, @ANYBLOB="00000000100000001c001a80080002"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000f53000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b70300001b0000008500000083000000bf0900000000000055090100000000009500000000000000bf080000000000007b9af8ff00000000b5090500000000007baaf0ff00000000bda804000000000007080000f8ffffffbfa400000000000007000000f0ffffffb70200000800000018220000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000004600000076000000bf91000000000000b6080000000000008500000085000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.161976867s ago: executing program 4 (id=583): syz_open_dev$dmmidi(&(0x7f0000000000), 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) (rerun: 64) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) (async, rerun: 64) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) (rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) (async) fchdir(0xffffffffffffffff) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r2, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r3, 0x2) (async) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0c0000000400000004000000090000"], 0x48) (async) r4 = socket(0x1e, 0x4, 0x0) ioctl$GIO_FONT(r2, 0x4b60, &(0x7f0000000200)=""/72) (async) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000080)=@req={0x4, 0x4, 0x4, 0x488}, 0x10) (async, rerun: 64) sendmmsg(r4, 0x0, 0x0, 0x9200000000000000) (async, rerun: 64) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000003501d1ff0f0000000000000004000c00010000"], 0x28}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) (async) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) 2.836020456s ago: executing program 0 (id=584): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) r3 = fsmount(0xffffffffffffffff, 0x1, 0x80) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f0000000580)={0x9, 0x108, 0xfa00, {r4, 0x4, "9035f9", "03143b30f87e738c246ff8327302fd5e871e947e6d5fbc21926d94cb7ab236f9a487991515a29ec7cc10fe78eb05b7f7600adc0db80de8b6186471cb2595d651853fbbd15d1c3ab99787b09bc7732ce7e1c11c79babda3c7d83c3a657ebc271a06d0300d9df18e15b73bbf525983efcdd8576766e7f06116d2e1292798dd378001831378ff606973f5efc1dacd951fde39b1c071ab7b6555930ef73d44677f2e029a35cd02b6e12effd3f4c0b2ffe70f1dfe88d58fb611245ee37d37075f252edfca48e8ba49ad89c0440b2d87d0bb716c19ca1bf9b56674a14e055c9c589952d84f9fb312bdc0f2d61bcefab75a1985d4920694350c913bb08c636392c025d1"}}, 0x110) setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000000)=0x1, 0x4) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x1, 0xf0, 0x4}, 0x1}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xfff3, 0x10}, {0xfff1, 0x9}, {0x2, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x48040}, 0x20000050) 1.710116048s ago: executing program 1 (id=585): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000c40)=ANY=[@ANYBLOB="ac010000160001052cbd7000fbdbdf2500000000000000000000000000000001e00000020000000000000000000000004e2200064e24fffa0200802088000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0a010101000000000800000000000000000004d53300000000000000000000000000000000000000ff01000000000000a2000000000000000700000000000000fcffffffffffffff00000000000000000400000000000000ff7f000000000000fe4800000000000004000000000000000900000000000000df5f000000000000940b00000000000005000000f8ffffff0900000026bd7000000000000a00027f010000000000000003000000de00000008001e340000ac000700fe8000000000000000000000000000bbfc0100000000000000000000000000014e2200024e21000d020020a03200000000", @ANYRES32=0x0, @ANYRES32=0x0], 0x1ac}, 0x1, 0x0, 0x0, 0x4075}, 0xc800) 1.686108818s ago: executing program 2 (id=586): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = getuid() r9 = getgid() fstat(r6, &(0x7f0000006480)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000006680)='./file0\x00', &(0x7f00000066c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000001680)="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", 0x2000, &(0x7f0000006880)={&(0x7f0000000180)={0x50, 0x0, 0xd800000000000000, {0x7, 0x2b, 0x8001, 0x800190, 0xe9, 0x7, 0x8, 0x1d, 0x0, 0x0, 0x8, 0x7f06ea0d}}, &(0x7f0000000040)={0x18, 0x0, 0x8a5, {0x4c}}, &(0x7f0000000240)={0x18, 0x0, 0x800, {0xfffffffffffffbef}}, &(0x7f0000000300)={0x18, 0xfffffffffffffff5, 0x2, {0xa646}}, &(0x7f0000000440)={0x18, 0xffffffffffffffda, 0xfffffffffffffffc, {0x8}}, &(0x7f0000000480)={0x28, 0x0, 0x1, {{0x21, 0x9, 0x1, r1}}}, &(0x7f0000003680)={0x60, 0x0, 0x1, {{0x4, 0x3, 0x0, 0x2, 0x7, 0x4, 0xe, 0x1}}}, &(0x7f0000000540)={0x18, 0xfffffffffffffff5, 0x4, {0xff}}, &(0x7f0000000600)={0x17, 0x0, 0x3, {'\')+-\',\x00'}}, &(0x7f0000003700)={0x20, 0xfffffffffffffffe, 0x0, {0x0, 0x9}}, &(0x7f00000037c0)={0x78, 0x0, 0x10001, {0x101, 0x2, 0x0, {0x0, 0x5, 0x7f, 0x4, 0xce, 0x2, 0xc5b3, 0x5, 0xb, 0x2000, 0x7, 0x0, 0xee01, 0x0, 0xffffffff}}}, &(0x7f0000003900)={0x90, 0x0, 0x5, {0x5, 0x3, 0x2, 0x7, 0x5, 0x9, {0x6, 0xffffffffffffa09d, 0x8f29, 0x0, 0x1, 0xfffffffffffffffe, 0x9, 0x6, 0x8, 0xa000, 0x8, 0x0, 0x0, 0xfffffff9, 0x5}}}, &(0x7f00000039c0)={0xd0, 0xfffffffffffffffe, 0xfbde, [{0x1, 0x9, 0xa, 0x4, 'syzkaller\x00'}, {0x5, 0x186, 0x1, 0x43e, '*'}, {0x4, 0x9, 0x9, 0x800, 'aegis128\x00'}, {0x0, 0x2, 0xa, 0x1, 'syzkaller\x00'}, {0xa, 0x9, 0xa, 0xc, 'syzkaller\x00'}]}, &(0x7f0000005f40)={0x518, 0x0, 0x8, [{{0x0, 0x1, 0xfffffffffffffff7, 0xca, 0x2d, 0xffff, {0x1, 0x9, 0xc0700000000000, 0x9, 0x7f, 0x5, 0xe88, 0x4767, 0x3, 0x0, 0x5, 0x0, 0x0, 0x4}}, {0x2, 0x9, 0xa, 0x2522, 'syzkaller\x00'}}, {{0x5, 0x1, 0x2, 0x100000001, 0x80000001, 0x300, {0x6, 0x6, 0x0, 0x4, 0x9, 0x6, 0x8dc, 0x3, 0xfffffff1, 0x2000, 0x0, 0xee00, 0x0, 0x3, 0x7fffffff}}, {0x6, 0x8, 0x0, 0x101}}, {{0x6, 0x3, 0x7fffffff, 0x2, 0xcb87, 0x5, {0x2, 0x5, 0xd51, 0x3d9020e2, 0x7, 0x2, 0xdfdf, 0x0, 0x2, 0x2000, 0x1000, 0x0, 0x0, 0x0, 0x3}}, {0x4, 0x8, 0xd, 0x6, 'sched_switch\x00'}}, {{0x3, 0x1, 0x7, 0x4, 0x6, 0x8, {0x0, 0x3, 0x6, 0xffffffffffffffff, 0x5, 0x695e, 0x7, 0x8000, 0x5, 0xc000, 0xf, 0x0, 0x0, 0x800, 0x6}}, {0x5, 0x9, 0x1, 0x512, '\x00'}}, {{0x6, 0x0, 0x1, 0x0, 0x0, 0x401, {0x1, 0x5, 0x6, 0x100000001, 0x7, 0x4, 0xc, 0xffffffef, 0x1, 0x1000, 0xfffffffb, 0x0, 0x0, 0x6, 0x6e05fa38}}, {0x6, 0x3, 0x6, 0x10000, 'smaps\x00'}}, {{0x2, 0x3, 0x401, 0x9, 0x0, 0x3ff, {0x0, 0x9, 0x100000001, 0x3f5, 0x8, 0x7ff, 0x5, 0x6, 0x4, 0x2000, 0xcfe, 0x0, 0x0, 0x4, 0x6}}, {0x1, 0x7, 0x6, 0x0, 'smaps\x00'}}, {{0x0, 0x3, 0x8, 0x100000001, 0x1, 0x2, {0x1, 0x2, 0xe34, 0xa, 0xfffffffffffffdda, 0x3, 0xffff, 0x6a2d, 0x5, 0x8000, 0xfffffff7, 0x0, 0x0, 0x0, 0x52a}}, {0x3, 0x5fa2, 0x8, 0xd, '!\xd1#],\x01:\\'}}, {{0x3, 0x1, 0x7, 0x7, 0x3, 0xffffff00, {0x1, 0x7fff, 0x100, 0x5, 0x611, 0xff, 0x0, 0x5, 0x10001, 0xc000, 0x6, r8, r9, 0x3, 0x6}}, {0x2, 0x9, 0x6, 0x800, 'smaps\x00'}}]}, &(0x7f0000006580)={0xa0, 0x0, 0x100000000, {{0x1, 0x2, 0xfffffffffffffffb, 0x6, 0x8, 0x7, {0x5, 0x7, 0x400, 0xffffffffffffffff, 0x9, 0x1, 0x52, 0x72, 0x9, 0x2000, 0x9, r10, 0x0, 0x28c0, 0x2}}, {0x0, 0x2}}}, &(0x7f0000006640)={0x20, 0x0, 0x2f1, {0x5, 0x4, 0x3, 0x6}}, &(0x7f0000006740)={0x130, 0xfffffffffffffff5, 0xc29, {0x7, 0x40, 0x0, '\x00', {0x40, 0x1, 0x5, 0x5, 0x0, r11, 0x2000, '\x00', 0x7ff, 0x1ff, 0x0, 0x4, {0x800, 0x1}, {0x8, 0x9295}, {0xffffffff, 0x139c2f9f}, {0x1, 0x8}, 0x0, 0x1ff, 0xffffffff, 0x8}}}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) preadv(r5, &(0x7f00000000c0)=[{&(0x7f0000000640)=""/4112, 0x1010}], 0x1, 0x4000, 0x0) r12 = accept4(r0, 0x0, 0x0, 0x80800) sendmsg$nl_route_sched_retired(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100)=@newqdisc={0x24, 0x24, 0x108, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x1) recvmmsg(r12, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000740)=""/246, 0xf6}, {&(0x7f0000000340)=""/121, 0x79}], 0x2}, 0x1}], 0x2, 0x0, 0x0) 1.531705803s ago: executing program 1 (id=587): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) bind$netlink(r0, 0x0, 0xfffffffffffffeee) r5 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) setsockopt$inet_int(r6, 0x0, 0x18, &(0x7f00000001c0)=0x1000, 0x4) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200, 0x0, 0xa4ff}}, 0xe8) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0) 1.531346667s ago: executing program 4 (id=588): syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x12) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x20040001) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r2, &(0x7f00000002c0)={'#! ', './file0', [], 0xa, "1f410e2852ad52cb07410969e814977e4f2c4a80522094786c8673fb61cf8b86bd030000005a3c7c04055f1f70e4064d46b2bb9e5100d446bb6afb2c0fc07b58f4a9c1006a0b6c05639e23ec12979ff9b48ca61e6dec58682449c75d86eb4337b8d343ed9c18927289d3d788fa281a5742690ff5a505cfff34fc1503afbfd2d44b50e4ca119f67b2890064d83a34eae5f4e64ae0c7c124730f21dcbc2d36ade1464efc381735512e000bc2b08cd6d659d3cfb1f79688235dd8"}, 0xc4) close(r2) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007e3dc410cd0621013ddd0102030109021b000100094000090485000189fe1f000905820220"], 0x0) 1.47212389s ago: executing program 0 (id=589): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010800040000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="0a000600080211000001000030005080110001004abee33908f8eef16f162471f4000000050002"], 0x58}, 0x1, 0x0, 0x0, 0x4ac0f00}, 0x0) 188.938109ms ago: executing program 0 (id=590): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() r2 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r6, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r7, 0x3, 0x1) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x1c, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0xc, 0x0, 0x0, @uid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 147.26786ms ago: executing program 2 (id=591): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="00220f0000000b2e2b5aa40bf85e080083"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000040)={0x1, 0xffffffff, 0x6f94, 0x5, 0xa45a2b2e, 0x7fff}) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) socket$inet6(0x10, 0x4, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r4 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip6_vti0\x00', 0x0}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80021}, 0xc, &(0x7f0000000380)={&(0x7f0000000a40)=ANY=[@ANYBLOB="741000002100100027bd7000fddbdf2500000000000000000000ffffac1e0001fe8000000000000000000000000000bb4e2100004e2000000a0080005c00", @ANYRES32, @ANYRES32, @ANYBLOB="b06b6e000100000008001d0006000000191001007368613531322d6e656f6e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000887e0000c27a56a3af0ee88304243b7abb8fbeed88214aed6285d0ec1be006764eaf417cf41ee8f4537d711b0b0bbad340e410f4413d7ce146812324a7e79779ff2388dbeec67efccf459cfa0312ccb52450d7cfa445c7b1ef32ba72cafd5e7d237e22008338621b9e82fe5f804774865b789c60334b1681718c2a1dc0e8a21ac115e66f20d20bece7704a6a393fea1dc4ed062ea7e1271464085c4bfde9acdb2a53119f1fb7e7b4eeb523d81f9ec12e5bf5e7e232b7b952ae54fef5ab8ea3f486e3206572fbdd16199c6dc9207581da5e8f4d955885c68ef32c37f905a0788888717529a842655e600c2db3322b78fe42799c9c110c6dc8e1500b18c24608442be4ebd1b7215fa5b776aa45d19ae289b0915ac208711abfe3b70abccbc1087ecc9b3676a5365b1a2d91eb102fccde2474881b6211f2eb57c7ea328e7a099683890d90b0c234e19fadac59b0430003e4f7ac898a34326c0c3c7343011130f54b37a3e667edc93d9b175379441ee69681af9a7bfee47da79117f8750b7379fc293e60d583215c4820ac82b18c6c8557c0bcf6cf49961731b33fb6b1213e535ec60b9bb1a4abe5140eca29fd4d728e1bbd4b27205aae2f5c4fc2c7bbeda0142b35b699fd429d7e267b3abd5f47942c1ba3af1f05e5470f90b7f277cbb55867b6eb4f02232ae00bcb802352a7f431781232ec6574f6ca4c2c5c78a6af806a03c12abc28971038f9e15adbaa104f70cb86e08df2d9667f0c629a95971f4e9f33bf1217d4c455e3975dc9929ef06e93272b2fab34f80be88a3c9a162f9cd33e6538d1b9888405caa97a389c6e206c28fc4ed25fa7e1155bc9e7682c664571792e00beca5e0a4c058bd51c1a24f747254caab1daf6916e8838b79f20e73f9424245ce531f1176f1dcd72fb0e881380162e4c3d0d4e5517c19d3e8ea1cfa7587403ff56e445d1bd10151300f8dbb0b4330b088216e26b55ea72960441859cc74ad10b3f3c6d28a392114afbd2c1263b34159b87ae53fa318db400980865da20303746dcb8968f26b752fc77283ce205f542847bd95631ca0c07203088809ea4dedd543d85fd0593adb1001a129c7ece1f2c321c1fa30ac9c7f24c90aedaa0bcde13c00cc4ae584c615c237c3702603fc3200d1da2646a1ddaa92650f5c998f50f0caf33a0205ea14e4de99da644e2cefeb6647b4a5525951237725c89a786e2b3304179b64b799836ba6f9fdfd6ac160c5bb8b14f252013bd204ab9d424e1c3092ecb774c116c36a5e353e4300bf76f610349d16e4d542862082439e540178e89adb1d54a9efe174ba33ceb3afb7feb5977e8f6036dd006f07d214f743bdcc2e429574026fd4a581f270dad57bac9baade152bbdab76c0c203aa262f347cd9ab5313ed9e884d71b8dd5d5ac1abaf147a587f703d388df263de8053b2ed95d2158530990168afadcb02116ea5985cd1132fa9b9f64a557b4c30a01c3e2cd891fe34b61e8b61de6a848ee6d864d0e2234e8f9b6702cc9939f5cf21415f402b8b9a67a0c5d20c68f4b29a6294aa39dbec96e213f9c99151728ed7aa9614356c44dd1c0e120a3e1665d8ff4914d0699f6f7ae3911cf6c90b1f8a499550436fe244b49cc6ecf85137a03aa1be9dd58c49375eab55e77ac451d55c1e17d6a13ccde36d49ad40359f3521ed2dd40c0a805ad3f8bd77f117d2bb359e1330c69527f6df8195a35b2550eb9d592c5993b746b83020f8fda3136b76cd291d6c62e95974feddf0ac784acf1268ada9235b0eb07c8e4c8026e4c273e9b98b9cb64777bc213664ba4dedb49a546ef3b50e9fe17de8d912c61d6207281e0e44f46255770f64d18e23e39d70d8c49eac50e06d3840909be357ed30f3cb04e745d488675eb282f526c2fd66f06bcf04bf2586a3c51d608aefb2bf5e5b351919b5249d6b2ca42419da7c25fc4999ea9c5d9ee95bbfec225e47903dd01c4aeab2e50db844028a756d40a6e46d57dc5dd1255c8168c07973ee86b57e91133f03155add06cdfa7f0baa2819ae8ff980ae66ba2aa7f24aef69addec39151e597e8965564439ca672fe8616fcc51365cf7c4ea1450d3eb40fe967954d10b85d8762177f5dd7f6e60552e8d31da062743a3ee11b6e5bbf7398d06b0f129db35d101198992fecc1af1029552917ad8b9ea2655e73bf6b79f72faad6cde339be24919ab366c5c9f5d3af3a172ba83a1fc1dbcdaff0b5df47c1239b1fbf935f9138f7a9969246771fa1b52a3beef7358bb9313ccdc4a32f4a130dd6fd4d96433a9f8e6e22d33f7949815aff7610105bb0c70ae2e41bc69343037975374974262c36af1526dd0dab1778887e2082fdbec941eaa57f31cbd62d14f4adc3fcdc1de729f1164390569dd0a8fc051e46378b50ad7c33b5afbd71a0f7c65b928c4c0368214af33d3e64b0cc27a73446c9ece59b900bfdc1859e89240645e26969b819bbec70ef069846a"], 0x1074}, 0x1, 0x0, 0x0, 0x20000000}, 0x28880) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r5, &(0x7f0000000a00)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0xc52, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}, 0x1c, &(0x7f0000000200)=[{&(0x7f00000004c0)="f3", 0x1}], 0x1}}], 0x1, 0x4000841) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x2, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) read$FUSE(r6, &(0x7f0000006300)={0x2020}, 0x402) ioctl$SOUND_MIXER_WRITE_VOLUME(r6, 0xc0044d08, &(0x7f0000000040)=0x125) 0s ago: executing program 1 (id=592): r0 = epoll_create1(0x0) setxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)={'U+', 0x6}, 0x16, 0x3) r1 = fsopen(&(0x7f0000000100)='fusectl\x00', 0x0) fcntl$lock(r1, 0x25, &(0x7f0000000240)={0x2, 0x0, 0x7fffffffffffffff, 0x9}) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000180)={[0x4]}, 0x8) syz_usb_connect(0x5, 0x34, &(0x7f0000000e80)=ANY=[], 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f00000000c0)) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x1, 0x0, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0xfffffffffffffe05, 0x8, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x5}) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000001500)=@multiplanar_overlay={0xf8, 0x1, 0x4, 0x40, 0x3f7402, {}, {0x5, 0x1, 0x7, 0x1, 0x6, 0x8, "7bd4cf5c"}, 0x1000, 0x3, {0x0}, 0xfffffffc}) signalfd(r2, &(0x7f0000000b80)={[0xfffffffffffffffc]}, 0x8) syz_usb_connect(0x3, 0xa, &(0x7f00000001c0)=ANY=[@ANYBLOB="12011001844c807104160180a0ba0102030109023d00020801000609045c0300e95c4c0300226b4f3d7944c6f5bb7fd6e3334a336cede1d4013b6811fd00fecebc574612bf64e7f9312204b1646628b1fec53ffd075aad4b7a771e87a6339803af741215a647796cfce507bcbd0232f87332d1d5c7bba640c137ef382e700564fd701ed1436e22b9a009050e03000400091809050c01400005000300068eb70018d1b15baf290524f3c01d042c2373e498256a7f4ad13f8036cd5adf6df473131e4b8f9db2f72405e67300250101ff03000905041010000602050005cc217af042f078aaa6cc72cc087ee62f973a736af27a680d98be9cdf994d2a9229bafb797cf6d401edccbbd1e2b13ece26920dfaa4d6a66f4e6b8e5a21e5b8ba516472d970ca010c646e9fb4241b21aaa1d3e8d282cc22fde97cf653bcdfe4958577d9e0191e38c80215ac6f7229fb4b6e12d5f2c5d7083245ca7c8f82ffe28e3b3ee6828ebc350544e89855b09ab161a4d31cd02d512c5c71551665c3923b1d3f8b1e5a25cf6f518e21eb4869c76702fd056bc678317f061e7355458924ce00f3891f49fd01fec93203452d2239f2c63e5109050610400409fd4009050908080006ff0809058500ff038003030905000410000101030904cd0200ffffff070024060000002400060000240f0100000000010105000200241a02001200240203002413025895ee4094fc44a4e82ec7bc1e3125cfc374580340bc48fa4e4274ffaf9500aa3e67303188c9c7eac8c91974d679e254a95adcfa0ea3e4115ac960327038a2f408614ca505b488d8d9b79b1f7aa3f39af7ee39fc4af55d9c95eccb5a26e5768c2c05aa47b8f93c81be8f18dc366029b2e7fede4b3f01dd1dabf08d69ec8a1a07186ee690917371e17a23cc4154ca4b15e18c9051a334343017bcffddea4b60f1abd405ba0f6c6c6d252c440df6cf9b7cc06306a31ae418e26cd8cdf62213c844391ec3af1406b5f6187f8a71b08f00f39e710024150000002402020100060006330f002402021200ff01e89007ea248f002402010204160730d1af3d96178e0024020201000200ea4f2409a8a496e79fbe00240202090000028c77f40024020204000800095ebab156090512032000040605002501000980000001510de651214d7dc0c2d01c190df091185d27fca8137e029ac54a4dfcf885cb03c4dbac0f274de9e89ac56306e9582a10db776342b89a92f984227ac0c91faee8a4ae54636036d4f7468dd008ee970919077732a3b081807f923831247f59e0a193c52e3ef8bcc7e2dce5d4ae7e00248d61cc2c1a07dce55752e70c4bfb90280a097b157709050b0108000d7f05002501030703000005ca4ab52de0257a3513b79a892935639c55e4f06ddbbd5c57a612e8ee28d4262cd1111f15f755691fb26b9c99e0af703f96828b09b044bc2aa662c656ba8d2a5f1310b808cdd9b11b57191d43079ba895e531dd3aebfc690676fc438fac32ea27f242100ffa875ebe0378e3f53e8a6171551dccf31af5b8de5d597c4086d32aadf45cf058efd30a3ec72eb43936bfa709fa48955929691a454064b4b3fd4cfb8ed9b5833796a9549c659874a50af2767cf369d8fe4d01a8d1cd98d2fe5438f0b0b38d556a9e8d59f4288f313febad4fd0e6d9e8d9ad722344ab38df3318788567ac655c347ca0697762400346e24d68295109058001200016010900075f8293bafae5a1326d7258e047327678c58a6d6853926e1f1b21c5ebafa3b843bb13402fc74e2ecf2a4a4f81641e831aa254659774264f457d7b8580c23120bb9200dea7f55a8cda14a56b65bad8b4049d5bfe40028919f15dde8a7e0b95e448428f31320de74108576cc40b40e691ccd95d6e4a6c4246ca053a900dc135c5be74498488a5bf635a00250181fb430b09050c0e00040c03020025018089090000250100077f00090500102000010108090502040000e8810000058fc38b1d03beecb66639f99e7ee116a8023aabf58faf8675cc954df099faaa5caafaf845d8551c29140a91af70cb818029c2127fb9ed8c83d2672f5b2a1073d6dfe72a484fe4dc6fe0a34d7dc494601d09c86a8cf393002501000175ae09050308000205080009050c000004028e01002476e7812d8440b1b014578109ed58b55429887f3fec06351d3e5b54f25c2ea9399a86817f417b1a3cb80010000000000000625105db22ea20ec0a47aa8ea9a2154fc88b93af3bbbae29a980be22b0203e10143a6daccebf2fbbad6a13e733a3f716c372f6e417e5fb79efd493109e5f64198216056f27e9922d517d78959463a648343851124f0f68621adfcf57a4e36e42eb09050e010800090005002501020501000024dfba5e467abd15b83aa3a8d6bc9781fb324ae13089c5062e0905060c08000203000025010040018009050e020004fa460009043d0b008611c00209050404100007070500250100040200000d50f41d4c5fe4b69f64404d8374888c51ef03a1aaa5875f70a9d30f3862e27d726f4c70d06459a2932a24fe6376d3e6b101288d2c2879e9ed44765c937520dd652111a0a32cef198b4530cd50febeb7e71c2d1edb34b6bdc55dda135d0c7d2eb289c3e1b7ed3b08ce69d709050c02080049ff0600075f5393bb44afa86ca0774e7f2cd210141dd23d2015a8a8a1cbd34a4cfa067e3a2e0c5909e487266eb2d15115059041d98cebde0deb4e06b3bb5a1b6e4805d7c9cf8cd429a57ff4b819aee058a9ebf597d536685a6f68a82a06c0b1bef0d9db394a8beabd9e231c2d30bc07cc4a629fa06038e60c3479cc09050701ff03030800002501c201090009050a101000ee24020003cd2ebff4f22d64211221cbae8512d6112dc8169b4711059c8328a37380b0c97c8e821fae5b3becff91e9175094410905030420000100080025018250000400250103066c080905090000020701030007c14dbb31fdd7eee1c980cd71b514f1d006dfc2c20d08320570ba3e01e226060a1caeef94dea6a39110a46a892a394f8a384ae441b6e5e1eef56d12ce780f30e787f29b603b7b436bf5f5d355e5421d2f0f07de8cb7aea03ef757d5abd6915e919c13dfb46a3b52c679111bf7b69dacb5d09cf999b6c104deb2247c185121a289ba7d845ab120cc559d9bc7cd6bcace20be9536699875c68ab5da95b063842ef5e40586ba99dc3c762817089e18b38acb403d7ef0e665be7b0e26b4c912744dacbe31c7ed102b3f2e25b72172b218086ef08ebaac827b79c0dcf76fb879973a7ba69e1ad47ae1dcbc24726fe46cdc2258e76ec409f5404884a40e6957fe4bf007fa7f68856cd64a12"], 0x0) kernel console output (not intermixed with test programs): 6230] ubi31: scanning is finished [ 90.347424][ T6230] ubi31: empty MTD device detected [ 90.382013][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 90.382026][ T30] audit: type=1400 audit(1765491073.582:212): avc: denied { ioctl } for pid=6227 comm="syz.4.87" path="socket:[8189]" dev="sockfs" ino=8189 ioctlcmd=0x6628 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 90.461362][ T30] audit: type=1400 audit(1765491073.622:213): avc: denied { write } for pid=6227 comm="syz.4.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 90.508266][ T6230] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 90.516190][ T6230] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 90.549131][ T6230] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 90.626520][ T30] audit: type=1400 audit(1765491073.622:214): avc: denied { read } for pid=6227 comm="syz.4.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 90.627256][ T6230] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 90.779473][ T6230] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 90.829071][ T6243] binder: BINDER_SET_CONTEXT_MGR already set [ 90.835166][ T6243] binder: 6236:6243 ioctl 4018620d 200000000600 returned -16 [ 90.886503][ T6230] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 90.951781][ T6230] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3987701496 [ 91.031136][ T6230] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 91.073078][ T6235] ubi31: background thread "ubi_bgt31d" started, PID 6235 [ 91.137879][ T6250] netlink: 8 bytes leftover after parsing attributes in process `syz.3.93'. [ 91.186465][ T6250] netlink: 4 bytes leftover after parsing attributes in process `syz.3.93'. [ 91.195174][ T6250] netlink: 'syz.3.93': attribute type 11 has an invalid length. [ 91.237249][ T6250] netlink: 'syz.3.93': attribute type 13 has an invalid length. [ 91.256136][ T30] audit: type=1400 audit(1765491074.452:215): avc: denied { create } for pid=6252 comm="syz.4.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 91.399292][ T6253] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 91.516532][ T5895] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 91.780274][ T30] audit: type=1400 audit(1765491074.982:216): avc: denied { connect } for pid=6258 comm="syz.2.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 91.844495][ T30] audit: type=1400 audit(1765491075.002:217): avc: denied { write } for pid=6258 comm="syz.2.96" path="socket:[9475]" dev="sockfs" ino=9475 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 91.886561][ T5895] usb 1-1: device descriptor read/64, error -71 [ 91.913333][ T30] audit: type=1400 audit(1765491075.002:218): avc: denied { open } for pid=6258 comm="syz.2.96" path="/dev/ptyq8" dev="devtmpfs" ino=127 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 91.954362][ T6266] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.028735][ T6266] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.085361][ T6268] netlink: 8 bytes leftover after parsing attributes in process `syz.4.100'. [ 92.099645][ T6268] netlink: 4 bytes leftover after parsing attributes in process `syz.4.100'. [ 92.156689][ T5895] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 92.396463][ T5895] usb 1-1: device descriptor read/64, error -71 [ 92.457614][ T6274] netlink: 8 bytes leftover after parsing attributes in process `syz.2.99'. [ 92.466495][ T6274] netlink: 8 bytes leftover after parsing attributes in process `syz.2.99'. [ 92.559776][ T5895] usb usb1-port1: attempt power cycle [ 93.006499][ T5895] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 93.061289][ T5895] usb 1-1: device descriptor read/8, error -71 [ 93.266894][ T6283] netlink: 52 bytes leftover after parsing attributes in process `syz.1.101'. [ 93.275835][ T6283] netlink: 52 bytes leftover after parsing attributes in process `syz.1.101'. [ 93.301301][ T6283] netlink: 52 bytes leftover after parsing attributes in process `syz.1.101'. [ 93.322076][ T30] audit: type=1400 audit(1765491076.522:219): avc: denied { bind } for pid=6277 comm="syz.4.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 93.346122][ T5895] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 93.492852][ T5895] usb 1-1: device descriptor read/8, error -71 [ 93.617195][ T5895] usb usb1-port1: unable to enumerate USB device [ 93.632312][ T30] audit: type=1400 audit(1765491076.752:220): avc: denied { write } for pid=6264 comm="syz.3.98" name="001" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 94.320913][ T6291] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 94.654854][ T6291] loop9: detected capacity change from 0 to 7 [ 94.661536][ T6291] Dev loop9: unable to read RDB block 7 [ 94.667937][ T6291] loop9: unable to read partition table [ 94.673633][ T6291] loop9: partition table beyond EOD, truncated [ 94.679799][ T6291] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 94.866480][ T10] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 94.895789][ T30] audit: type=1400 audit(1765491078.092:221): avc: denied { getopt } for pid=6299 comm="syz.2.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 95.006572][ T10] usb 2-1: device descriptor read/64, error -71 [ 95.731874][ T6312] netlink: 8 bytes leftover after parsing attributes in process `syz.0.110'. [ 95.776723][ T10] usb 2-1: new low-speed USB device number 4 using dummy_hcd [ 95.905168][ T6306] xt_hashlimit: max too large, truncated to 1048576 [ 95.949719][ T30] audit: type=1400 audit(1765491079.152:222): avc: denied { setopt } for pid=6299 comm="syz.2.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 95.966446][ T10] usb 2-1: device descriptor read/64, error -71 [ 96.088532][ T10] usb usb2-port1: attempt power cycle [ 96.119082][ T30] audit: type=1400 audit(1765491079.322:223): avc: denied { lock } for pid=6314 comm="syz.0.112" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=9556 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 96.539218][ T30] audit: type=1400 audit(1765491079.742:224): avc: denied { read write } for pid=6319 comm="syz.3.111" name="radio4" dev="devtmpfs" ino=981 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 96.547412][ T10] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 97.059128][ T10] usb 2-1: device descriptor read/8, error -71 [ 97.137900][ T30] audit: type=1400 audit(1765491079.742:225): avc: denied { open } for pid=6319 comm="syz.3.111" path="/dev/radio4" dev="devtmpfs" ino=981 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 97.362389][ T10] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 97.507471][ T6329] netlink: 'syz.0.115': attribute type 6 has an invalid length. [ 97.550156][ T30] audit: type=1400 audit(1765491080.252:226): avc: denied { map } for pid=6319 comm="syz.3.111" path="/dev/radio4" dev="devtmpfs" ino=981 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 97.592998][ T10] usb 2-1: device descriptor read/8, error -71 [ 97.648948][ T30] audit: type=1400 audit(1765491080.252:227): avc: denied { ioctl } for pid=6319 comm="syz.3.111" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 97.730734][ T10] usb usb2-port1: unable to enumerate USB device [ 97.820203][ T6332] netlink: 8 bytes leftover after parsing attributes in process `syz.3.117'. [ 97.866811][ T30] audit: type=1400 audit(1765491081.052:228): avc: denied { create } for pid=6331 comm="syz.1.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 97.959917][ T30] audit: type=1400 audit(1765491081.112:229): avc: denied { connect } for pid=6331 comm="syz.1.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 98.036210][ T30] audit: type=1400 audit(1765491081.112:230): avc: denied { name_connect } for pid=6331 comm="syz.1.119" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 98.140472][ T30] audit: type=1400 audit(1765491081.272:231): avc: denied { accept } for pid=6331 comm="syz.1.119" lport=60872 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 98.366447][ T5895] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 98.404587][ T6350] No control pipe specified [ 98.547777][ T5895] usb 5-1: Using ep0 maxpacket: 16 [ 98.565009][ T5895] usb 5-1: config 8 has an invalid interface number: 206 but max is 0 [ 98.595572][ T5895] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 98.632618][ T5895] usb 5-1: config 8 has no interface number 0 [ 98.649707][ T5895] usb 5-1: config 8 interface 206 altsetting 1 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 98.720618][ T5895] usb 5-1: config 8 interface 206 altsetting 1 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 98.773223][ T5895] usb 5-1: config 8 interface 206 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 98.824129][ T5895] usb 5-1: config 8 interface 206 has no altsetting 0 [ 98.857633][ T5895] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 98.903123][ T5895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.959373][ T5895] usb 5-1: Product: syz [ 98.974622][ T5895] usb 5-1: Manufacturer: syz [ 98.998196][ T5895] usb 5-1: SerialNumber: syz [ 99.426424][ T10] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 99.578601][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 99.599304][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 99.611243][ T10] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0003, bcdDevice= 0.00 [ 99.621343][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 99.630367][ T10] usb 1-1: SerialNumber: syz [ 99.651963][ T10] usb 1-1: 0:2 : does not exist [ 99.709353][ T6353] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 99.715954][ T6353] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 99.732001][ T6353] vhci_hcd vhci_hcd.0: Device attached [ 99.792272][ T6353] netlink: 48 bytes leftover after parsing attributes in process `syz.2.124'. [ 99.839030][ T5959] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 99.862166][ T6372] vhci_hcd: connection closed [ 99.863324][ T50] vhci_hcd vhci_hcd.2: stop threads [ 99.891337][ T6362] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6362 comm=syz.0.126 [ 99.914256][ T50] vhci_hcd vhci_hcd.2: release socket [ 99.944960][ T50] vhci_hcd vhci_hcd.2: disconnect device [ 99.976466][ T5888] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 99.995861][ T5888] usb 37-1: enqueue for inactive port 0 [ 100.009058][ T10] usb 1-1: USB disconnect, device number 9 [ 100.028457][ T5959] usb 2-1: config 171 has an invalid interface number: 109 but max is 0 [ 100.050640][ T5959] usb 2-1: config 171 has an invalid descriptor of length 0, skipping remainder of the config [ 100.072444][ T5811] udevd[5811]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 100.077118][ T5888] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 100.100087][ T5959] usb 2-1: config 171 has no interface number 0 [ 100.143515][ T5959] usb 2-1: config 171 interface 109 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023 [ 100.237950][ T5959] usb 2-1: config 171 interface 109 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 100.304604][ T5959] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 100.332384][ T5959] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.346535][ T5959] usb 2-1: Product: syz [ 100.350702][ T5959] usb 2-1: Manufacturer: syz [ 100.355354][ T5959] usb 2-1: SerialNumber: syz [ 100.375963][ T6371] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 100.459738][ T5895] garmin_gps 5-1:8.206: Garmin GPS usb/tty converter detected [ 100.493246][ T5895] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 100.537158][ T5895] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8 [ 100.567967][ T5895] usb 5-1: USB disconnect, device number 3 [ 100.592725][ T5959] ath6kl: Failed to submit usb control message: -71 [ 100.598515][ T5895] garmin_gps 5-1:8.206: device disconnected [ 100.613829][ T5959] ath6kl: unable to send the bmi data to the device: -71 [ 100.622681][ T5959] ath6kl: Unable to send get target info: -71 [ 100.633925][ T5959] ath6kl: Failed to init ath6kl core: -71 [ 100.645466][ T5959] ath6kl_usb 2-1:171.109: probe with driver ath6kl_usb failed with error -71 [ 100.670711][ T5959] usb 2-1: USB disconnect, device number 7 [ 101.811162][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 101.811175][ T30] audit: type=1400 audit(1765491085.012:240): avc: denied { create } for pid=6397 comm="syz.3.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 101.906787][ T30] audit: type=1400 audit(1765491085.042:241): avc: denied { ioctl } for pid=6397 comm="syz.3.135" path="socket:[9756]" dev="sockfs" ino=9756 ioctlcmd=0x9367 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 102.090597][ T6400] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 102.828391][ T6408] netlink: 8 bytes leftover after parsing attributes in process `syz.4.138'. [ 102.837370][ T6408] netlink: 8 bytes leftover after parsing attributes in process `syz.4.138'. [ 103.217952][ T30] audit: type=1400 audit(1765491086.422:242): avc: denied { bind } for pid=6410 comm="syz.3.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 103.380616][ T6413] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=6413 comm=syz.3.140 [ 104.673963][ T30] audit: type=1400 audit(1765491087.872:243): avc: denied { write } for pid=6436 comm="syz.2.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 105.140105][ T6444] netlink: 2 bytes leftover after parsing attributes in process `syz.3.148'. [ 105.667023][ T30] audit: type=1400 audit(1765491088.462:244): avc: denied { write } for pid=6448 comm="syz.4.150" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 105.707239][ T30] audit: type=1400 audit(1765491088.532:245): avc: denied { sqpoll } for pid=6448 comm="syz.4.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 105.793217][ T30] audit: type=1400 audit(1765491088.992:246): avc: denied { setattr } for pid=6456 comm="syz.1.152" path="/dev/video2" dev="devtmpfs" ino=932 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 105.953020][ T6461] netlink: 16 bytes leftover after parsing attributes in process `syz.4.154'. [ 106.306459][ T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 106.452453][ T6473] netlink: 8 bytes leftover after parsing attributes in process `syz.1.155'. [ 106.464789][ T6473] netlink: 8 bytes leftover after parsing attributes in process `syz.1.155'. [ 106.578929][ T6472] netlink: 104 bytes leftover after parsing attributes in process `syz.2.153'. [ 107.216440][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 107.248267][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 107.257973][ T10] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 107.270472][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 107.291928][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 107.455139][ T10] usb 5-1: string descriptor 0 read error: -22 [ 107.474341][ T10] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 107.527677][ T6481] netlink: 52 bytes leftover after parsing attributes in process `syz.3.158'. [ 107.539841][ T6481] netlink: 52 bytes leftover after parsing attributes in process `syz.3.158'. [ 107.549206][ T6481] netlink: 52 bytes leftover after parsing attributes in process `syz.3.158'. [ 107.681685][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.743328][ T10] usb 5-1: 0:2 : does not exist [ 107.932765][ T6463] netlink: 40 bytes leftover after parsing attributes in process `syz.4.156'. [ 109.400917][ T30] audit: type=1400 audit(1765491092.602:247): avc: denied { setopt } for pid=6494 comm="syz.0.162" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 109.490738][ T6489] netlink: 8 bytes leftover after parsing attributes in process `syz.2.161'. [ 109.499582][ T6489] netlink: 8 bytes leftover after parsing attributes in process `syz.2.161'. [ 111.097772][ T5923] usb 5-1: USB disconnect, device number 4 [ 111.247837][ T6507] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 112.099244][ T30] audit: type=1400 audit(1765491095.302:248): avc: denied { execute } for pid=6514 comm="syz.1.165" name="file0" dev="tmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 112.506721][ T30] audit: type=1400 audit(1765491095.302:249): avc: denied { execute_no_trans } for pid=6514 comm="syz.1.165" path="/35/file0" dev="tmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 112.540670][ T6524] netlink: 72 bytes leftover after parsing attributes in process `syz.1.169'. [ 112.567184][ T30] audit: type=1400 audit(1765491095.742:250): avc: denied { create } for pid=6525 comm="syz.0.168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 112.591608][ T6528] netlink: 28 bytes leftover after parsing attributes in process `syz.1.169'. [ 112.597494][ T30] audit: type=1400 audit(1765491095.742:251): avc: denied { getopt } for pid=6525 comm="syz.0.168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 112.620632][ T6528] netlink: 28 bytes leftover after parsing attributes in process `syz.1.169'. [ 112.709079][ T6530] trusted_key: syz.0.168 sent an empty control message without MSG_MORE. [ 112.951609][ T6532] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 112.957937][ T30] audit: type=1400 audit(1765491096.162:252): avc: denied { watch watch_reads } for pid=6534 comm="syz.0.172" path="/24" dev="tmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 113.040856][ T6533] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 113.040856][ T6533] program syz.2.167 not setting count and/or reply_len properly [ 113.067562][ T6532] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 113.196491][ T5888] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 113.226476][ T6529] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 113.243687][ T30] audit: type=1400 audit(1765491096.442:253): avc: denied { create } for pid=6539 comm="syz.3.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 113.348685][ T6539] delete_channel: no stack [ 113.500448][ T5888] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 113.507892][ T6548] netlink: 52 bytes leftover after parsing attributes in process `syz.0.175'. [ 113.522145][ T6548] netlink: 52 bytes leftover after parsing attributes in process `syz.0.175'. [ 113.531500][ T6548] netlink: 52 bytes leftover after parsing attributes in process `syz.0.175'. [ 113.546564][ T5888] usb 2-1: config 0 interface 0 has no altsetting 0 [ 113.561478][ T5888] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 113.572489][ T5888] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.829439][ T5888] usb 2-1: config 0 descriptor?? [ 113.903053][ T5888] pwc: Askey VC010 type 2 USB webcam detected. [ 114.073932][ T30] audit: type=1400 audit(1765491097.272:254): avc: denied { create } for pid=6550 comm="syz.2.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 114.156676][ T30] audit: type=1400 audit(1765491097.272:255): avc: denied { connect } for pid=6550 comm="syz.2.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 114.208649][ T30] audit: type=1400 audit(1765491097.272:256): avc: denied { setopt } for pid=6550 comm="syz.2.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 114.269477][ T6559] Illegal XDP return value 615200105 on prog (id 38) dev syz_tun, expect packet loss! [ 114.320289][ T6559] ieee802154 phy0 wpan0: encryption failed: -22 [ 114.368538][ T5888] pwc: recv_control_msg error -32 req 02 val 2b00 [ 114.391409][ T5888] pwc: recv_control_msg error -32 req 02 val 2700 [ 114.520310][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 114.522712][ T30] audit: type=1400 audit(1765491097.722:259): avc: denied { name_connect } for pid=6558 comm="syz.0.178" dest=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 114.526631][ T6569] netlink: 8 bytes leftover after parsing attributes in process `syz.2.181'. [ 114.636460][ T30] audit: type=1400 audit(1765491097.822:260): avc: denied { shutdown } for pid=6558 comm="syz.0.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 114.675470][ T5888] pwc: recv_control_msg error -71 req 04 val 1000 [ 114.687471][ T5888] pwc: recv_control_msg error -71 req 04 val 1300 [ 114.720548][ T5888] pwc: recv_control_msg error -71 req 04 val 1400 [ 114.772232][ T30] audit: type=1400 audit(1765491097.832:261): avc: denied { read } for pid=6558 comm="syz.0.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 114.846661][ T30] audit: type=1400 audit(1765491097.872:262): avc: denied { shutdown } for pid=6523 comm="syz.1.169" laddr=::ac14:14aa lport=60232 faddr=fe80::aa fport=65534 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 114.924884][ T5888] pwc: recv_control_msg error -71 req 02 val 2000 [ 114.939177][ T5888] pwc: recv_control_msg error -71 req 02 val 2100 [ 114.964851][ T5888] pwc: recv_control_msg error -71 req 04 val 1500 [ 114.991269][ T5888] pwc: recv_control_msg error -71 req 02 val 2500 [ 115.002535][ T5888] pwc: recv_control_msg error -71 req 02 val 2400 [ 115.057043][ T5888] pwc: recv_control_msg error -71 req 02 val 2600 [ 115.355557][ T5888] pwc: recv_control_msg error -71 req 02 val 2900 [ 115.397262][ T5888] pwc: recv_control_msg error -71 req 02 val 2800 [ 115.412973][ T5888] pwc: recv_control_msg error -71 req 04 val 1100 [ 115.423297][ T5888] pwc: recv_control_msg error -71 req 04 val 1200 [ 115.454061][ T5888] pwc: Registered as video103. [ 115.477070][ T5888] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input7 [ 115.548923][ T5888] usb 2-1: USB disconnect, device number 8 [ 115.848377][ T6581] 9p: Bad value for 'rfdno' [ 115.890510][ T30] audit: type=1400 audit(1765491099.092:263): avc: denied { mount } for pid=6579 comm="syz.2.185" name="/" dev="ramfs" ino=10927 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 116.136484][ T5888] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 116.318926][ T5888] usb 2-1: Using ep0 maxpacket: 16 [ 116.367176][ T5888] usb 2-1: config 8 has an invalid interface number: 206 but max is 0 [ 116.828080][ T5888] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 116.886443][ T5888] usb 2-1: config 8 has no interface number 0 [ 117.033675][ T5888] usb 2-1: config 8 interface 206 altsetting 1 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 117.053174][ T5888] usb 2-1: config 8 interface 206 altsetting 1 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 117.076405][ T5888] usb 2-1: config 8 interface 206 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 117.089744][ T5888] usb 2-1: config 8 interface 206 has no altsetting 0 [ 117.129478][ T30] audit: type=1400 audit(1765491100.162:264): avc: denied { ioctl } for pid=6584 comm="syz.0.187" path="socket:[10938]" dev="sockfs" ino=10938 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 117.170599][ T5888] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 117.214315][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.223387][ T30] audit: type=1800 audit(1765491100.412:265): pid=6580 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.185" name="bus" dev="ramfs" ino=10928 res=0 errno=0 [ 117.260789][ T5888] usb 2-1: Product: syz [ 117.295800][ T5888] usb 2-1: Manufacturer: syz [ 117.308141][ T5888] usb 2-1: SerialNumber: syz [ 117.638556][ T6598] netlink: 8 bytes leftover after parsing attributes in process `syz.2.190'. [ 117.862177][ T30] audit: type=1400 audit(1765491101.062:266): avc: denied { listen } for pid=6599 comm="syz.4.191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 117.956390][ T30] audit: type=1400 audit(1765491101.152:267): avc: denied { accept } for pid=6599 comm="syz.4.191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 118.026773][ T30] audit: type=1400 audit(1765491101.232:268): avc: denied { getopt } for pid=6604 comm="syz.2.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 118.302460][ T6616] tipc: Started in network mode [ 118.320548][ T6616] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 118.350448][ T6616] tipc: New replicast peer: fc01:0000:0000:0000:0000:0000:0000:0001 [ 118.470645][ T6616] tipc: Enabled bearer , priority 10 [ 118.964084][ T5968] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 119.119335][ T5968] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 119.141961][ T5968] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.183874][ T5888] garmin_gps 2-1:8.206: Garmin GPS usb/tty converter detected [ 119.193612][ T5968] usb 4-1: Product: syz [ 119.209873][ T5968] usb 4-1: Manufacturer: syz [ 119.220224][ T5888] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 119.233527][ T5968] usb 4-1: SerialNumber: syz [ 119.263487][ T5968] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 119.280623][ T5888] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8 [ 119.293074][ T5965] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 119.342336][ T5888] usb 2-1: USB disconnect, device number 9 [ 119.389736][ T5888] garmin_gps 2-1:8.206: device disconnected [ 119.590198][ T6633] netlink: 16 bytes leftover after parsing attributes in process `syz.2.197'. [ 119.610056][ T117] tipc: Node number set to 1 [ 119.754801][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 119.754816][ T30] audit: type=1400 audit(1765491102.952:284): avc: denied { add_name } for pid=6617 comm="dhcpcd-run-hook" name="resolv.conf.lapb4.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 119.864616][ T30] audit: type=1400 audit(1765491102.992:285): avc: denied { create } for pid=6617 comm="dhcpcd-run-hook" name="resolv.conf.lapb4.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 119.899111][ T6647] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.991629][ T30] audit: type=1400 audit(1765491102.992:286): avc: denied { write } for pid=6617 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.lapb4.link" dev="tmpfs" ino=2780 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 120.132686][ T30] audit: type=1400 audit(1765491102.992:287): avc: denied { append } for pid=6617 comm="dhcpcd-run-hook" name="resolv.conf.lapb4.link" dev="tmpfs" ino=2780 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 120.161862][ T6647] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.188381][ T6649] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 120.567752][ T5965] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 120.676758][ T5965] ath9k_htc: Failed to initialize the device [ 120.920366][ T30] audit: type=1400 audit(1765491103.492:288): avc: denied { connect } for pid=6652 comm="syz.1.202" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 120.932225][ T5965] usb 4-1: ath9k_htc: USB layer deinitialized [ 121.149563][ T30] audit: type=1400 audit(1765491103.502:289): avc: denied { write } for pid=6652 comm="syz.1.202" laddr=::1 lport=7 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 121.324079][ T30] audit: type=1400 audit(1765491104.512:290): avc: denied { remove_name } for pid=6651 comm="rm" name="resolv.conf.lapb4.link" dev="tmpfs" ino=2780 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 121.468668][ T30] audit: type=1400 audit(1765491104.512:291): avc: denied { unlink } for pid=6651 comm="rm" name="resolv.conf.lapb4.link" dev="tmpfs" ino=2780 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 121.549458][ T6663] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 121.549458][ T6663] program syz.4.204 not setting count and/or reply_len properly [ 121.905680][ T6677] debugfs: '1^!l1*$pOcɔr$G' already exists in 'ieee80211' [ 121.948180][ T5888] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 122.103761][ T5968] usb 4-1: USB disconnect, device number 3 [ 122.556500][ T5888] usb 1-1: Using ep0 maxpacket: 16 [ 122.574097][ T5888] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.595815][ T5888] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.611601][ T5888] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 122.651516][ T5888] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 122.671013][ T5888] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.685451][ T30] audit: type=1400 audit(1765491105.882:292): avc: denied { write } for pid=6686 comm="syz.3.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 122.742165][ T5888] usb 1-1: config 0 descriptor?? [ 123.050914][ T6694] 9p: Bad value for 'rfdno' [ 123.078998][ T6694] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 124.403157][ T5888] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 124.410997][ T30] audit: type=1400 audit(1765491107.072:293): avc: denied { bind } for pid=6692 comm="syz.2.213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 124.448711][ T5888] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 124.463654][ T5888] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 124.493488][ T5888] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 124.528580][ T5888] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 124.536153][ T5888] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 124.547272][ T5888] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 124.557981][ T5888] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 124.593390][ T5888] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 124.631540][ T5888] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 124.910729][ T6715] netlink: 'syz.1.218': attribute type 30 has an invalid length. [ 124.936195][ T5888] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0003/input/input9 [ 124.962550][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 124.962564][ T30] audit: type=1400 audit(1765491108.162:297): avc: denied { read write } for pid=6710 comm="syz.1.218" name="mouse0" dev="devtmpfs" ino=987 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 125.003685][ T5888] microsoft 0003:045E:07DA.0003: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 125.342623][ T5888] usb 1-1: USB disconnect, device number 10 [ 125.429829][ T30] audit: type=1400 audit(1765491108.162:298): avc: denied { open } for pid=6710 comm="syz.1.218" path="/dev/input/mouse0" dev="devtmpfs" ino=987 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 125.576235][ T6727] fido_id[6727]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 126.011834][ T6745] netlink: 8 bytes leftover after parsing attributes in process `syz.2.227'. [ 126.154489][ T30] audit: type=1400 audit(1765491109.352:299): avc: denied { append } for pid=6748 comm="syz.0.226" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 126.159452][ T6745] netlink: 4 bytes leftover after parsing attributes in process `syz.2.227'. [ 126.177555][ T30] audit: type=1400 audit(1765491109.362:300): avc: denied { read } for pid=6748 comm="syz.0.226" name="usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 126.261609][ T30] audit: type=1400 audit(1765491109.362:301): avc: denied { open } for pid=6748 comm="syz.0.226" path="/dev/usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 126.356918][ T6745] netlink: 'syz.2.227': attribute type 11 has an invalid length. [ 126.364660][ T6745] netlink: 'syz.2.227': attribute type 13 has an invalid length. [ 126.906176][ T30] audit: type=1400 audit(1765491110.102:302): avc: denied { setopt } for pid=6748 comm="syz.0.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 126.929313][ T6754] netlink: 220 bytes leftover after parsing attributes in process `syz.0.226'. [ 127.203120][ T6761] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.210832][ T6761] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.323219][ T6761] bridge0: entered allmulticast mode [ 127.505629][ T6745] bridge_slave_1: left allmulticast mode [ 127.532182][ T6745] bridge_slave_1: left promiscuous mode [ 127.554176][ T6745] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.595911][ T6745] bridge_slave_0: left allmulticast mode [ 127.642049][ T6745] bridge_slave_0: left promiscuous mode [ 127.661637][ T6745] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.736485][ T5923] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 127.896438][ T5923] usb 5-1: Using ep0 maxpacket: 32 [ 127.913788][ T5923] usb 5-1: unable to get BOS descriptor or descriptor too short [ 127.938181][ T5923] usb 5-1: config 1 has an invalid interface number: 85 but max is 0 [ 127.963820][ T5923] usb 5-1: config 1 has no interface number 0 [ 127.985901][ T5923] usb 5-1: config 1 interface 85 altsetting 9 bulk endpoint 0xF has invalid maxpacket 64 [ 128.026739][ T5923] usb 5-1: config 1 interface 85 has no altsetting 0 [ 128.070144][ T5923] usb 5-1: string descriptor 0 read error: -22 [ 128.077537][ T5923] usb 5-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=8c.a2 [ 128.179660][ T6784] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 128.193606][ T5923] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.225820][ T6770] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 128.258516][ T5923] ftdi_sio 5-1:1.85: FTDI USB Serial Device converter detected [ 128.295813][ T5923] ftdi_sio ttyUSB0: unknown device type: 0x8ca2 [ 128.326670][ T5939] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 128.486773][ T5939] usb 3-1: Using ep0 maxpacket: 8 [ 128.544337][ T5939] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 128.556536][ T5939] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 128.566309][ T5939] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 128.587105][ T6790] netlink: 48 bytes leftover after parsing attributes in process `syz.4.231'. [ 128.597155][ T5939] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 128.636069][ T5939] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 128.656417][ T5939] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.834377][ T6796] netlink: 164 bytes leftover after parsing attributes in process `syz.3.236'. [ 128.891369][ T6787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.956952][ T6787] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.990782][ T5939] usb 3-1: usb_control_msg returned -71 [ 128.999791][ T30] audit: type=1400 audit(1765491112.202:303): avc: denied { ioctl } for pid=6798 comm="syz.3.238" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=11257 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 129.082744][ T5939] usbtmc 3-1:16.0: can't read capabilities [ 129.239780][ T5939] usb 3-1: USB disconnect, device number 3 [ 130.192444][ T6802] netlink: 8 bytes leftover after parsing attributes in process `syz.0.239'. [ 130.201348][ T6802] netlink: 8 bytes leftover after parsing attributes in process `syz.0.239'. [ 130.722414][ T5923] usb 5-1: USB disconnect, device number 5 [ 131.207878][ T6821] netlink: 8 bytes leftover after parsing attributes in process `syz.3.243'. [ 131.250671][ T30] audit: type=1326 audit(1765491114.382:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6820 comm="syz.3.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0af98f749 code=0x7ffc0000 [ 131.457975][ T30] audit: type=1326 audit(1765491114.392:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6820 comm="syz.3.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0af98f749 code=0x7ffc0000 [ 131.485421][ T5923] ftdi_sio 5-1:1.85: device disconnected [ 131.784213][ T30] audit: type=1326 audit(1765491114.392:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6820 comm="syz.3.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc0af98f749 code=0x7ffc0000 [ 131.890484][ T30] audit: type=1400 audit(1765491114.392:307): avc: denied { create } for pid=6820 comm="syz.3.243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 131.941636][ T30] audit: type=1326 audit(1765491114.392:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6820 comm="syz.3.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0af98f749 code=0x7ffc0000 [ 131.996609][ T30] audit: type=1326 audit(1765491114.392:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6820 comm="syz.3.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0af98f749 code=0x7ffc0000 [ 132.033140][ T30] audit: type=1326 audit(1765491114.402:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6820 comm="syz.3.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc0af98f749 code=0x7ffc0000 [ 132.056872][ T30] audit: type=1400 audit(1765491114.412:311): avc: denied { write } for pid=6820 comm="syz.3.243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 132.077217][ T30] audit: type=1326 audit(1765491114.432:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6820 comm="syz.3.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0af98f749 code=0x7ffc0000 [ 132.764337][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.770943][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.142606][ T30] audit: type=1326 audit(1765491114.432:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6820 comm="syz.3.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0af98f749 code=0x7ffc0000 [ 133.398171][ T6846] netlink: 32 bytes leftover after parsing attributes in process `syz.2.248'. [ 133.407432][ T6846] netlink: 32 bytes leftover after parsing attributes in process `syz.2.248'. [ 133.904786][ T6846] netlink: 32 bytes leftover after parsing attributes in process `syz.2.248'. [ 133.914961][ T6852] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.926328][ T6846] netlink: 32 bytes leftover after parsing attributes in process `syz.2.248'. [ 133.966113][ T6852] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 134.040770][ T6846] Process accounting resumed [ 134.088313][ T6852] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 134.323407][ T6869] netlink: 'syz.3.253': attribute type 11 has an invalid length. [ 135.218219][ T6890] 8021q: adding VLAN 0 to HW filter on device bond1 [ 135.246040][ T6890] bond_slave_0: entered promiscuous mode [ 135.251829][ T6890] bond_slave_1: entered promiscuous mode [ 135.276109][ T6890] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 135.360946][ T6890] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 136.297048][ T6907] xt_hashlimit: max too large, truncated to 1048576 [ 136.680708][ T30] kauditd_printk_skb: 61 callbacks suppressed [ 136.680723][ T30] audit: type=1400 audit(1765491119.872:375): avc: denied { block_suspend } for pid=6908 comm="syz.4.262" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 137.126432][ T5923] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 137.806883][ T5923] usb 4-1: Using ep0 maxpacket: 8 [ 137.826805][ T5923] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 137.936415][ T5923] usb 4-1: config 0 has no interface number 0 [ 137.942567][ T5923] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 137.999252][ T5923] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 138.029911][ T5923] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 138.056872][ T5923] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 138.067046][ T30] audit: type=1400 audit(1765491121.262:376): avc: denied { unlink } for pid=6933 comm="syz.2.271" name="#1" dev="tmpfs" ino=287 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 138.077394][ T6936] overlayfs: failed lookup in lower (newroot/50, name='file0', err=-40): overlapping layers [ 138.092423][ T6938] netlink: 8 bytes leftover after parsing attributes in process `syz.4.272'. [ 138.118435][ T5923] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 138.138454][ T5923] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.176408][ T30] audit: type=1400 audit(1765491121.262:377): avc: denied { mount } for pid=6933 comm="syz.2.271" name="/" dev="overlay" ino=283 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 138.212608][ T6938] gretap1: entered promiscuous mode [ 138.216494][ T5923] usb 4-1: config 0 descriptor?? [ 138.266450][ T5965] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 138.273359][ T5923] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 138.274296][ T30] audit: type=1400 audit(1765491121.302:378): avc: denied { getopt } for pid=6937 comm="syz.4.272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 138.381094][ T30] audit: type=1400 audit(1765491121.532:379): avc: denied { unmount } for pid=5822 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 138.437148][ T5965] usb 1-1: device descriptor read/64, error -71 [ 138.457603][ T30] audit: type=1400 audit(1765491121.642:380): avc: denied { ioctl } for pid=6946 comm="syz.4.274" path="socket:[11811]" dev="sockfs" ino=11811 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 138.487347][ T6949] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3952. macoff=96 [ 138.567443][ T5888] usb 4-1: USB disconnect, device number 4 [ 138.567595][ C1] ldusb 4-1:0.55: usb_submit_urb failed (-19) [ 138.580203][ T5888] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 138.696897][ T5965] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 138.858075][ T5965] usb 1-1: device descriptor read/64, error -71 [ 138.879375][ T30] audit: type=1400 audit(1765491122.082:381): avc: denied { read } for pid=6946 comm="syz.4.274" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 138.905955][ T30] audit: type=1400 audit(1765491122.082:382): avc: denied { open } for pid=6946 comm="syz.4.274" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 138.930276][ T5888] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 138.941079][ T30] audit: type=1400 audit(1765491122.082:383): avc: denied { accept } for pid=6946 comm="syz.4.274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 138.975039][ T5965] usb usb1-port1: attempt power cycle [ 139.051443][ T30] audit: type=1400 audit(1765491122.252:384): avc: denied { name_bind } for pid=6960 comm="syz.1.277" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 139.124171][ T5888] usb 4-1: Using ep0 maxpacket: 8 [ 139.181171][ T5888] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 139.193602][ T6966] binder: BINDER_SET_CONTEXT_MGR already set [ 139.205007][ T5888] usb 4-1: config 0 has no interface number 0 [ 139.212545][ T6966] binder: 6964:6966 ioctl 4018620d 200000000600 returned -16 [ 139.220663][ T5888] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 139.233954][ T6966] binder: 6964:6966 ioctl c0306201 0 returned -14 [ 139.241185][ T5888] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 139.267408][ T5888] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 139.291048][ T5888] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 139.363029][ T5888] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 139.372250][ T5965] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 139.388541][ T5888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.397696][ T5965] usb 1-1: device descriptor read/8, error -71 [ 139.424831][ T5888] usb 4-1: config 0 descriptor?? [ 139.438319][ T5888] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 139.996026][ T5965] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 140.105277][ T5965] usb 1-1: device descriptor read/8, error -71 [ 140.168752][ T5818] usb 4-1: USB disconnect, device number 5 [ 140.183421][ T5818] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 140.220484][ T6975] netlink: 'syz.1.281': attribute type 11 has an invalid length. [ 140.236826][ T5965] usb usb1-port1: unable to enumerate USB device [ 140.778291][ T5965] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 140.951857][ T5965] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 141.003177][ T5965] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 141.046982][ T5965] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 141.071071][ T5965] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 141.089848][ T5965] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 141.105354][ T5965] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.126234][ T5965] usb 5-1: config 0 descriptor?? [ 141.262069][ T6997] binder: 6996:6997 ioctl c0306201 0 returned -14 [ 141.444362][ T5881] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 141.719074][ T5965] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 141.836403][ T5881] usb 1-1: Using ep0 maxpacket: 8 [ 141.849257][ T5881] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 141.887126][ T5881] usb 1-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x59, changing to 0x9 [ 141.899677][ T5881] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 142.040825][ T5881] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 142.061469][ T5881] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 142.070655][ T5881] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.081573][ T5881] usb 1-1: Product: syz [ 142.085737][ T5881] usb 1-1: Manufacturer: syz [ 142.090471][ T5881] usb 1-1: SerialNumber: syz [ 142.593981][ T6993] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 142.662704][ T5881] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 142.695520][ T5881] usbtest 1-1:1.0: Linux user mode ISO test driver [ 142.812414][ T5881] usbtest 1-1:1.0: high-speed {control bulk-in iso-out} tests (+alt) [ 143.180404][ T7022] netlink: 8 bytes leftover after parsing attributes in process `syz.1.297'. [ 143.189281][ T7022] netlink: 8 bytes leftover after parsing attributes in process `syz.1.297'. [ 143.494748][ T5888] usb 1-1: USB disconnect, device number 15 [ 143.551095][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 143.551108][ T30] audit: type=1400 audit(1765491126.752:386): avc: denied { append } for pid=7033 comm="syz.3.301" name="sg0" dev="devtmpfs" ino=749 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 143.580842][ T5939] usb 5-1: reset high-speed USB device number 6 using dummy_hcd [ 143.595252][ T7034] netlink: 8 bytes leftover after parsing attributes in process `syz.3.301'. [ 143.612411][ T7034] netlink: 'syz.3.301': attribute type 1 has an invalid length. [ 143.626485][ T7034] netlink: 'syz.3.301': attribute type 2 has an invalid length. [ 143.673287][ T7034] comedi comedi3: comedi_config --init_data is deprecated [ 143.684150][ T7034] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 143.716437][ T5939] usb 5-1: device descriptor read/64, error -32 [ 143.845655][ T5965] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 144.346580][ T5939] usb 5-1: reset high-speed USB device number 6 using dummy_hcd [ 144.369158][ T5965] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.494692][ T5965] usb 3-1: New USB device found, idVendor=044f, idProduct=b654, bcdDevice= 0.00 [ 144.528261][ T5939] usb 5-1: device descriptor read/64, error -32 [ 144.962041][ T5965] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.965678][ T7050] netlink: 8 bytes leftover after parsing attributes in process `syz.0.306'. [ 144.993985][ T5965] usb 3-1: config 0 descriptor?? [ 145.236469][ T5888] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 145.387387][ T5888] usb 1-1: Using ep0 maxpacket: 16 [ 145.407163][ T5888] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 145.433954][ T5965] thrustmaster 0003:044F:B654.0005: unknown main item tag 0x3 [ 145.446460][ T5888] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 145.460704][ T5965] thrustmaster 0003:044F:B654.0005: unknown main item tag 0x0 [ 145.468842][ T5888] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 145.478856][ T5965] thrustmaster 0003:044F:B654.0005: unknown main item tag 0x0 [ 145.486663][ T5888] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 145.496597][ T5965] thrustmaster 0003:044F:B654.0005: unknown main item tag 0x0 [ 145.504136][ T5965] thrustmaster 0003:044F:B654.0005: unknown main item tag 0x0 [ 145.516555][ T5888] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 145.544668][ T5965] thrustmaster 0003:044F:B654.0005: unknown main item tag 0x0 [ 145.562147][ T5888] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 145.572905][ T5888] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 145.580955][ T5888] usb 1-1: Manufacturer: syz [ 145.587540][ T5965] thrustmaster 0003:044F:B654.0005: hidraw1: USB HID v0.00 Device [HID 044f:b654] on usb-dummy_hcd.2-1/input0 [ 145.616668][ T5965] thrustmaster 0003:044F:B654.0005: no inputs found [ 145.630985][ T5888] usb 1-1: config 0 descriptor?? [ 145.666541][ T5965] usb 3-1: USB disconnect, device number 4 [ 145.712150][ T7066] fido_id[7066]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 146.116894][ T5874] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 146.148375][ T5923] usb 5-1: USB disconnect, device number 6 [ 146.226465][ T5888] rc_core: IR keymap rc-hauppauge not found [ 146.232495][ T5888] Registered IR keymap rc-empty [ 146.240027][ T5888] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 146.272245][ T5888] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 146.275316][ T7073] netlink: 8 bytes leftover after parsing attributes in process `syz.4.315'. [ 146.289464][ T7073] netlink: 4 bytes leftover after parsing attributes in process `syz.4.315'. [ 146.298796][ T7073] netlink: 'syz.4.315': attribute type 11 has an invalid length. [ 146.307013][ T7073] netlink: 'syz.4.315': attribute type 13 has an invalid length. [ 146.308355][ T5888] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 146.324086][ T7073] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.326533][ T5874] usb 4-1: Using ep0 maxpacket: 32 [ 146.333783][ T7073] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.339959][ T5888] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input11 [ 146.350783][ T7073] bridge0: entered allmulticast mode [ 146.361357][ T5874] usb 4-1: unable to get BOS descriptor or descriptor too short [ 146.372309][ T5874] usb 4-1: config 1 has an invalid interface number: 85 but max is 0 [ 146.382874][ T5874] usb 4-1: config 1 has no interface number 0 [ 146.389258][ T5888] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 146.397624][ T5874] usb 4-1: config 1 interface 85 altsetting 9 bulk endpoint 0xF has invalid maxpacket 64 [ 146.407691][ T5874] usb 4-1: config 1 interface 85 has no altsetting 0 [ 146.419081][ T5874] usb 4-1: string descriptor 0 read error: -22 [ 146.425408][ T5874] usb 4-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=8c.a2 [ 146.434854][ T5888] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 146.459580][ T7075] bridge_slave_1: left allmulticast mode [ 146.465840][ T7075] bridge_slave_1: left promiscuous mode [ 146.478592][ T5874] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.480457][ T7075] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.494232][ T5888] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 146.511680][ T7075] bridge_slave_0: left allmulticast mode [ 146.514206][ T7069] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 146.524678][ T7075] bridge_slave_0: left promiscuous mode [ 146.531407][ T5888] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 146.538866][ T5874] ftdi_sio 4-1:1.85: FTDI USB Serial Device converter detected [ 146.539114][ T7075] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.546583][ T5888] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 146.618197][ T5874] ftdi_sio ttyUSB0: unknown device type: 0x8ca2 [ 146.671081][ T5888] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 146.776480][ T5888] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 146.884733][ T7079] netlink: 48 bytes leftover after parsing attributes in process `syz.3.314'. [ 146.926555][ T5888] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 146.949021][ T5888] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 147.014902][ T5888] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 147.059390][ T5888] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 147.069184][ T5888] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 147.084104][ T5888] usb 1-1: USB disconnect, device number 16 [ 147.197215][ T5874] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 147.306670][ T5818] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 147.565347][ T5818] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.565856][ T5874] usb 2-1: Using ep0 maxpacket: 16 [ 147.576929][ T5818] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.593479][ T5874] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.594002][ T5818] usb 5-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.00 [ 147.625594][ T5818] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.662691][ T5874] usb 2-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00 [ 147.694229][ T5874] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.696282][ T5818] usb 5-1: config 0 descriptor?? [ 147.765515][ T5874] usb 2-1: config 0 descriptor?? [ 147.920475][ T7084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.937846][ T7084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.954424][ T5818] usbhid 5-1:0.0: can't add hid device: -71 [ 147.962952][ T5818] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 147.983916][ T5818] usb 5-1: USB disconnect, device number 7 [ 148.013160][ T7098] sysfs: cannot create duplicate filename '/class/ieee80211/1^!l1*$pOcɔr$G' [ 148.034743][ T7100] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 148.048153][ T30] audit: type=1400 audit(1765491131.252:387): avc: denied { bind } for pid=7099 comm="syz.0.324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 148.076246][ T7098] CPU: 1 UID: 0 PID: 7098 Comm: syz.2.325 Not tainted syzkaller #0 PREEMPT(full) [ 148.076274][ T7098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 148.076285][ T7098] Call Trace: [ 148.076293][ T7098] [ 148.076302][ T7098] dump_stack_lvl+0x16c/0x1f0 [ 148.076328][ T7098] sysfs_warn_dup+0x7f/0xa0 [ 148.076354][ T7098] sysfs_do_create_link_sd+0x124/0x140 [ 148.076377][ T7098] sysfs_create_link+0x61/0xc0 [ 148.076394][ T7098] device_add+0x652/0x1980 [ 148.076421][ T7098] ? __pfx_device_add+0x10/0x10 [ 148.076441][ T7098] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 148.076461][ T7098] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 148.076491][ T7098] wiphy_register+0x1ea1/0x2cc0 [ 148.076509][ T7098] ? __rtnl_unlock+0x68/0xf0 [ 148.076526][ T7098] ? napi_enable_locked+0x9e0/0xa00 [ 148.076567][ T7098] ? __pfx_wiphy_register+0x10/0x10 [ 148.076590][ T7098] ? __asan_memset+0x23/0x50 [ 148.076620][ T7098] ? ieee80211_init_rate_ctrl_alg+0x125/0x680 [ 148.076646][ T7098] ieee80211_register_hw+0x2bb2/0x4160 [ 148.076680][ T7098] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 148.076698][ T7098] ? __pfx___debug_object_init+0x10/0x10 [ 148.076721][ T7098] ? find_held_lock+0x2b/0x80 [ 148.076762][ T7098] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 148.076786][ T7098] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 148.076803][ T7098] ? __hrtimer_setup+0x176/0x280 [ 148.076828][ T7098] mac80211_hwsim_new_radio+0x3323/0x5150 [ 148.076863][ T7098] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 148.076887][ T7098] ? __asan_memcpy+0x3c/0x60 [ 148.076907][ T7098] hwsim_new_radio_nl+0xba2/0x1330 [ 148.076929][ T7098] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 148.076960][ T7098] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 148.076984][ T7098] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 148.077007][ T7098] genl_family_rcv_msg_doit+0x209/0x2f0 [ 148.077031][ T7098] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 148.077059][ T7098] ? bpf_lsm_capable+0x9/0x10 [ 148.077074][ T7098] ? security_capable+0x7e/0x260 [ 148.077097][ T7098] ? ns_capable+0xd7/0x110 [ 148.077120][ T7098] genl_rcv_msg+0x55c/0x800 [ 148.077140][ T7098] ? __pfx_genl_rcv_msg+0x10/0x10 [ 148.077160][ T7098] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 148.077187][ T7098] netlink_rcv_skb+0x158/0x420 [ 148.077205][ T7098] ? __pfx_genl_rcv_msg+0x10/0x10 [ 148.077221][ T7098] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 148.077246][ T7098] ? netlink_deliver_tap+0x1ae/0xd30 [ 148.077272][ T7098] genl_rcv+0x28/0x40 [ 148.077288][ T7098] netlink_unicast+0x5aa/0x870 [ 148.077307][ T7098] ? __pfx_netlink_unicast+0x10/0x10 [ 148.077333][ T7098] netlink_sendmsg+0x8c8/0xdd0 [ 148.077353][ T7098] ? __pfx_netlink_sendmsg+0x10/0x10 [ 148.077378][ T7098] ____sys_sendmsg+0xa5d/0xc30 [ 148.077392][ T7098] ? copy_msghdr_from_user+0x10a/0x160 [ 148.077407][ T7098] ? __pfx_____sys_sendmsg+0x10/0x10 [ 148.077421][ T7098] ? __pfx_futex_wake_mark+0x10/0x10 [ 148.077434][ T7098] ___sys_sendmsg+0x134/0x1d0 [ 148.077457][ T7098] ? __pfx____sys_sendmsg+0x10/0x10 [ 148.077480][ T7098] ? futex_private_hash_put+0x160/0x1b0 [ 148.077530][ T7098] __sys_sendmsg+0x16d/0x220 [ 148.077545][ T7098] ? __pfx___sys_sendmsg+0x10/0x10 [ 148.077559][ T7098] ? __x64_sys_futex+0x1e0/0x4c0 [ 148.077582][ T7098] do_syscall_64+0xcd/0xf80 [ 148.077600][ T7098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.077618][ T7098] RIP: 0033:0x7fb54d18f749 [ 148.077633][ T7098] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.077649][ T7098] RSP: 002b:00007fb54df75038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 148.077666][ T7098] RAX: ffffffffffffffda RBX: 00007fb54d3e5fa0 RCX: 00007fb54d18f749 [ 148.077675][ T7098] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 148.077681][ T7098] RBP: 00007fb54d213f91 R08: 0000000000000000 R09: 0000000000000000 [ 148.077687][ T7098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 148.077693][ T7098] R13: 00007fb54d3e6038 R14: 00007fb54d3e5fa0 R15: 00007ffd7d7fbbd8 [ 148.077707][ T7098] [ 148.239842][ T7101] netlink: 'syz.1.317': attribute type 1 has an invalid length. [ 148.248843][ T7100] warning: `syz.0.324' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 148.473760][ T5874] input: HID 28bd:0933 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:28BD:0933.0006/input/input12 [ 148.545396][ T7101] 8021q: adding VLAN 0 to HW filter on device bond2 [ 148.560227][ T7102] bond2: (slave geneve2): making interface the new active one [ 148.587043][ T7102] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 148.629608][ T5874] uclogic 0003:28BD:0933.0006: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0933] on usb-dummy_hcd.1-1/input0 [ 148.758934][ T5818] usb 2-1: USB disconnect, device number 10 [ 149.237505][ T5874] usb 4-1: USB disconnect, device number 6 [ 149.268360][ T5874] ftdi_sio 4-1:1.85: device disconnected [ 149.674265][ T7108] fido_id[7108]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 149.723668][ T7117] ubi31: detaching mtd0 [ 149.749760][ T7117] ubi31: mtd0 is detached [ 150.156442][ T5874] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 150.606420][ T5874] usb 2-1: device descriptor read/64, error -71 [ 150.749369][ T7130] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 150.976447][ T5874] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 151.159128][ T5874] usb 2-1: device descriptor read/64, error -71 [ 151.246118][ T30] audit: type=1400 audit(1765491134.442:388): avc: denied { read } for pid=7133 comm="syz.0.334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 151.296738][ T5874] usb usb2-port1: attempt power cycle [ 151.499847][ T7140] xt_hashlimit: max too large, truncated to 1048576 [ 151.647587][ T5874] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 151.689302][ T5874] usb 2-1: device descriptor read/8, error -71 [ 152.016648][ T5874] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 152.045123][ T7142] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 152.051491][ T30] audit: type=1400 audit(1765491135.242:389): avc: denied { bind } for pid=7139 comm="syz.0.336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 152.051646][ T7142] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 152.078080][ T7142] vhci_hcd vhci_hcd.0: Device attached [ 152.085136][ T7144] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(14) [ 152.091723][ T7144] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 152.099217][ T7144] vhci_hcd vhci_hcd.0: Device attached [ 152.110599][ T5874] usb 2-1: device descriptor read/8, error -71 [ 152.166070][ T30] audit: type=1400 audit(1765491135.242:390): avc: denied { listen } for pid=7139 comm="syz.0.336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 152.246750][ T5874] usb usb2-port1: unable to enumerate USB device [ 152.256108][ T30] audit: type=1400 audit(1765491135.242:391): avc: denied { setopt } for pid=7139 comm="syz.0.336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 152.346623][ T7153] netlink: 16 bytes leftover after parsing attributes in process `syz.4.338'. [ 152.354300][ T117] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 152.641530][ T7143] vhci_hcd: connection closed [ 152.643417][ T6080] vhci_hcd vhci_hcd.0: stop threads [ 152.660986][ T7145] vhci_hcd: connection closed [ 152.719596][ T6080] vhci_hcd vhci_hcd.0: release socket [ 152.846636][ T117] usb 33-1: new full-speed USB device number 2 using vhci_hcd [ 152.859227][ T6080] vhci_hcd vhci_hcd.0: disconnect device [ 152.883903][ T6080] vhci_hcd vhci_hcd.0: stop threads [ 152.908614][ T6080] vhci_hcd vhci_hcd.0: release socket [ 152.920319][ T6080] vhci_hcd vhci_hcd.0: disconnect device [ 153.130358][ T7160] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 153.216403][ T30] audit: type=1400 audit(1765491136.352:392): avc: denied { bind } for pid=7158 comm="syz.1.340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 153.459530][ T7176] netlink: 'syz.1.344': attribute type 11 has an invalid length. [ 153.515272][ T7179] tmpfs: Unknown parameter 'grpquota_in' [ 153.526649][ T7181] netlink: 164 bytes leftover after parsing attributes in process `syz.4.345'. [ 155.704156][ T7204] kthread_run failed with err -4 [ 155.891597][ T30] audit: type=1400 audit(1765491139.092:393): avc: denied { append } for pid=7211 comm="syz.1.356" name="event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 156.016528][ T7215] comedi comedi3: comedi_config --init_data is deprecated [ 156.403811][ T7229] sysfs: cannot create duplicate filename '/class/ieee80211/1^!l1*$pOcɔr$G' [ 156.441453][ T7229] CPU: 1 UID: 0 PID: 7229 Comm: syz.1.358 Not tainted syzkaller #0 PREEMPT(full) [ 156.441478][ T7229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 156.441489][ T7229] Call Trace: [ 156.441495][ T7229] [ 156.441503][ T7229] dump_stack_lvl+0x16c/0x1f0 [ 156.441527][ T7229] sysfs_warn_dup+0x7f/0xa0 [ 156.441550][ T7229] sysfs_do_create_link_sd+0x124/0x140 [ 156.441575][ T7229] sysfs_create_link+0x61/0xc0 [ 156.441596][ T7229] device_add+0x652/0x1980 [ 156.441628][ T7229] ? __pfx_device_add+0x10/0x10 [ 156.441654][ T7229] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 156.441676][ T7229] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 156.441711][ T7229] wiphy_register+0x1ea1/0x2cc0 [ 156.441731][ T7229] ? __rtnl_unlock+0x68/0xf0 [ 156.441748][ T7229] ? napi_enable_locked+0x9e0/0xa00 [ 156.441778][ T7229] ? __pfx_wiphy_register+0x10/0x10 [ 156.441798][ T7229] ? __asan_memset+0x23/0x50 [ 156.441824][ T7229] ? ieee80211_init_rate_ctrl_alg+0x125/0x680 [ 156.441845][ T7229] ieee80211_register_hw+0x2bb2/0x4160 [ 156.441875][ T7229] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 156.441893][ T7229] ? __pfx___debug_object_init+0x10/0x10 [ 156.441917][ T7229] ? find_held_lock+0x2b/0x80 [ 156.441945][ T7229] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 156.441965][ T7229] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 156.441983][ T7229] ? __hrtimer_setup+0x176/0x280 [ 156.442017][ T7229] mac80211_hwsim_new_radio+0x3323/0x5150 [ 156.442057][ T7229] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 156.442082][ T7229] ? __asan_memcpy+0x3c/0x60 [ 156.442104][ T7229] hwsim_new_radio_nl+0xba2/0x1330 [ 156.442129][ T7229] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 156.442161][ T7229] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 156.442184][ T7229] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 156.442213][ T7229] genl_family_rcv_msg_doit+0x209/0x2f0 [ 156.442237][ T7229] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 156.442267][ T7229] ? bpf_lsm_capable+0x9/0x10 [ 156.442286][ T7229] ? security_capable+0x7e/0x260 [ 156.442312][ T7229] ? ns_capable+0xd7/0x110 [ 156.442339][ T7229] genl_rcv_msg+0x55c/0x800 [ 156.442363][ T7229] ? __pfx_genl_rcv_msg+0x10/0x10 [ 156.442383][ T7229] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 156.442415][ T7229] netlink_rcv_skb+0x158/0x420 [ 156.442432][ T7229] ? __pfx_genl_rcv_msg+0x10/0x10 [ 156.442453][ T7229] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 156.442482][ T7229] ? netlink_deliver_tap+0x1ae/0xd30 [ 156.442513][ T7229] genl_rcv+0x28/0x40 [ 156.442530][ T7229] netlink_unicast+0x5aa/0x870 [ 156.442551][ T7229] ? __pfx_netlink_unicast+0x10/0x10 [ 156.442579][ T7229] netlink_sendmsg+0x8c8/0xdd0 [ 156.442601][ T7229] ? __pfx_netlink_sendmsg+0x10/0x10 [ 156.442628][ T7229] ____sys_sendmsg+0xa5d/0xc30 [ 156.442647][ T7229] ? copy_msghdr_from_user+0x10a/0x160 [ 156.442672][ T7229] ? __pfx_____sys_sendmsg+0x10/0x10 [ 156.442697][ T7229] ? __pfx_futex_wake_mark+0x10/0x10 [ 156.442718][ T7229] ___sys_sendmsg+0x134/0x1d0 [ 156.442743][ T7229] ? __pfx____sys_sendmsg+0x10/0x10 [ 156.442768][ T7229] ? futex_private_hash_put+0x160/0x1b0 [ 156.442822][ T7229] __sys_sendmsg+0x16d/0x220 [ 156.442847][ T7229] ? __pfx___sys_sendmsg+0x10/0x10 [ 156.442871][ T7229] ? __x64_sys_futex+0x1e0/0x4c0 [ 156.442911][ T7229] do_syscall_64+0xcd/0xf80 [ 156.442931][ T7229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.442948][ T7229] RIP: 0033:0x7faeb018f749 [ 156.442963][ T7229] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.442981][ T7229] RSP: 002b:00007faeb102b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 156.443004][ T7229] RAX: ffffffffffffffda RBX: 00007faeb03e5fa0 RCX: 00007faeb018f749 [ 156.443016][ T7229] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 156.443026][ T7229] RBP: 00007faeb0213f91 R08: 0000000000000000 R09: 0000000000000000 [ 156.443037][ T7229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 156.443048][ T7229] R13: 00007faeb03e6038 R14: 00007faeb03e5fa0 R15: 00007fff76208598 [ 156.443074][ T7229] [ 157.194126][ T30] audit: type=1400 audit(1765491140.392:394): avc: denied { remount } for pid=7233 comm="syz.0.361" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 157.652812][ T5818] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 157.957390][ T117] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 157.996409][ T5818] usb 4-1: Using ep0 maxpacket: 32 [ 158.003827][ T5818] usb 4-1: unable to get BOS descriptor or descriptor too short [ 158.018236][ T5818] usb 4-1: config 1 has an invalid interface number: 85 but max is 0 [ 158.026338][ T5818] usb 4-1: config 1 has no interface number 0 [ 158.032744][ T5818] usb 4-1: config 1 interface 85 altsetting 9 bulk endpoint 0xF has invalid maxpacket 64 [ 158.047886][ T5818] usb 4-1: config 1 interface 85 has no altsetting 0 [ 158.057802][ T5818] usb 4-1: string descriptor 0 read error: -22 [ 158.064823][ T5818] usb 4-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=8c.a2 [ 158.091213][ T5818] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.103183][ T7244] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 158.115934][ T5818] ftdi_sio 4-1:1.85: FTDI USB Serial Device converter detected [ 158.129311][ T5818] ftdi_sio ttyUSB0: unknown device type: 0x8ca2 [ 158.389763][ T5939] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 158.450731][ T7267] netlink: 48 bytes leftover after parsing attributes in process `syz.3.359'. [ 159.383018][ T30] audit: type=1400 audit(1765491141.722:395): avc: denied { create } for pid=7262 comm="syz.4.369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 159.404047][ T30] audit: type=1400 audit(1765491141.772:396): avc: denied { sys_admin } for pid=7262 comm="syz.4.369" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 159.425381][ T5939] usb 1-1: Using ep0 maxpacket: 16 [ 159.432461][ T5939] usb 1-1: config 8 has an invalid interface number: 206 but max is 0 [ 159.488256][ T5939] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 159.500326][ T7270] netlink: 24 bytes leftover after parsing attributes in process `syz.2.371'. [ 159.517487][ T7278] netlink: 'syz.4.373': attribute type 11 has an invalid length. [ 159.527215][ T5939] usb 1-1: config 8 has no interface number 0 [ 159.550441][ T5939] usb 1-1: config 8 interface 206 altsetting 1 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 159.604295][ T5939] usb 1-1: config 8 interface 206 altsetting 1 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 159.635282][ T5939] usb 1-1: config 8 interface 206 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 159.674262][ T7282] netlink: 164 bytes leftover after parsing attributes in process `syz.4.374'. [ 159.683908][ T5939] usb 1-1: config 8 interface 206 has no altsetting 0 [ 159.725552][ T5939] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 159.742834][ T5939] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.756902][ T1084] Bluetooth: hci5: Frame reassembly failed (-84) [ 159.764508][ T1084] Bluetooth: hci5: Frame reassembly failed (-84) [ 159.803737][ T5939] usb 1-1: Product: syz [ 159.830626][ T5939] usb 1-1: Manufacturer: syz [ 159.863750][ T5939] usb 1-1: SerialNumber: syz [ 160.100578][ T30] audit: type=1400 audit(1765491143.302:397): avc: denied { read } for pid=7292 comm="syz.2.379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 160.517805][ T5874] usb 4-1: USB disconnect, device number 7 [ 160.533484][ T5874] ftdi_sio 4-1:1.85: device disconnected [ 160.944591][ T5939] garmin_gps 1-1:8.206: Garmin GPS usb/tty converter detected [ 160.980941][ T5939] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 160.991989][ T5939] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8 [ 161.030684][ T5939] usb 1-1: USB disconnect, device number 17 [ 161.044489][ T5939] garmin_gps 1-1:8.206: device disconnected [ 161.345852][ T7321] binder: BINDER_SET_CONTEXT_MGR already set [ 161.353019][ T7321] binder: 7320:7321 ioctl 4018620d 200000000600 returned -16 [ 161.604864][ T7324] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 161.624788][ T30] audit: type=1400 audit(1765491144.822:398): avc: denied { read } for pid=7316 comm="syz.3.386" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 161.687527][ T7324] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 161.758353][ T7324] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 161.798450][ T5828] Bluetooth: hci5: command 0x1003 tx timeout [ 161.804621][ T52] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 161.858913][ T7333] debugfs: '1^!l1*$pOcɔr$G' already exists in 'ieee80211' [ 162.248771][ T7340] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 163.724707][ T7350] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 165.744550][ T7383] netlink: 104 bytes leftover after parsing attributes in process `syz.1.406'. [ 165.775893][ T7388] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 165.861634][ T7389] loop9: detected capacity change from 0 to 7 [ 165.967940][ T7389] Dev loop9: unable to read RDB block 7 [ 165.974548][ T7389] loop9: unable to read partition table [ 165.981976][ T7389] loop9: partition table beyond EOD, truncated [ 165.988232][ T7389] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 168.075378][ T7423] netlink: 16 bytes leftover after parsing attributes in process `syz.1.418'. [ 168.093314][ T30] audit: type=1400 audit(1765491151.292:399): avc: denied { listen } for pid=7419 comm="syz.2.419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 168.119493][ T7423] netlink: 12 bytes leftover after parsing attributes in process `syz.1.418'. [ 168.149356][ T7423] netlink: 12 bytes leftover after parsing attributes in process `syz.1.418'. [ 168.523221][ T7433] netlink: 8 bytes leftover after parsing attributes in process `syz.2.423'. [ 168.534421][ T7433] netlink: 4 bytes leftover after parsing attributes in process `syz.2.423'. [ 168.543368][ T7434] netlink: 164 bytes leftover after parsing attributes in process `syz.3.422'. [ 168.552867][ T7433] netlink: 'syz.2.423': attribute type 11 has an invalid length. [ 168.563508][ T7433] netlink: 'syz.2.423': attribute type 13 has an invalid length. [ 168.807205][ T6923] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 168.814947][ T24] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 168.922345][ T30] audit: type=1400 audit(1765491152.122:400): avc: denied { mounton } for pid=7448 comm="syz.2.428" path="mnt:[4026532811]" dev="nsfs" ino=4026532811 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 168.948076][ T7449] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 168.959609][ T7449] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 168.986430][ T6923] usb 5-1: Using ep0 maxpacket: 16 [ 168.999090][ T24] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 169.011933][ T6923] usb 5-1: config 8 has an invalid interface number: 206 but max is 0 [ 169.026134][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 169.039804][ T6923] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 169.052037][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 169.095052][ T6923] usb 5-1: config 8 has no interface number 0 [ 169.114674][ T6923] usb 5-1: config 8 interface 206 altsetting 1 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 169.127926][ T24] usb 4-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 169.147797][ T6923] usb 5-1: config 8 interface 206 altsetting 1 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 169.159154][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.174992][ T6923] usb 5-1: config 8 interface 206 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 169.201613][ T24] usb 4-1: config 0 descriptor?? [ 169.218915][ T7434] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 169.219362][ T7456] netlink: 8 bytes leftover after parsing attributes in process `syz.2.431'. [ 169.241971][ T6923] usb 5-1: config 8 interface 206 has no altsetting 0 [ 169.268552][ T6923] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 169.278207][ T6923] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.287970][ T6923] usb 5-1: Product: syz [ 169.293539][ T6923] usb 5-1: Manufacturer: syz [ 169.300955][ T6923] usb 5-1: SerialNumber: syz [ 169.337314][ T7458] netlink: 199100 bytes leftover after parsing attributes in process `syz.0.432'. [ 169.441101][ T7459] comedi comedi0: pcl816: I/O port conflict (0x6,16) [ 169.474051][ T30] audit: type=1400 audit(1765491152.672:401): avc: denied { connect } for pid=7457 comm="syz.0.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 169.618071][ T30] audit: type=1400 audit(1765491152.672:402): avc: denied { write } for pid=7457 comm="syz.0.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 172.491493][ T7473] batman_adv: batadv0: Adding interface: vlan2 [ 172.513085][ T7473] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 172.716430][ T7473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.785043][ T24] usbhid 4-1:0.0: can't add hid device: -71 [ 172.836513][ T24] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 172.844415][ T7473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.978600][ T24] usb 4-1: USB disconnect, device number 8 [ 173.002283][ T7473] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 174.360654][ T6923] garmin_gps 5-1:8.206: Garmin GPS usb/tty converter detected [ 174.387936][ T6923] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 174.401844][ T6923] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8 [ 174.672896][ T5888] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 175.418060][ T5888] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 175.449463][ T5888] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 175.499710][ T5888] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 175.526981][ T5888] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 175.554159][ T5965] usb 5-1: USB disconnect, device number 8 [ 175.565070][ T5888] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 175.575585][ T5965] garmin_gps 5-1:8.206: device disconnected [ 175.787302][ T5888] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.901909][ T5888] usb 2-1: config 0 descriptor?? [ 176.772352][ T5965] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 176.785244][ T5888] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 176.946440][ T5965] usb 4-1: Using ep0 maxpacket: 16 [ 176.953889][ T5965] usb 4-1: config 0 has an invalid interface number: 68 but max is 0 [ 176.962932][ T5965] usb 4-1: config 0 has no interface number 0 [ 176.972737][ T5965] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 176.982596][ T5965] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.991578][ T5965] usb 4-1: Product: syz [ 176.995925][ T5965] usb 4-1: Manufacturer: syz [ 177.001065][ T5965] usb 4-1: SerialNumber: syz [ 177.011082][ T5965] usb 4-1: config 0 descriptor?? [ 177.032093][ T5965] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 177.159362][ T30] audit: type=1400 audit(1765491160.362:403): avc: denied { mounton } for pid=7540 comm="syz.2.453" path="/88/file0" dev="tmpfs" ino=487 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 177.166486][ T7541] fuse: Unknown parameter 'D?W' [ 177.238797][ T4223] usb 4-1: Failed to submit usb control message: -71 [ 177.239007][ T117] usb 4-1: USB disconnect, device number 9 [ 177.245728][ T4223] usb 4-1: unable to send the bmi data to the device: -71 [ 177.245761][ T4223] usb 4-1: unable to get target info from device [ 177.270615][ T4223] usb 4-1: could not get target info (-71) [ 177.284566][ T4223] usb 4-1: could not probe fw (-71) [ 177.746404][ T5965] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 178.127836][ T117] usb 2-1: reset high-speed USB device number 15 using dummy_hcd [ 178.144060][ T30] audit: type=1400 audit(1765491161.342:404): avc: denied { load_policy } for pid=7547 comm="syz.4.456" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 178.265450][ T7556] comedi comedi3: comedi_config --init_data is deprecated [ 178.272786][ T117] usb 2-1: device descriptor read/64, error -32 [ 178.477022][ T6923] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 178.548808][ T117] usb 2-1: reset high-speed USB device number 15 using dummy_hcd [ 178.636465][ T6923] usb 1-1: Using ep0 maxpacket: 16 [ 178.645438][ T6923] usb 1-1: config 8 has an invalid interface number: 206 but max is 0 [ 178.682021][ T6923] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 178.696001][ T6923] usb 1-1: config 8 has no interface number 0 [ 178.703110][ T6923] usb 1-1: config 8 interface 206 altsetting 1 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 178.736974][ T117] usb 2-1: device descriptor read/64, error -32 [ 178.767800][ T6923] usb 1-1: config 8 interface 206 altsetting 1 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 178.847250][ T6923] usb 1-1: config 8 interface 206 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 178.906408][ T5965] usb 3-1: Using ep0 maxpacket: 32 [ 178.937171][ T6923] usb 1-1: config 8 interface 206 has no altsetting 0 [ 178.980017][ T6923] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 179.010330][ T6923] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.019201][ T117] usb 2-1: reset high-speed USB device number 15 using dummy_hcd [ 179.194437][ T6923] usb 1-1: Product: syz [ 179.200993][ T117] usb 2-1: device descriptor read/8, error -32 [ 179.233586][ T6923] usb 1-1: Manufacturer: syz [ 179.269695][ T6923] usb 1-1: SerialNumber: syz [ 180.091794][ T7549] SELinux: failed to load policy [ 180.210924][ T24] usb 2-1: USB disconnect, device number 15 [ 181.001811][ T5965] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 181.018863][ T5965] usb 3-1: can't read configurations, error -71 [ 181.034619][ T7572] FAULT_INJECTION: forcing a failure. [ 181.034619][ T7572] name failslab, interval 1, probability 0, space 0, times 1 [ 181.156987][ T7572] CPU: 0 UID: 0 PID: 7572 Comm: syz.2.462 Not tainted syzkaller #0 PREEMPT(full) [ 181.157008][ T7572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 181.157018][ T7572] Call Trace: [ 181.157024][ T7572] [ 181.157031][ T7572] dump_stack_lvl+0x16c/0x1f0 [ 181.157053][ T7572] should_fail_ex+0x512/0x640 [ 181.157072][ T7572] ? fs_reclaim_acquire+0xae/0x150 [ 181.157095][ T7572] should_failslab+0xc2/0x120 [ 181.157117][ T7572] __kmalloc_noprof+0xeb/0x910 [ 181.157141][ T7572] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 181.157166][ T7572] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 181.157183][ T7572] tomoyo_realpath_from_path+0xc2/0x6e0 [ 181.157202][ T7572] ? tomoyo_profile+0x47/0x60 [ 181.157225][ T7572] tomoyo_path_number_perm+0x245/0x580 [ 181.157249][ T7572] ? tomoyo_path_number_perm+0x237/0x580 [ 181.157276][ T7572] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 181.157302][ T7572] ? find_held_lock+0x2b/0x80 [ 181.157347][ T7572] ? find_held_lock+0x2b/0x80 [ 181.157369][ T7572] ? hook_file_ioctl_common+0x144/0x410 [ 181.157393][ T7572] ? __fget_files+0x20e/0x3c0 [ 181.157419][ T7572] security_file_ioctl+0x9b/0x240 [ 181.157436][ T7572] __x64_sys_ioctl+0xb7/0x210 [ 181.157462][ T7572] do_syscall_64+0xcd/0xf80 [ 181.157480][ T7572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.157495][ T7572] RIP: 0033:0x7fb54d18f749 [ 181.157509][ T7572] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.157525][ T7572] RSP: 002b:00007fb54df75038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 181.157540][ T7572] RAX: ffffffffffffffda RBX: 00007fb54d3e5fa0 RCX: 00007fb54d18f749 [ 181.157551][ T7572] RDX: 0000200000004a40 RSI: 00000000c0306201 RDI: 0000000000000005 [ 181.157560][ T7572] RBP: 00007fb54df75090 R08: 0000000000000000 R09: 0000000000000000 [ 181.157570][ T7572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 181.157579][ T7572] R13: 00007fb54d3e6038 R14: 00007fb54d3e5fa0 R15: 00007ffd7d7fbbd8 [ 181.157603][ T7572] [ 181.157609][ T7572] ERROR: Out of memory at tomoyo_realpath_from_path. [ 181.899609][ T30] audit: type=1400 audit(1765491164.992:405): avc: denied { connect } for pid=7578 comm="syz.4.465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 182.010096][ T7586] netlink: 'syz.3.467': attribute type 11 has an invalid length. [ 182.126649][ T5888] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 182.374009][ T5888] usb 5-1: config 0 has an invalid interface number: 3 but max is 2 [ 182.439404][ T5888] usb 5-1: config 0 has an invalid interface number: 176 but max is 2 [ 182.539509][ T5888] usb 5-1: config 0 has no interface number 1 [ 182.606006][ T5888] usb 5-1: config 0 has no interface number 2 [ 182.676609][ T5888] usb 5-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 182.766000][ T5888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.874770][ T5888] usb 5-1: config 0 descriptor?? [ 183.049246][ T30] audit: type=1400 audit(1765491166.252:406): avc: denied { create } for pid=7589 comm="syz.3.468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 183.409896][ T6923] garmin_gps 1-1:8.206: Garmin GPS usb/tty converter detected [ 183.421835][ T6923] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 183.460016][ T6923] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8 [ 183.509009][ T24] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 183.541196][ T6923] usb 1-1: USB disconnect, device number 18 [ 183.555377][ T30] audit: type=1400 audit(1765491166.752:407): avc: denied { write } for pid=7589 comm="syz.3.468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 183.599325][ T6923] garmin_gps 1-1:8.206: device disconnected [ 183.615774][ T30] audit: type=1400 audit(1765491166.792:408): avc: denied { connect } for pid=7589 comm="syz.3.468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 183.745651][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 183.758563][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 183.787436][ T24] usb 3-1: config 1 has no interface number 0 [ 183.794347][ T24] usb 3-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 183.823489][ T24] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 183.833519][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.844557][ T24] usb 3-1: Product: syz [ 183.849863][ T24] usb 3-1: Manufacturer: syz [ 183.855156][ T24] usb 3-1: SerialNumber: syz [ 183.936495][ T6923] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 184.008119][ T24] cdc_ncm 3-1:1.1: NCM or ECM functional descriptors missing [ 184.037049][ T24] cdc_ncm 3-1:1.1: bind() failure [ 184.108232][ T6923] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 184.143069][ T6923] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 184.163311][ T6923] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 184.176674][ T6923] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 184.226463][ T6923] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 184.235554][ T6923] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.266227][ T5818] usb 3-1: USB disconnect, device number 7 [ 184.281553][ T6923] usb 1-1: config 0 descriptor?? [ 184.431286][ T7632] netlink: 'syz.3.474': attribute type 1 has an invalid length. [ 184.462458][ T7632] 8021q: adding VLAN 0 to HW filter on device bond1 [ 184.486408][ T5965] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 184.513083][ T7632] bond1: (slave ip6erspan0): making interface the new active one [ 184.523179][ T7632] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 184.558760][ T30] audit: type=1400 audit(1765491167.752:409): avc: denied { read } for pid=7628 comm="syz.3.474" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 184.592238][ T30] audit: type=1400 audit(1765491167.752:410): avc: denied { open } for pid=7628 comm="syz.3.474" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 184.665334][ T5888] usb 5-1: Could not set interface, error -71 [ 184.685657][ T5888] usb 5-1: USB disconnect, device number 9 [ 184.756444][ T5965] usb 2-1: Using ep0 maxpacket: 8 [ 184.831126][ T6923] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 184.893808][ T5965] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 184.903046][ T5965] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.911254][ T5965] usb 2-1: Product: syz [ 184.915716][ T5965] usb 2-1: Manufacturer: syz [ 184.924084][ T5965] usb 2-1: SerialNumber: syz [ 184.931377][ T5965] usb 2-1: config 0 descriptor?? [ 185.367804][ T5965] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 185.642521][ T5829] Bluetooth: hci2: command 0x0406 tx timeout [ 185.649182][ T5830] Bluetooth: hci1: command 0x0406 tx timeout [ 185.655706][ T5137] Bluetooth: hci3: command 0x0406 tx timeout [ 185.662236][ T5815] Bluetooth: hci0: command 0x0406 tx timeout [ 186.686445][ T5818] usb 1-1: reset high-speed USB device number 19 using dummy_hcd [ 186.725866][ T5965] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 186.745612][ T5965] usb 2-1: USB disconnect, device number 16 [ 186.748991][ T7655] xt_CT: You must specify a L4 protocol and not use inversions on it [ 187.166500][ T5818] usb 1-1: device descriptor read/64, error -32 [ 187.236782][ T10] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 187.338129][ T30] audit: type=1400 audit(1765491170.542:411): avc: denied { write } for pid=7663 comm="syz.3.481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 187.376957][ T30] audit: type=1400 audit(1765491170.582:412): avc: denied { bind } for pid=7663 comm="syz.3.481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 187.386405][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 187.404887][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 187.415463][ T10] usb 3-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 187.428480][ T5888] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 187.436115][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 187.436478][ T5818] usb 1-1: reset high-speed USB device number 19 using dummy_hcd [ 187.443757][ T10] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 187.484217][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.523633][ T10] usb 3-1: config 0 descriptor?? [ 187.586449][ T5888] usb 5-1: Using ep0 maxpacket: 16 [ 187.604058][ T5888] usb 5-1: config 8 has an invalid interface number: 206 but max is 0 [ 187.612716][ T5888] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 187.635537][ T5888] usb 5-1: config 8 has no interface number 0 [ 187.642806][ T5888] usb 5-1: config 8 interface 206 altsetting 1 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 187.655294][ T5888] usb 5-1: config 8 interface 206 altsetting 1 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 187.681677][ T5888] usb 5-1: config 8 interface 206 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 187.695803][ T5888] usb 5-1: config 8 interface 206 has no altsetting 0 [ 187.724571][ T5888] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 187.751295][ T5888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.828866][ T5888] usb 5-1: Product: syz [ 187.845454][ T5888] usb 5-1: Manufacturer: syz [ 187.854946][ T5888] usb 5-1: SerialNumber: syz [ 187.999239][ T30] audit: type=1400 audit(1765491171.202:413): avc: denied { create } for pid=7675 comm="syz.3.486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 188.000925][ T7680] netlink: 72 bytes leftover after parsing attributes in process `syz.3.486'. [ 188.020085][ T30] audit: type=1400 audit(1765491171.202:414): avc: denied { write } for pid=7675 comm="syz.3.486" path="socket:[14869]" dev="sockfs" ino=14869 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 188.760214][ T5923] usb 1-1: USB disconnect, device number 19 [ 189.112126][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 189.119197][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 189.136370][ T10] usb 3-1: USB disconnect, device number 8 [ 190.086065][ T5888] garmin_gps 5-1:8.206: Garmin GPS usb/tty converter detected [ 190.113190][ T5888] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 190.216649][ T5888] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8 [ 190.258194][ T5888] usb 5-1: USB disconnect, device number 10 [ 190.275261][ T5888] garmin_gps 5-1:8.206: device disconnected [ 190.443751][ T7698] sysfs: cannot create duplicate filename '/class/ieee80211/1^!l1*$pOcɔr$G' [ 190.504452][ T7698] CPU: 1 UID: 0 PID: 7698 Comm: syz.2.490 Not tainted syzkaller #0 PREEMPT(full) [ 190.504478][ T7698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 190.504486][ T7698] Call Trace: [ 190.504490][ T7698] [ 190.504495][ T7698] dump_stack_lvl+0x16c/0x1f0 [ 190.504511][ T7698] sysfs_warn_dup+0x7f/0xa0 [ 190.504525][ T7698] sysfs_do_create_link_sd+0x124/0x140 [ 190.504540][ T7698] sysfs_create_link+0x61/0xc0 [ 190.504552][ T7698] device_add+0x652/0x1980 [ 190.504572][ T7698] ? __pfx_device_add+0x10/0x10 [ 190.504587][ T7698] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 190.504601][ T7698] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 190.504621][ T7698] wiphy_register+0x1ea1/0x2cc0 [ 190.504632][ T7698] ? __rtnl_unlock+0x68/0xf0 [ 190.504643][ T7698] ? napi_enable_locked+0x9e0/0xa00 [ 190.504659][ T7698] ? __pfx_wiphy_register+0x10/0x10 [ 190.504670][ T7698] ? __asan_memset+0x23/0x50 [ 190.504685][ T7698] ? ieee80211_init_rate_ctrl_alg+0x125/0x680 [ 190.504699][ T7698] ieee80211_register_hw+0x2bb2/0x4160 [ 190.504716][ T7698] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 190.504727][ T7698] ? __pfx___debug_object_init+0x10/0x10 [ 190.504743][ T7698] ? find_held_lock+0x2b/0x80 [ 190.504760][ T7698] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 190.504771][ T7698] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 190.504781][ T7698] ? __hrtimer_setup+0x176/0x280 [ 190.504798][ T7698] mac80211_hwsim_new_radio+0x3323/0x5150 [ 190.504819][ T7698] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 190.504833][ T7698] ? __asan_memcpy+0x3c/0x60 [ 190.504845][ T7698] hwsim_new_radio_nl+0xba2/0x1330 [ 190.504859][ T7698] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 190.504876][ T7698] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 190.504889][ T7698] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 190.504904][ T7698] genl_family_rcv_msg_doit+0x209/0x2f0 [ 190.504917][ T7698] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 190.504933][ T7698] ? bpf_lsm_capable+0x9/0x10 [ 190.504945][ T7698] ? security_capable+0x7e/0x260 [ 190.504960][ T7698] ? ns_capable+0xd7/0x110 [ 190.504975][ T7698] genl_rcv_msg+0x55c/0x800 [ 190.504988][ T7698] ? __pfx_genl_rcv_msg+0x10/0x10 [ 190.505000][ T7698] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 190.505024][ T7698] netlink_rcv_skb+0x158/0x420 [ 190.505035][ T7698] ? __pfx_genl_rcv_msg+0x10/0x10 [ 190.505048][ T7698] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 190.505065][ T7698] ? netlink_deliver_tap+0x1ae/0xd30 [ 190.505084][ T7698] genl_rcv+0x28/0x40 [ 190.505095][ T7698] netlink_unicast+0x5aa/0x870 [ 190.505107][ T7698] ? __pfx_netlink_unicast+0x10/0x10 [ 190.505124][ T7698] netlink_sendmsg+0x8c8/0xdd0 [ 190.505137][ T7698] ? __pfx_netlink_sendmsg+0x10/0x10 [ 190.505153][ T7698] ____sys_sendmsg+0xa5d/0xc30 [ 190.505165][ T7698] ? copy_msghdr_from_user+0x10a/0x160 [ 190.505180][ T7698] ? __pfx_____sys_sendmsg+0x10/0x10 [ 190.505194][ T7698] ? __pfx_futex_wake_mark+0x10/0x10 [ 190.505206][ T7698] ___sys_sendmsg+0x134/0x1d0 [ 190.505221][ T7698] ? __pfx____sys_sendmsg+0x10/0x10 [ 190.505235][ T7698] ? futex_private_hash_put+0x160/0x1b0 [ 190.505266][ T7698] __sys_sendmsg+0x16d/0x220 [ 190.505281][ T7698] ? __pfx___sys_sendmsg+0x10/0x10 [ 190.505295][ T7698] ? __x64_sys_futex+0x1e0/0x4c0 [ 190.505317][ T7698] do_syscall_64+0xcd/0xf80 [ 190.505329][ T7698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.505341][ T7698] RIP: 0033:0x7fb54d18f749 [ 190.505350][ T7698] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.505360][ T7698] RSP: 002b:00007fb54df75038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 190.505371][ T7698] RAX: ffffffffffffffda RBX: 00007fb54d3e5fa0 RCX: 00007fb54d18f749 [ 190.505378][ T7698] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 190.505384][ T7698] RBP: 00007fb54d213f91 R08: 0000000000000000 R09: 0000000000000000 [ 190.505391][ T7698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 190.505397][ T7698] R13: 00007fb54d3e6038 R14: 00007fb54d3e5fa0 R15: 00007ffd7d7fbbd8 [ 190.505412][ T7698] [ 191.277040][ T7709] netlink: 72 bytes leftover after parsing attributes in process `syz.1.494'. [ 191.389143][ T30] audit: type=1400 audit(1765491174.582:415): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.128.0.169 src=30006 daddr=10.128.0.159 dest=59412 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 191.466438][ T5923] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 191.489489][ T7704] netlink: 8 bytes leftover after parsing attributes in process `syz.4.492'. [ 191.498317][ T7704] netlink: 8 bytes leftover after parsing attributes in process `syz.4.492'. [ 191.585051][ T30] audit: type=1400 audit(1765491174.782:416): avc: denied { unmount } for pid=5813 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 191.651708][ T5923] usb 3-1: Using ep0 maxpacket: 32 [ 191.660088][ T5923] usb 3-1: unable to get BOS descriptor or descriptor too short [ 191.672752][ T5923] usb 3-1: config 1 has an invalid interface number: 85 but max is 0 [ 191.672867][ T7721] nfs: Unknown parameter '00000000000000000003' [ 191.680994][ T5923] usb 3-1: config 1 has no interface number 0 [ 191.693878][ T5923] usb 3-1: config 1 interface 85 altsetting 9 bulk endpoint 0xF has invalid maxpacket 64 [ 191.706472][ T5923] usb 3-1: config 1 interface 85 has no altsetting 0 [ 191.719145][ T5923] usb 3-1: string descriptor 0 read error: -22 [ 191.725370][ T5923] usb 3-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=8c.a2 [ 191.734633][ T5923] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.766625][ T7708] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 191.780323][ T5923] ftdi_sio 3-1:1.85: FTDI USB Serial Device converter detected [ 191.797946][ T5923] ftdi_sio ttyUSB0: unknown device type: 0x8ca2 [ 191.863020][ T30] audit: type=1400 audit(1765491175.062:417): avc: denied { ioctl } for pid=7723 comm="syz.0.499" path="socket:[14957]" dev="sockfs" ino=14957 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 192.076839][ T7729] netlink: 48 bytes leftover after parsing attributes in process `syz.2.493'. [ 192.462045][ T7733] netlink: 8 bytes leftover after parsing attributes in process `syz.0.501'. [ 192.580321][ T30] audit: type=1400 audit(1765491175.782:418): avc: denied { create } for pid=7735 comm="syz.4.502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 192.659467][ T30] audit: type=1400 audit(1765491175.802:419): avc: denied { getopt } for pid=7735 comm="syz.4.502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 192.776777][ T5923] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 192.797532][ T7747] netlink: 8 bytes leftover after parsing attributes in process `syz.4.507'. [ 192.847236][ T7747] netlink: 4 bytes leftover after parsing attributes in process `syz.4.507'. [ 192.866798][ T7747] netlink: 'syz.4.507': attribute type 11 has an invalid length. [ 192.888912][ T7747] netlink: 'syz.4.507': attribute type 13 has an invalid length. [ 192.949149][ T5923] usb 2-1: Using ep0 maxpacket: 16 [ 192.955825][ T5923] usb 2-1: config 8 has an invalid interface number: 206 but max is 0 [ 192.964402][ T5923] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 193.005010][ T5923] usb 2-1: config 8 has no interface number 0 [ 193.031483][ T5923] usb 2-1: config 8 interface 206 altsetting 1 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 193.066211][ T5923] usb 2-1: config 8 interface 206 altsetting 1 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 193.110932][ T5923] usb 2-1: config 8 interface 206 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 193.150109][ T5923] usb 2-1: config 8 interface 206 has no altsetting 0 [ 193.169533][ T5923] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 193.190383][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.208686][ T5923] usb 2-1: Product: syz [ 193.219433][ T5923] usb 2-1: Manufacturer: syz [ 193.232004][ T5923] usb 2-1: SerialNumber: syz [ 193.320739][ T7761] netlink: 52 bytes leftover after parsing attributes in process `syz.4.509'. [ 193.336312][ T7761] netlink: 52 bytes leftover after parsing attributes in process `syz.4.509'. [ 193.347580][ T7761] netlink: 52 bytes leftover after parsing attributes in process `syz.4.509'. [ 193.809580][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.826461][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.998974][ T7767] netlink: 32 bytes leftover after parsing attributes in process `syz.3.511'. [ 194.310403][ T10] usb 3-1: USB disconnect, device number 9 [ 194.333920][ T10] ftdi_sio 3-1:1.85: device disconnected [ 195.106315][ T7775] binder_alloc: 7774: binder_alloc_buf, no vma [ 195.364267][ T30] audit: type=1400 audit(1765491178.562:420): avc: denied { append } for pid=7778 comm="syz.2.515" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 195.511208][ T30] audit: type=1400 audit(1765491178.712:421): avc: denied { read } for pid=7778 comm="syz.2.515" name="sg0" dev="devtmpfs" ino=749 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 196.454156][ T7788] netlink: 'syz.4.518': attribute type 1 has an invalid length. [ 196.597461][ T7788] 8021q: adding VLAN 0 to HW filter on device bond1 [ 196.616435][ T43] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 196.756396][ T6923] usb 5-1: new low-speed USB device number 11 using dummy_hcd [ 196.786408][ T43] usb 4-1: Using ep0 maxpacket: 8 [ 196.795277][ T43] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 196.840774][ T43] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 196.853593][ T7768] IPVS: starting estimator thread 0... [ 196.890350][ T43] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 196.917022][ T43] usb 4-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 196.938576][ T43] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 196.949364][ T6923] usb 5-1: unable to get BOS descriptor or descriptor too short [ 196.965472][ T5923] garmin_gps 2-1:8.206: Garmin GPS usb/tty converter detected [ 196.967268][ T7799] IPVS: using max 45 ests per chain, 108000 per kthread [ 196.984198][ T6923] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 197.008073][ T5923] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 197.019058][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.041566][ T6923] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 32, setting to 0 [ 197.053240][ T5923] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8 [ 197.078607][ T43] usbtmc 4-1:16.0: bulk endpoints not found [ 197.104947][ T6923] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 19, changing to 4 [ 197.119100][ T5923] usb 2-1: USB disconnect, device number 17 [ 197.127388][ T5923] garmin_gps 2-1:8.206: device disconnected [ 197.134429][ T6923] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 479, setting to 0 [ 197.156215][ T6923] usb 5-1: config 1 interface 1 has no altsetting 0 [ 197.180451][ T6923] usb 5-1: string descriptor 0 read error: -22 [ 197.192013][ T6923] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 197.201815][ T6923] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.236506][ T7790] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 197.252022][ T7806] netlink: 'syz.1.523': attribute type 11 has an invalid length. [ 197.265646][ T6923] usb 5-1: low speed audio streaming not supported [ 197.449086][ T6923] usb 5-1: USB disconnect, device number 11 [ 197.606848][ T30] audit: type=1400 audit(1765491180.802:422): avc: denied { watch watch_reads } for pid=7808 comm="syz.1.524" path="pipe:[15725]" dev="pipefs" ino=15725 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 197.692650][ T30] audit: type=1400 audit(1765491180.872:423): avc: denied { mount } for pid=7808 comm="syz.1.524" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 197.851050][ T6923] usb 4-1: USB disconnect, device number 10 [ 199.196629][ T5923] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 199.416432][ T5923] usb 4-1: Using ep0 maxpacket: 8 [ 199.433246][ T5923] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFA, changing to 0x8A [ 199.474090][ T5923] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 199.499536][ T5923] usb 4-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 199.526499][ T5923] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 199.544675][ T5923] usb 4-1: SerialNumber: syz [ 199.579057][ T5923] usb 4-1: config 0 descriptor?? [ 199.611574][ T5923] hso 4-1:0.0: Can't find BULK OUT endpoint [ 199.862486][ T7836] lo speed is unknown, defaulting to 1000 [ 199.868695][ T7836] lo speed is unknown, defaulting to 1000 [ 199.884037][ T7836] lo speed is unknown, defaulting to 1000 [ 199.910429][ T7836] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 199.959647][ T7836] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 200.206010][ T7836] lo speed is unknown, defaulting to 1000 [ 200.208865][ T5881] usb 4-1: USB disconnect, device number 11 [ 200.217470][ T7836] lo speed is unknown, defaulting to 1000 [ 200.224826][ T7836] lo speed is unknown, defaulting to 1000 [ 200.231957][ T7836] lo speed is unknown, defaulting to 1000 [ 200.239010][ T7836] lo speed is unknown, defaulting to 1000 [ 200.292964][ T30] audit: type=1400 audit(1765491183.492:424): avc: denied { unmount } for pid=5810 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 200.627591][ T30] audit: type=1400 audit(1765491183.812:425): avc: denied { connect } for pid=7842 comm="syz.1.531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 200.676480][ T30] audit: type=1400 audit(1765491183.822:426): avc: denied { ioctl } for pid=7842 comm="syz.1.531" path="socket:[15853]" dev="sockfs" ino=15853 ioctlcmd=0x894b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 204.039790][ T30] audit: type=1400 audit(1765491187.242:427): avc: denied { egress } for pid=23 comm="ksoftirqd/1" saddr=fe80::1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 204.063514][ T30] audit: type=1400 audit(1765491187.242:428): avc: denied { sendto } for pid=23 comm="ksoftirqd/1" saddr=fe80::1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 204.951600][ T30] audit: type=1400 audit(1765491188.072:429): avc: denied { write } for pid=7871 comm="syz.1.537" name="usbmon9" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 206.908826][ T7913] IPVS: set_ctl: invalid protocol: 108 224.0.0.1:20000 [ 207.722445][ T7922] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 207.915992][ T7927] loop9: detected capacity change from 0 to 7 [ 208.243245][ T7927] Dev loop9: unable to read RDB block 7 [ 208.306441][ T7927] loop9: unable to read partition table [ 208.332124][ T7927] loop9: partition table beyond EOD, truncated [ 208.340931][ T7927] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 209.886543][ T5923] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 209.978726][ T7969] netlink: 'syz.0.559': attribute type 11 has an invalid length. [ 210.057357][ T5923] usb 5-1: Using ep0 maxpacket: 32 [ 210.064448][ T5923] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 210.085160][ T5923] usb 5-1: config 0 has no interface number 0 [ 210.086392][ T7972] capability: warning: `syz.0.560' uses deprecated v2 capabilities in a way that may be insecure [ 210.108640][ T5923] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 210.119710][ T5923] usb 5-1: config 0 interface 85 has no altsetting 0 [ 210.128382][ T5923] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 210.138764][ T5923] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.148824][ T5923] usb 5-1: Product: syz [ 210.153014][ T5923] usb 5-1: Manufacturer: syz [ 210.161258][ T5923] usb 5-1: SerialNumber: syz [ 210.186831][ T5923] usb 5-1: config 0 descriptor?? [ 210.655208][ T30] audit: type=1400 audit(1765491193.852:430): avc: denied { connect } for pid=7981 comm="syz.2.563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 210.729025][ T7984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.740493][ T7984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.749226][ T7984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.760174][ T7984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.042413][ T5923] appletouch 5-1:0.85: Geyser mode initialized. [ 211.213938][ T5923] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input17 [ 211.241926][ T5923] usb 5-1: USB disconnect, device number 12 [ 211.248400][ C1] appletouch 5-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 211.332899][ T30] audit: type=1400 audit(1765491194.432:431): avc: denied { read } for pid=5171 comm="acpid" name="mouse1" dev="devtmpfs" ino=2975 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 211.390532][ T30] audit: type=1400 audit(1765491194.432:432): avc: denied { open } for pid=5171 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=2975 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 211.414648][ T30] audit: type=1400 audit(1765491194.432:433): avc: denied { ioctl } for pid=5171 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=2975 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 211.526300][ T7990] netlink: 44 bytes leftover after parsing attributes in process `syz.2.565'. [ 211.527775][ T5923] appletouch 5-1:0.85: input: appletouch disconnected [ 212.058311][ T7768] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 212.212244][ T30] audit: type=1400 audit(1765491195.412:434): avc: denied { map } for pid=7999 comm="syz.4.570" path="socket:[16623]" dev="sockfs" ino=16623 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 212.236717][ T30] audit: type=1400 audit(1765491195.412:435): avc: denied { accept } for pid=7999 comm="syz.4.570" path="socket:[16623]" dev="sockfs" ino=16623 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 212.263828][ T30] audit: type=1400 audit(1765491195.422:436): avc: denied { relabelfrom } for pid=8001 comm="syz.1.569" name="" dev="pipefs" ino=16005 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 212.276638][ T7768] usb 3-1: Using ep0 maxpacket: 32 [ 212.299666][ T7768] usb 3-1: config 0 has an invalid descriptor of length 88, skipping remainder of the config [ 212.324344][ T7768] usb 3-1: config 0 has no interfaces? [ 212.338720][ T7768] usb 3-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice=19.6f [ 212.350964][ T7768] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.371501][ T7768] usb 3-1: Product: syz [ 212.379737][ T7768] usb 3-1: Manufacturer: syz [ 212.494686][ T7768] usb 3-1: SerialNumber: syz [ 212.514906][ T7768] usb 3-1: config 0 descriptor?? [ 213.173157][ T7768] usb 3-1: USB disconnect, device number 10 [ 213.506193][ T8026] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 213.575822][ T8027] loop9: detected capacity change from 0 to 7 [ 213.738241][ T8027] Dev loop9: unable to read RDB block 7 [ 213.746439][ T8027] loop9: unable to read partition table [ 213.758360][ T8027] loop9: partition table beyond EOD, truncated [ 213.782466][ T8027] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 214.106450][ T30] audit: type=1400 audit(1765491197.172:437): avc: denied { ioctl } for pid=8013 comm="syz.3.572" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x7002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 214.168672][ T30] audit: type=1400 audit(1765491197.342:438): avc: denied { create } for pid=8031 comm="syz.0.578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 214.328041][ T8033] loop9: detected capacity change from 0 to 7 [ 214.345146][ T8033] Dev loop9: unable to read RDB block 7 [ 214.366491][ T8033] loop9: AHDI p1 [ 214.370255][ T8033] loop9: partition table partially beyond EOD, truncated [ 215.894068][ T30] audit: type=1400 audit(1765491199.092:439): avc: denied { ioctl } for pid=8049 comm="syz.0.584" path="socket:[16718]" dev="sockfs" ino=16718 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 215.925217][ T8050] netlink: 4 bytes leftover after parsing attributes in process `syz.0.584'. [ 215.935646][ T8052] netlink: 164 bytes leftover after parsing attributes in process `syz.1.585'. [ 216.006409][ T30] audit: type=1400 audit(1765491199.122:440): avc: denied { setopt } for pid=8049 comm="syz.0.584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 216.042735][ T30] audit: type=1400 audit(1765491199.122:441): avc: denied { bind } for pid=8049 comm="syz.0.584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 216.104588][ T30] audit: type=1400 audit(1765491199.122:442): avc: denied { write } for pid=8049 comm="syz.0.584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 218.616451][ T5881] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 218.636426][ T5888] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 322.556297][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 322.563288][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P8068 [ 322.570892][ C1] rcu: (detected by 1, t=10503 jiffies, g=20565, q=690 ncpus=2) [ 322.578577][ C1] task:syz.0.590 state:R running task stack:26856 pid:8068 tgid:8067 ppid:5813 task_flags:0x400140 flags:0x00080000 [ 322.592499][ C1] Call Trace: [ 322.595773][ C1] [ 322.598603][ C1] sched_show_task+0x423/0x630 [ 322.603359][ C1] ? __pfx_sched_show_task+0x10/0x10 [ 322.608615][ C1] ? rcu_dump_cpu_stacks+0x376/0x530 [ 322.613871][ C1] ? wq_watchdog_touch+0xe2/0x190 [ 322.618877][ C1] rcu_sched_clock_irq+0x2634/0x31f0 [ 322.624173][ C1] ? __pfx_tmigr_requires_handle_remote_up+0x10/0x10 [ 322.630820][ C1] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 322.636432][ C1] ? tmigr_requires_handle_remote+0x13f/0x300 [ 322.642480][ C1] ? __pfx_tmigr_requires_handle_remote+0x10/0x10 [ 322.648885][ C1] ? __cgroup_account_cputime_field+0x12c/0x1f0 [ 322.655112][ C1] ? hrtimer_run_queues+0x97/0x500 [ 322.660205][ C1] update_process_times+0x178/0x2d0 [ 322.665385][ C1] ? __pfx_update_process_times+0x10/0x10 [ 322.671092][ C1] ? read_tsc+0x9/0x20 [ 322.675146][ C1] ? ktime_get+0x1a7/0x310 [ 322.679546][ C1] ? debug_object_deactivate+0x1ec/0x3a0 [ 322.685155][ C1] tick_nohz_handler+0x506/0x720 [ 322.690078][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 322.695516][ C1] ? __hrtimer_run_queues+0x58f/0xc40 [ 322.700884][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 322.706315][ C1] __hrtimer_run_queues+0x64e/0xc40 [ 322.711503][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 322.717205][ C1] ? read_tsc+0x9/0x20 [ 322.721262][ C1] hrtimer_interrupt+0x397/0x8e0 [ 322.726190][ C1] __sysvec_apic_timer_interrupt+0x10b/0x3c0 [ 322.732146][ C1] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 322.737759][ C1] [ 322.740675][ C1] [ 322.743580][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 322.749541][ C1] RIP: 0010:lock_acquire+0x62/0x330 [ 322.754714][ C1] Code: 36 18 12 83 f8 07 0f 87 a2 02 00 00 89 c0 48 0f a3 05 82 83 ee 0e 0f 82 74 02 00 00 8b 35 1a b4 ee 0e 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 99 36 18 12 0f 85 ad 02 00 00 48 83 c4 [ 322.774313][ C1] RSP: 0018:ffffc90003f7f540 EFLAGS: 00000206 [ 322.780365][ C1] RAX: 0000000000000046 RBX: ffff888057d6a5a0 RCX: 4758ba37eeccb503 [ 322.788316][ C1] RDX: 0000000000000000 RSI: ffffffff8daa563c RDI: ffffffff8bf2a580 [ 322.796264][ C1] RBP: 0000000000000000 R08: 00000000ac0d5af0 R09: 000000000ac0d5af [ 322.804225][ C1] R10: 0000000000000000 R11: ffff88801d712ff0 R12: 0000000000000001 [ 322.812198][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 322.820182][ C1] ? page_pool_put_unrefed_netmem+0x5a5/0xb70 [ 322.826246][ C1] _raw_spin_lock+0x2e/0x40 [ 322.830756][ C1] ? page_pool_put_unrefed_netmem+0x3e0/0xb70 [ 322.836821][ C1] page_pool_put_unrefed_netmem+0x3e0/0xb70 [ 322.842712][ C1] __xdp_return+0x354/0xb20 [ 322.847211][ C1] xdp_test_run_batch.constprop.0+0xd0e/0x1f20 [ 322.853354][ C1] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 322.859938][ C1] ? bpf_test_timer_continue+0xd0/0x610 [ 322.865460][ C1] bpf_test_run_xdp_live+0x365/0x770 [ 322.870724][ C1] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 322.876525][ C1] ? __pfx___schedule+0x10/0x10 [ 322.881381][ C1] ? find_held_lock+0x2b/0x80 [ 322.886053][ C1] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 322.891949][ C1] ? 0xffffffffa02052c0 [ 322.896079][ C1] ? 0xffffffffa02052c0 [ 322.900217][ C1] ? 0xffffffffa02052c0 [ 322.904372][ C1] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 322.910277][ C1] bpf_prog_test_run_xdp+0xd3d/0x1660 [ 322.915652][ C1] ? __fget_files+0x204/0x3c0 [ 322.920332][ C1] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 322.926139][ C1] ? __might_fault+0xc0/0x190 [ 322.930804][ C1] ? fput+0x70/0xf0 [ 322.934595][ C1] ? __bpf_prog_get+0x97/0x2a0 [ 322.939334][ C1] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 322.945130][ C1] __sys_bpf+0x1035/0x4980 [ 322.949525][ C1] ? futex_private_hash_put+0x160/0x1b0 [ 322.955051][ C1] ? __pfx___sys_bpf+0x10/0x10 [ 322.959802][ C1] ? __pfx_futex_wait+0x10/0x10 [ 322.964645][ C1] ? do_futex+0x122/0x350 [ 322.968966][ C1] ? __pfx_set_fs_pwd+0x10/0x10 [ 322.973794][ C1] ? xfd_validate_state+0x61/0x180 [ 322.978883][ C1] ? inode_permission+0x37b/0x640 [ 322.983899][ C1] __x64_sys_bpf+0x78/0xc0 [ 322.988305][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 322.993507][ C1] do_syscall_64+0xcd/0xf80 [ 322.997987][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.003867][ C1] RIP: 0033:0x7fceeb38f749 [ 323.008257][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 323.027837][ C1] RSP: 002b:00007fceec197038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 323.036217][ C1] RAX: ffffffffffffffda RBX: 00007fceeb5e5fa0 RCX: 00007fceeb38f749 [ 323.044159][ C1] RDX: 0000000000000050 RSI: 0000200000000b80 RDI: 000000000000000a [ 323.052101][ C1] RBP: 00007fceeb413f91 R08: 0000000000000000 R09: 0000000000000000 [ 323.060048][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 323.068002][ C1] R13: 00007fceeb5e6038 R14: 00007fceeb5e5fa0 R15: 00007ffe3545d0f8 [ 323.075968][ C1] [ 323.078962][ C1] rcu: rcu_preempt kthread starved for 10452 jiffies! g20565 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 323.090124][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 323.100071][ C1] rcu: RCU grace-period kthread stack dump: [ 323.105937][ C1] task:rcu_preempt state:R running task stack:28192 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 323.119390][ C1] Call Trace: [ 323.122649][ C1] [ 323.125563][ C1] ? __schedule+0x10b9/0x6150 [ 323.130237][ C1] __schedule+0x1139/0x6150 [ 323.134732][ C1] ? __lock_acquire+0x436/0x2890 [ 323.139655][ C1] ? __mod_timer+0x8f2/0xd30 [ 323.144222][ C1] ? __pfx___schedule+0x10/0x10 [ 323.149050][ C1] ? find_held_lock+0x2b/0x80 [ 323.153726][ C1] ? schedule+0x2d7/0x3a0 [ 323.158145][ C1] schedule+0xe7/0x3a0 [ 323.162203][ C1] schedule_timeout+0x123/0x290 [ 323.167045][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 323.172408][ C1] ? __pfx_process_timeout+0x10/0x10 [ 323.177685][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 323.183568][ C1] ? prepare_to_swait_event+0xf5/0x480 [ 323.189024][ C1] rcu_gp_fqs_loop+0x1ea/0xaf0 [ 323.193785][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 323.199052][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 323.204235][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 323.209152][ C1] ? rcu_gp_cleanup+0x7c1/0xe90 [ 323.214003][ C1] rcu_gp_kthread+0x26d/0x380 [ 323.218661][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 323.223836][ C1] ? rcu_is_watching+0x12/0xc0 [ 323.228588][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 323.233763][ C1] ? __kthread_parkme+0x19e/0x250 [ 323.238771][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 323.243945][ C1] kthread+0x3c5/0x780 [ 323.248002][ C1] ? __pfx_kthread+0x10/0x10 [ 323.252570][ C1] ? rcu_is_watching+0x12/0xc0 [ 323.257325][ C1] ? __pfx_kthread+0x10/0x10 [ 323.261915][ C1] ret_from_fork+0x983/0xb10 [ 323.266549][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 323.271645][ C1] ? __switch_to+0x7af/0x10d0 [ 323.276305][ C1] ? __pfx_kthread+0x10/0x10 [ 323.280898][ C1] ret_from_fork_asm+0x1a/0x30 [ 323.285656][ C1] [ 323.288660][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 323.294957][ C1] Sending NMI from CPU 1 to CPUs 0: [ 323.300151][ C0] NMI backtrace for cpu 0 [ 323.300164][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 323.300179][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 323.300186][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 323.300205][ C0] Code: 36 60 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 e9 12 00 fb f4 cc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 323.300216][ C0] RSP: 0018:ffffffff8e007df8 EFLAGS: 000002c6 [ 323.300227][ C0] RAX: 00000000018fabad RBX: 0000000000000000 RCX: ffffffff8b7776d9 [ 323.300236][ C0] RDX: 0000000000000000 RSI: ffffffff8dacb6cd RDI: ffffffff8bf2a580 [ 323.300243][ C0] RBP: fffffbfff1c12f68 R08: 0000000000000001 R09: ffffed101708673d [ 323.300251][ C0] R10: ffff8880b84339eb R11: ffffffff8e098670 R12: 0000000000000000 [ 323.300259][ C0] R13: ffffffff8e097b40 R14: ffffffff90887cd0 R15: 0000000000000000 [ 323.300267][ C0] FS: 0000000000000000(0000) GS:ffff8881248fd000(0000) knlGS:0000000000000000 [ 323.300280][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 323.300288][ C0] CR2: 000056451283dbe0 CR3: 0000000020a80000 CR4: 00000000003526f0 [ 323.300296][ C0] Call Trace: [ 323.300302][ C0] [ 323.300306][ C0] default_idle+0x13/0x20 [ 323.300320][ C0] default_idle_call+0x6c/0xb0 [ 323.300334][ C0] do_idle+0x38d/0x510 [ 323.300354][ C0] ? __pfx_do_idle+0x10/0x10 [ 323.300374][ C0] cpu_startup_entry+0x4f/0x60 [ 323.300391][ C0] rest_init+0x16b/0x2b0 [ 323.300405][ C0] ? acpi_subsystem_init+0x133/0x180 [ 323.300420][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 323.300434][ C0] start_kernel+0x3ef/0x4d0 [ 323.300449][ C0] x86_64_start_reservations+0x18/0x30 [ 323.300463][ C0] x86_64_start_kernel+0x130/0x190 [ 323.300476][ C0] common_startup_64+0x13e/0x148 [ 323.300501][ C0]