last executing test programs: 9.614735085s ago: executing program 0 (id=2587): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x78}]}, &(0x7f0000000080)='syzkaller\x00', 0x5}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000001c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x64010102}, 0x10) ioctl$sock_TIOCINQ(r3, 0x541b, &(0x7f0000000300)) landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x2}, 0x18, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x8000003d) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008001400070010000800130008000300080012"], 0x44}}, 0x0) 8.322601108s ago: executing program 0 (id=2589): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0900000008000000020000000d"], 0x50) openat$random(0xffffffffffffff9c, &(0x7f0000000800), 0x80100, 0x0) dup(0xffffffffffffffff) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket(0x18, 0x3, 0x1) r4 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0xfefffffd, 0xb2}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r4, 0x47f6, 0x0, 0x4, 0x0, 0x0) 5.830340018s ago: executing program 4 (id=2598): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f00000000c0)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x80047437, &(0x7f0000000680)=0x18001) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0xa8282, 0x0) io_setup(0x0, &(0x7f00000003c0)) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000000)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) socket(0x28, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0xffffffff) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000001c0)=[{{&(0x7f0000000280)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000008c0)=""/4090, 0xffa}, {&(0x7f0000000100)=""/36, 0x24}, {&(0x7f0000000700)=""/191, 0xbf}, {&(0x7f0000000300)=""/185, 0xb9}, {&(0x7f0000000500)=""/148, 0x94}], 0x5, &(0x7f00000018c0)=""/4129, 0x1021}, 0x1}], 0x1, 0x2, 0x0) 5.830116631s ago: executing program 2 (id=2599): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_debug_messages', 0x48a82, 0x0) mmap$xdp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000000, 0x12, r0, 0x100000000) io_setup(0x5ff, &(0x7f0000000400)) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(0xffffffffffffffff, &(0x7f0000000140), 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000100003300000000cc00000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e64021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) 5.404141642s ago: executing program 0 (id=2602): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0xdc3, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xa7, 0x56a, 0x37a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x9, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0xe, 0x1, 0x3, 0x1, 0x0, 0x1, {0x9, 0x21, 0x3, 0x9, 0x1, {0x22, 0xba4}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x1, 0x6, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x37, 0x8, 0x36}}]}}}]}}]}}, &(0x7f00000001c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x201, 0x9, 0xff, 0xf, 0xff, 0x9}, 0x17d, &(0x7f0000000580)={0x5, 0xf, 0x17d, 0x6, [@generic={0xc1, 0x10, 0xa, "cb99b558f81591a0155dd65f68c0c9e4957f018bdcb7310c1ed8a94720900865fb1a76c18c3ca626bb7873d36bca9de901378158147e8322450b762d22f2688857742e4b741f8bb4635f51c359ee988504fca2bb47a26202356cd79fff3832f8c7674fdad0b87289f2bebd72de17210d91c94c67a2cd837163d81ef34a807c05c885508a3f05af8760af1f35929d1a5d8dcda5542aaababd5aaee6fe2b6f4ca7462d16d0462bd421992e2aa0b796f33ff7d719ab8747bb270246f676c894"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x30, 0x8, 0xf, 0x8, 0x80}, @ptm_cap={0x3}, @generic={0x8a, 0x10, 0x4, "b6d50a724a1bcfe6e55021aa59f7e326266c55912b15aa1e148cd47e259036fd67be6945aade578baa3b8ba3dd7b1c0138326e9df176478fe196141b01b91b5c6c7e6d7da72b8c26e4ad2c3dea048225671a98a58ecfc17fbee1d4594956296d564d4d0b629b1a481d52e80465e200d40d0e2302405a41dd7aade3b82baffe24120a6858c186b7"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x5, 0xb, 0x30, 0x4, 0xe5}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "fff036d6abee1ecb7682eaee69a471b7"}]}, 0x2, [{0x6b, &(0x7f0000000240)=ANY=[@ANYBLOB="6b032237efb1aae858bf69589e041e2cdc3d5dae0d880723e61b22ab8c37ea7ddfb43bd7723ad8eb6e1d81b3da7b1de31da807d284a7c40000008000000000408efa4bcdb3eab5438538551592182d13e6a7812f12aa344e0dc13af4a38bb402335abc32a6886b900fb1000000000000000b50fb4736a3865cef5d07d172f9495152faf900e6cd1b7d49a054808026c5cf2740d7800e89fc7fca23c7efaa6b024687cfa11205fb6abcc3e7b2fe399a015fca09d9ecb5826056dcdd1307b05c7928"]}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x2428}}]}) syz_open_dev$char_usb(0xc, 0xb4, 0x6) r1 = syz_io_uring_setup(0xcf, &(0x7f0000000480)={0x0, 0x5afa, 0x100, 0x10022, 0x338}, &(0x7f0000000400)=0x0, &(0x7f0000000100)=0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/pm_debug_messages', 0x1c1a82, 0xc) write$cgroup_int(r4, &(0x7f0000000000)=0x700, 0x12) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x87, @broadcast, 0x4e22, 0x4, 'none\x00', 0x4, 0x8, 0x42}, 0x2c) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0x103, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) 5.345929502s ago: executing program 1 (id=2603): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000100000000000000cc00002c00000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e64021d683910c3090b3188a7c747eb2278a273c1b800294429118927"], 0xfdef) 4.942127616s ago: executing program 2 (id=2604): r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000100100000100000000000000000000001000000300000000100100000a"], 0x28}, 0xfc40) 4.941908164s ago: executing program 1 (id=2605): write(0xffffffffffffffff, &(0x7f0000000040)="2600000022004701050007108980e8ff06006d20002b1ffe", 0x18) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x1200, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000004000", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 4.835320179s ago: executing program 2 (id=2606): r0 = socket$inet(0x2, 0x3, 0x33) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000280)={@dev, @local, @broadcast}, &(0x7f00000002c0)=0x5) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRESHEX], 0x50) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) (async) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000040)=0x21, 0x4) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) (async) r5 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) ioctl$CEC_S_MODE(r5, 0x40046109, &(0x7f0000000000)=0x31) (async) r6 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$TIOCGPKT(r6, 0x80045438, &(0x7f00000000c0)) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) (async) r7 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000026c0), 0x1, 0x0) pwrite64(r7, &(0x7f0000000280)="3b87ccc8ff4bfc0aa01dd570c5aa8239ebb5bf1f2f", 0x15, 0x38) add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) (async) keyctl$join(0x1, &(0x7f0000000e00)={'syz', 0x1}) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000001714", @ANYRES8], 0x38}}, 0x0) 4.577285808s ago: executing program 1 (id=2608): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x200, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000004000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.461368036s ago: executing program 3 (id=2609): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) ptrace$ARCH_MAP_VDSO_32(0x1e, r4, 0x2, 0x2002) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x1e0, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {0x0, 0x91010000}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4}) unshare(0x8000000) semget$private(0x0, 0x4000, 0x555) semtimedop(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$FBIOPUTCMAP(r5, 0x4605, 0x0) 3.64564441s ago: executing program 1 (id=2610): setreuid(0x0, 0xee00) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000200c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.434254801s ago: executing program 1 (id=2611): ioctl$MON_IOCH_MFLUSH(0xffffffffffffffff, 0x9208, 0x2) r0 = getpgid(0x0) ptrace$ARCH_GET_GS(0x1e, r0, &(0x7f0000000000), 0x1004) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xc4e, 0x5, &(0x7f0000000040)=0x1) r1 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) lseek(r1, 0x400, 0x4) getpgrp(r0) r2 = syz_open_dev$vbi(&(0x7f00000000c0), 0x3, 0x2) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, &(0x7f0000000100)) landlock_restrict_self(0xffffffffffffffff, 0x2) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000140)={0x96, "6eb8e2016b441318d7f0cdcf8bf621179f95a92362a7ac040e31b71cc6e5e4073055e154a03839ad16a461c1030b3b3a9f8fbc6efbc085e261dd22540d8737fbcd15245dc869cd70dbc7f7f5fa49152dcf350dc77f4e289210e057e13a48977708c88e69b82a41dc7f7bcc3d5e6dff654cbc5be552b36dcb6353cec858bb3fe77ec1a2aa1f47dcd8e5fc1f3daff2a30f2c80af779547"}) readv(r1, &(0x7f00000005c0)=[{&(0x7f0000000200)=""/92, 0x5c}, {&(0x7f0000000280)=""/88, 0x58}, {&(0x7f0000000300)=""/115, 0x73}, {&(0x7f0000000380)=""/173, 0xad}, {&(0x7f0000000440)=""/158, 0x9e}, {&(0x7f0000000500)=""/151, 0x97}], 0x6) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000640), 0x400, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7cc, 0x15, &(0x7f0000000680)) r4 = openat$incfs(r3, &(0x7f00000006c0)='.log\x00', 0x400080, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000740)={'team0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_GET_ADDR(r4, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x4c, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xec}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0) fcntl$lock(r2, 0x6, &(0x7f0000000880)={0x2, 0x4, 0x6, 0xe, r0}) ioctl$VIDIOC_G_OUTPUT(r4, 0x8004562e, &(0x7f00000008c0)) fcntl$setownex(r1, 0xf, &(0x7f0000000900)={0x2, r0}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000940)={r3, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000980)={r6}, 0x4) ioctl$HIDIOCSREPORT(r3, 0x400c4808, &(0x7f00000009c0)={0x2, 0x200, 0x7}) r7 = syz_open_dev$loop(&(0x7f0000000a00), 0x3f97, 0x200000) ioctl$BLKSECDISCARD(r7, 0x127d, &(0x7f0000000a40)=0x10001) clock_gettime(0x0, &(0x7f0000000b40)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000a80)={0x1, 0x1, 0xffffffff, 0x7, 0xffffffffffffffff, 0x2, 0x6, 0x7}, &(0x7f0000000ac0)={0x8000, 0xd, 0x8000, 0x40, 0x401, 0xffffffffffffffff, 0x4, 0x9}, &(0x7f0000000b00)={0xda0, 0x1, 0x1000000000, 0x9, 0x8, 0x5, 0x9, 0x9}, &(0x7f0000000b80)={r8, r9+10000000}, &(0x7f0000000c00)={&(0x7f0000000bc0)={[0x9]}, 0x8}) ioctl$vim2m_VIDIOC_STREAMON(r4, 0x40045612, &(0x7f0000000c40)=0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000c80), 0x410dc2, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000cc0)='./file0\x00', 0x200) 3.433655139s ago: executing program 0 (id=2612): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0900000008000000020000000d"], 0x50) openat$random(0xffffffffffffff9c, &(0x7f0000000800), 0x80100, 0x0) dup(0xffffffffffffffff) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket(0x18, 0x3, 0x1) r4 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0xfefffffd, 0xb2}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r4, 0x47f6, 0x0, 0x4, 0x0, 0x0) 3.341225409s ago: executing program 3 (id=2613): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x430601, 0x10) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000002040), &(0x7f0000002080)={'enc=', 'raw', ' hash=', {'sha256-generic\x00'}}, 0x0, 0x0) 3.073364138s ago: executing program 4 (id=2614): sendmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)="c07d0d", 0x3}, 0x1, 0x0, 0x0, 0x8c0}, 0x40004080) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000040)=ANY=[@ANYBLOB="44010000100001000000000800000000fc0100000000000000000000000000000a01010000000000000000000000000000000000200000000000202032000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000000006c000000ac1414bb0000000000000000000000000000000002000000000000000000000000ffff000000000000000000000000000000000001000000000000000000000000000000000000100000000000000000000000000000000004000000000000000d000000000000000a0000000000000000000000000000000000000000000000000000000a0001070000000000000000480003006465666c61746500000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000b000000000000000000000000000c001c"], 0x144}}, 0x20000000) 2.987714653s ago: executing program 2 (id=2615): r0 = userfaultfd(0x80801) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000004c0)={0x1, 0x0, [{0x6a0, 0x0, 0x6}]}) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f00000000c0)={'pcl726\x00', [0x5c22, 0x3, 0x1, 0x0, 0x2, 0x7, 0xc, 0x7, 0xa, 0xfe, 0x2, 0x1, 0x3, 0x403, 0x6, 0xc, 0x1, 0x1a449, 0x3, 0x40000003, 0x89, 0x7fff, 0xb27, 0x5, 0x7fff, 0x8, 0x5, 0x8, 0x8, 0x10000]}) r5 = io_uring_setup(0x31b9, &(0x7f0000000140)={0x0, 0x41eb, 0x400, 0x2, 0x4256}) io_uring_register$IORING_UNREGISTER_RING_FDS(r5, 0x15, &(0x7f0000004fc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)}, {0x0, 0x1, 0x0, 0x0, 0x0}], 0x2) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f0000c0c000/0x1000)=nil, 0x1000, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='tlb_flush\x00', r6}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/partitions\x00', 0x0, 0x0) sendmmsg$inet6(r7, &(0x7f00000005c0)=[{{&(0x7f00000001c0)={0xa, 0x4e24, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000200)="6e9265f319978251ce3df182d5efe6028e00ba26016ac5acd7f1bfee9f3e3eecb273f918200eeb63881d684a061e3a5305ccc67263d5a8ae53dae85d2fcc29632fa901ba76165ccd822b5f7482aae5fe27cce31bf75eb3bb66160dbf2f9acab057b5b80d3dfe3dddfc0f07604817d78f1d64b9835723", 0x76}, {&(0x7f0000000280)="55c6cbc5b6b9d70c2001a580afc5d0bba4071ffecff4f8fb4b98e3a2289aebc28e48868e6b777496a58a3712ee91079afbdab259c9e722e613f7c40e3d4f28440ffba4afa720f9bfe2", 0x49}, {&(0x7f0000000300)="08cf7f6fce90377a4fd1546ceb0428c22a11ee00bcf92adf295e9ffdf2df47df17a2831ba198bcf7a306913943b11c963807d1cf82280adc6a1a0fdeacaf9c39293c5dde762efed20a99e0a6d34770b622c52178a742f126aabf2ab88ab7de3560a0f901242497b5cf1a33dd7cdfc9aba47b68219112", 0x76}, {&(0x7f0000000400)="75629fe2492dc418d9b0b9c62fb4e0f3198bd65192f253ad605b9505f73bb5aaf204f9dfa7441f2caca77d585a28dc16450e95165a8ed93ffe33daba60f72187c6976f0ddcbf2bce1bf4bfe716bd0163c3b333d7a69ff47abdeb5bf60145e69fd041f7ca4f2e5b9564e6bd95d1a5e13b7d5d44db872ec8582961ae5193a386b18cef940a9aec6f6a87087da6159ad43c2c774f48b7672aebbf8a035579433a056503372b3fcc020738a4de490b6bccc4c85343b57d613a2d67b2c476c44fba6c78cfc6be1c9c5312f688311c97b627fe41ac94f4e2cb2c1f40d54a093ea498ffaf3d793a9edee9969db1a28ade25a25fc686cfceefad2a", 0xf7}], 0x4, &(0x7f0000000580)=[@dstopts_2292={{0x20, 0x29, 0x4, {0x2f, 0x0, '\x00', [@pad1]}}}, @hoplimit_2292={{0x14}}], 0x38}}], 0x1, 0x24000800) 2.814250119s ago: executing program 4 (id=2616): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) (async) connect$rose(0xffffffffffffffff, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, 0x6, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000640)={0x974, 0x0, 0x2, 0x4, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x448, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe8}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x86}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xc6}]}, {0x114, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb6}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xcc, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x2, 0x3, 0x7, 0x2c, 0xba7, 0x300, 0x308]}}]}, @NL80211_BAND_2GHZ={0x94, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x41, 0x2, [{0x3, 0x9}, {0x6, 0x3}, {0x6, 0x7}, {0x4, 0x3}, {0x3, 0x1}, {0x7, 0xa}, {0x4, 0x6}, {0x1, 0x8}, {0x1, 0xa}, {0x1, 0x2}, {0x4, 0x8}, {0x4, 0x5}, {0x1, 0x7}, {0x2, 0x5}, {0x2, 0x4}, {0x4, 0x7}, {0x0, 0x6}, {0x0, 0x1}, {0x3, 0x8}, {0x1, 0x2}, {0x0, 0x5}, {0x1, 0xa}, {0x0, 0x9}, {0x2, 0x6}, {0x7}, {0x4, 0x8}, {0x4, 0x6}, {0x3, 0x4}, {0x2}, {0x5, 0xa}, {0x1, 0xa}, {0x2, 0x9}, {0x1, 0x5}, {0x7, 0x9}, {0x2, 0x2}, {0x3, 0x4}, {0x2, 0xa}, {0x7, 0x4}, {0x5, 0x5}, {0x0, 0x8}, {0x1, 0x7}, {0x5, 0x8}, {0x5, 0x6}, {0x7, 0x6}, {0x4, 0x6}, {0x1, 0x3}, {0x2, 0x3}, {0x6, 0x8}, {0x4, 0xa}, {0x5}, {0x5, 0x1}, {0x2}, {0x5, 0xa}, {0x4, 0x4}, {0x6}, {0x3, 0x8}, {0x4, 0x1}, {0x1, 0x9}, {0x7, 0xa}, {0x4, 0x2}, {0x2, 0x1}]}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x12, 0x32, 0x30, 0x48, 0x48]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1eb6, 0x2, 0x40, 0x0, 0xa15, 0x101, 0x9, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x3, 0x4}, {0x0, 0x5}, {0x2, 0x3}, {0x7}, {0x5, 0x9}, {0x6, 0x1}, {0x7, 0x5}, {0x3, 0x7}, {0x7}, {0x1, 0x5}, {0x0, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x2ec, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x2a0, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x108, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2e, 0x2, [{0x1, 0x9}, {0x7}, {0x0, 0x6}, {0x1}, {0x3, 0x9}, {0x7, 0x9}, {0x6, 0x8}, {0x5, 0x7}, {0x4, 0x3}, {0x5, 0x6}, {0x5, 0xa}, {0x1, 0x1}, {0x1, 0x2}, {0x2, 0x8}, {0x1, 0x6}, {0x0, 0x8}, {0x2, 0x7}, {0x2, 0x5}, {0x0, 0xa}, {0x0, 0x9}, {0x0, 0xa}, {0x5, 0x2}, {0x1, 0x8}, {0x4, 0x7}, {0x5, 0x4}, {0x0, 0x9}, {0x6, 0x9}, {0x1, 0x4}, {0x6, 0xa}, {0x0, 0x4}, {0x0, 0x2}, {0x7, 0x8}, {0x7, 0x9}, {}, {0x1, 0x4}, {0x0, 0x1}, {0x0, 0x5}, {0x5, 0xa}, {0x1}, {0x4, 0x3}, {0x1, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x7, 0x9, 0xff, 0x1fbe, 0x3, 0x3a, 0x200]}}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x4, 0x7}, {0x1, 0x4}, {0x3, 0x7}, {0x6, 0x1}, {0x1, 0x2}, {0x1, 0x4}, {0x2, 0x4}, {0x6, 0x2}, {0x2, 0xa}, {0x3, 0x8}, {0x7, 0x1}, {0x2, 0xa}, {0x0, 0x9}, {0x2, 0x1}, {0x2, 0x5}, {0x1, 0x4}, {0x3, 0x4}, {0x0, 0x7}, {0x5, 0x2}, {0x3, 0x6}, {0x4, 0xa}, {0x0, 0x8}, {0x6, 0x5}, {0x6, 0x2}, {0x4, 0x3}, {0x6, 0x4}, {0x2}, {0x1, 0x7}, {0x7, 0x5}, {0x2, 0x8}, {0x1, 0x1}, {0x7, 0x8}, {0x4, 0x1}, {0x4, 0x7}, {0x7, 0x5}, {0x2, 0xa}, {0x7, 0x7}, {0x1, 0x7}, {0x3, 0x1}, {0x2, 0x1}, {0x7, 0x2}, {0x2, 0x4}, {0x6, 0xa}, {0x4, 0x5}, {0x6, 0x6}, {0x7, 0x5}, {0x1, 0x6}, {0x7, 0x1}, {0x1, 0x6}, {0x0, 0x3}, {0x4, 0x3}, {0x4, 0x3}]}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0x9, 0x4, 0xb, 0xb, 0x12, 0x2, 0x6c, 0x2, 0x12, 0x0, 0x30]}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x0, 0x2}, {0x0, 0x1}, {0x5, 0x6}, {0x4, 0x9}, {0x5, 0x7}, {0x3}, {0x5, 0x9}, {0x7, 0x3}, {0x2, 0x9}, {0x7, 0x3}, {0x6, 0x4}, {0x1, 0x9}, {0x5, 0x9}, {0x0, 0x2}, {0x1, 0x7}, {0x3, 0x5}, {0x6, 0x8}, {0x6, 0x9}, {0x1, 0x6}, {0x0, 0x3}, {0x6, 0x9}, {0x1, 0x2}, {0x3, 0xa}, {0x7, 0x5}, {0x0, 0xa}, {0x0, 0x7}, {0x6, 0x6}, {0x7, 0x5}, {0x6, 0x5}, {0x3, 0x9}, {0x3}, {0x7, 0x8}, {0x0, 0x3}, {0x1}, {0x7, 0x7}, {0x5, 0x1}, {0x6, 0x1}, {0x5, 0x1}, {0x2, 0x8}, {0x7, 0x9}, {0x0, 0x8}, {0x0, 0x1}, {0x2, 0x3}, {0x3, 0x1}, {0x3, 0x7}, {0x7, 0x4}, {0x1, 0x8}, {0x3, 0x5}, {0x0, 0x3}, {0x5, 0x9}, {0x2, 0x7}, {0x1, 0x7}, {0x0, 0x4}, {0x3, 0x1}, {0x1, 0x7}, {0x5, 0x3}, {0x6, 0x2}, {0x0, 0x3}, {0x2, 0x6}, {0x2, 0x6}, {0x1, 0x3}, {0x6, 0x7}, {0x4, 0x1}, {0x4, 0x6}, {0x2, 0x2}, {0x1, 0x8}, {0x3, 0x3}]}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x3, 0x9}, {0x0, 0xa}, {0x1, 0x2}, {0x5, 0x8}, {0x4, 0x4}, {0x6, 0x9}, {0x6, 0x3}, {0x2, 0x9}, {0x2, 0xa}, {0x1, 0x8}, {0x0, 0x7}, {0x0, 0x2}, {0x1, 0x2}, {0x4, 0x9}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x65af, 0x3, 0x5, 0x200, 0x8, 0x8]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x38, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x16, 0xb, 0x30, 0x60, 0x17, 0x16, 0x18, 0xb, 0x1b, 0x9, 0x24, 0x1, 0x12, 0x2, 0x1b, 0x5, 0x30, 0xb, 0x1, 0x2, 0x72, 0x53]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0xc, 0x7, 0x6fe, 0x4, 0x9, 0x9, 0xf001]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x16, 0x30, 0x60, 0x16, 0x6c, 0x30, 0xb, 0x1, 0x6, 0x4, 0x36, 0x24]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffe, 0x40, 0x3, 0xd, 0x8, 0xff, 0x3ff, 0x200]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8001, 0x80, 0x8, 0x9, 0x10, 0x4, 0x9, 0x8]}}]}, @NL80211_BAND_5GHZ={0xd8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x6, 0x6}, {0x2, 0x3}, {0x7, 0x1f}, {0x1, 0x2}, {}, {0x5, 0x4}, {0x7, 0x7}, {0x1, 0xa}, {0x4}, {0x1, 0xa}, {0x0, 0x3}, {0x2, 0x6}, {0x3, 0xa}, {0x6, 0x8}, {0x3, 0x3}, {0x0, 0x6}, {0x7, 0x9}, {0x0, 0x6}, {0x5, 0x1}, {0x0, 0x9}, {0x1, 0x9}, {0x2, 0x6}, {0x7, 0xa}, {0x6, 0x1}, {0x7, 0x1}, {0x1, 0x8}, {0x5, 0xa}, {0x1, 0x7}, {0x7, 0x3}, {0x2, 0x5}, {0x4, 0x3}, {0x0, 0x7}, {0x5, 0x4}, {0x1, 0x9}, {0x6, 0x6}, {0x2, 0x1}, {0x1, 0x8}, {0x7, 0x4}, {0x6, 0x8}, {0x0, 0x8}, {0x0, 0x1}, {0x5, 0x6}, {0x6, 0x3}, {0x6, 0x4}, {0x6, 0x9}, {0x3, 0x7}, {0x3, 0x19}, {0x0, 0x5}, {0x7, 0xa}, {0x4, 0x8}, {0x1, 0x6}, {0x6, 0x2}, {0x7, 0x8}, {0x5, 0x3}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x38, 0x9, 0x0, 0x8, 0x7ff, 0xee65, 0x6, 0x594]}}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x0, 0x5}, {0x0, 0x4}, {0x0, 0x2}, {0x4, 0xa}, {0x3, 0x8}, {0x0, 0x7}, {0x0, 0x2}, {0x3}, {0x5}, {0x7, 0x6}, {0x4, 0xa}, {0x5, 0x9}, {0x0, 0x7}, {0x3, 0x3}, {0x1, 0x6}, {0x2, 0x6}, {0x5, 0x1}, {0x5, 0x4}, {0x2, 0x1}, {0x1, 0x1}, {0x1, 0x2}, {0x0, 0x4}, {0x1, 0x8}, {0x5, 0x6}, {0x3, 0x8}, {}, {0x2, 0x2}, {0x7, 0x5}, {0x7, 0x7}, {0x1, 0x2}, {0x4, 0x1}, {0x1, 0x8}, {0x5, 0x1}, {0x5, 0x3}, {0x0, 0x5}, {0x5, 0x3}, {0x4, 0x6}, {0x7, 0xa}, {0x7, 0x4}, {0x1, 0x3}, {0x0, 0x8}, {0x6}, {0x1, 0x9}, {0x0, 0x1}, {0x0, 0x3}, {0x4, 0x9}, {0x5, 0xa}, {0x6, 0x2}, {0x0, 0x3}, {0x7, 0x1e}, {0x0, 0x6}, {0x4, 0x2}, {}, {0x2, 0x3}, {0x6}]}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0xc, 0x9, 0x6c, 0x60, 0x1b, 0x48, 0x6]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x48, 0x48, 0x48, 0x6c, 0x5, 0x5, 0x48, 0x16, 0x1, 0x2d, 0x16, 0x12, 0x5, 0x30, 0x9, 0xc, 0x24, 0x60, 0x48, 0x4, 0x1, 0x18, 0x10, 0x60, 0x48, 0x4, 0x6, 0x1, 0x1, 0x6, 0x1]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x37}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf9}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8000000000000000}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xda}]}]}, @NL80211_ATTR_TID_CONFIG={0x518, 0x11d, 0x0, 0x1, [{0x2ac, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x1ec, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x30, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x17, 0x2, [{0x4, 0x4}, {0x2, 0x5}, {0x0, 0xa}, {0x5, 0x1}, {0x1, 0x5}, {0x1, 0x4}, {0x1, 0x3}, {0x3, 0x8}, {0x3, 0x9}, {0x2, 0x3}, {0x7, 0x9}, {0x1, 0x3}, {0x0, 0x2}, {0x2, 0x3}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0x6}, {0x2, 0x3}, {0x6, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x3, 0x20, 0x3, 0x9, 0x2, 0x7, 0x8]}}]}, @NL80211_BAND_2GHZ={0x68, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x7, 0x4, 0x5000, 0x7, 0x9, 0xfffb, 0x4]}}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x48, 0x73, 0x1a, 0x2, 0x24, 0xc, 0x4, 0x1b, 0x4, 0x36, 0x18, 0x4, 0x16, 0x1b, 0x12, 0x12, 0xb, 0x6, 0x18, 0x5, 0xb, 0x6]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x800, 0x7, 0x2263, 0x8000, 0x1, 0xfff5, 0x6, 0x1]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x7ff, 0x6, 0x2, 0x3, 0x2, 0x10, 0x6]}}]}, @NL80211_BAND_5GHZ={0x84, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x48, 0x2, 0x1, 0x5, 0x36, 0x2, 0x2, 0x16, 0x2d, 0x62, 0x5, 0x6, 0x6, 0x36, 0x60, 0x12, 0x6, 0x16, 0x2, 0x12, 0x60, 0xc, 0x18, 0x24, 0x6c, 0x24, 0x5]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x0, 0x5}, {0x3, 0x8}, {0x0, 0x7}, {0x5, 0x6}, {0x1, 0x1}, {0x1, 0x8}, {0x1, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x5, 0x6}, {0x1, 0x8}, {0x3, 0x4}, {0x6, 0x3}, {0x5, 0x7}, {0x0, 0x9}, {0x3}, {0x1, 0x1}, {0x5, 0x1}, {0x7, 0x1}, {0x1, 0x1}, {0x1}, {0x0, 0x6}, {0x1, 0x4}, {0x3, 0x5}, {0x0, 0x8}, {0x1, 0x7}, {0x0, 0x4}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x1, 0x0, 0x0, 0x2, 0x7, 0x3, 0x400]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xec3, 0x4, 0x177, 0x5, 0x9, 0x401, 0x68, 0x401]}}]}, @NL80211_BAND_60GHZ={0x58, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x7, 0xbc5, 0x7, 0x5, 0x80, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x40, 0x7, 0xa, 0xb, 0x0, 0x1, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1, 0x5, 0x1ff, 0x200, 0xe6e0, 0x10, 0x7f]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0x54, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x3, 0x3, 0x5, 0x5, 0x9, 0x8, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x400, 0x5, 0xff, 0x8000, 0x9, 0xf8a, 0xfff8, 0xe]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xb4, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x2, 0x3}, {0x4, 0x3}, {0x7, 0x9}, {0x5, 0x1}, {0x1, 0xa}, {0x6, 0x9}, {0x5, 0x1}, {0x1, 0xa}, {0x1, 0x7}, {0x6, 0x6}, {0x2, 0x4}, {0x7, 0x9}, {0x5}, {0x3, 0xa}, {0x0, 0x2}, {0x7}, {0x5, 0x8}, {0x0, 0x6}, {0x5, 0x1}, {0x4, 0x3}, {0x1}, {0x6, 0x2}, {0x4}, {0x0, 0x3}, {0x4}, {0x7, 0x2}, {0x7, 0x4}, {0x1, 0x7}, {0x1, 0x7}, {0x2, 0x3}]}]}, @NL80211_BAND_60GHZ={0x68, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x2, 0xc, 0xb, 0x1]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1000, 0x9, 0x5, 0x13, 0x8, 0x2, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x0, 0x40, 0x10, 0x3, 0x1, 0x8000, 0xdc9]}}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x18]}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x4, 0x60, 0x18, 0x18, 0x5, 0x48, 0x60, 0x12, 0x18, 0x3, 0x48, 0x4, 0xb, 0x36, 0x60, 0x16, 0x1, 0x60, 0xb, 0x48, 0xb, 0x6, 0x65, 0xc, 0x1b, 0xb, 0x4, 0x5, 0x6c, 0x0, 0xc, 0x9]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3bb}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0x230, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x218, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xdc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x10, 0x2, [{0x0, 0x3}, {0x4, 0x7}, {0x3, 0x2}, {0x2, 0x9}, {0x7, 0xa}, {0x1, 0x2}, {0x6, 0x2}, {0x2, 0x4}, {0x5, 0x7}, {0x7}, {0x7, 0x9}, {0x4, 0x2}]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x9, 0x6, 0x1, 0x18, 0x0, 0x1b, 0x5, 0x16, 0x0, 0x30, 0xe4eca71a219f12de, 0x36, 0x18, 0x4, 0x1, 0x4, 0xc, 0x2, 0x2, 0x36, 0x60, 0x12, 0x6, 0x48, 0x6, 0x38, 0x5, 0x36, 0x9]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x2, 0x8}, {0x3, 0x6}, {0x4, 0x2}, {0x1, 0x9}, {0x6, 0x5}, {0x5, 0xa}, {0x7, 0x9}, {0x1, 0x9}, {0x7, 0x4}, {0x6, 0x2}, {0x2, 0x5}, {0x7, 0x8}, {0x3, 0xa}, {0x1, 0x5}, {0x0, 0x5}, {0x7, 0x9}, {0x4, 0x2}, {0x7, 0x7}, {0x4}, {0x1, 0x5}, {0x1, 0x2}, {0x2, 0x5}, {0x7, 0x5}, {0x1, 0x5}, {0x7, 0x9}, {0x5, 0x8}, {0x1, 0x5}, {0x5, 0x1}, {0x2, 0x4}, {0x2, 0x3}, {0x0, 0x3}, {0x2, 0x3}, {0x7, 0x6}, {0x4, 0x6}, {0x3, 0x7}, {0x2, 0x7}, {0x2}, {0x1, 0x1}, {0x3, 0x4}, {0x1, 0x5}, {0x7, 0x1}, {0x6, 0x8}, {0x1, 0x9}, {0x4, 0x7}, {0x2, 0x1}, {0x6, 0x1}, {0x0, 0x8}, {0x6, 0x7}, {0x4, 0xa}, {0x3, 0x6}, {0x0, 0x3}, {0x1, 0xa}, {0x6, 0x7}, {0x3, 0x7}, {0x5, 0x8}, {0x0, 0x4}, {0x4, 0x1}, {0x7, 0x8}, {0x0, 0x4}, {0x6}, {0x2, 0x4}, {0x5, 0x9}, {0x5}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x7, 0x6}, {0x5, 0x1}, {}, {}, {0x6, 0x4}, {0x4, 0x7}, {0x4, 0x7}, {0x5, 0x3}, {0x2, 0x7}, {0x2, 0x8}, {0x7, 0x5}, {0x1, 0x2}, {0x1, 0x2}, {0x6}, {0x7, 0x8}, {0x6, 0x2}, {0x3, 0x4}, {0x5, 0x6}, {0x1, 0x5}, {0x0, 0x6}, {0x4, 0x4}, {0x3, 0x3}, {0x0, 0x6}, {0x5}, {0x4, 0x7}, {0x0, 0x7}, {0x7}, {0x1, 0x4}, {0x3, 0x5}, {0x5}, {0x1, 0x8}, {0x7, 0x1}, {0x1, 0x8}, {0x6, 0x4}, {0x6, 0x7}, {0x1, 0x7}, {0x5, 0x3}, {0x1, 0x2}, {0x4, 0x4}, {0x5, 0x7}, {0x7, 0xa}, {0x0, 0x5}, {0x7, 0x5}, {0x7, 0x5}, {0x1, 0x9}, {0x6, 0x9}, {0x4, 0x3}, {0x5, 0x1}, {0x6, 0x1}, {0x0, 0x8}, {0x1, 0xa}, {0x2, 0x6}, {0x7, 0x4}, {0x5, 0x8}, {0x4, 0x2}, {0x0, 0x5}, {0x4, 0xa}, {0x5, 0x9}, {0x1, 0x9}, {0x5, 0x6}, {0x0, 0x8}, {0x2, 0x3}, {0x4, 0x9}, {0x0, 0x3}, {0x2, 0x9}, {0x4, 0xa}]}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x6c, 0x3, 0x18, 0x9, 0x18, 0x4, 0x3, 0x16, 0x6f, 0x24, 0x36, 0x30, 0x3, 0x1, 0xb, 0x3c, 0xc, 0x4, 0x5]}]}, @NL80211_BAND_5GHZ={0x58, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x6d0, 0x401, 0xa, 0x5, 0x3, 0x5, 0x2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x7, 0x7, 0x4, 0x7f, 0x18d7, 0x2, 0x1ff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0x4000, 0x7, 0xfab2, 0x1, 0x5, 0x2, 0x5]}}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8001, 0x2, 0x7ff, 0x7, 0x7, 0x4, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_60GHZ={0x24, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x682ffe321a576427, 0x1b, 0x30, 0x36, 0x48, 0x9, 0x1, 0x24, 0x16, 0x1, 0x48, 0xc, 0x9, 0xb, 0x4, 0x48, 0x2, 0xb, 0x6]}]}, @NL80211_BAND_60GHZ={0x60, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2c, 0x2, [{0x2, 0x4}, {0x0, 0x6}, {0x0, 0x7}, {0x1, 0x9}, {0x4, 0x7}, {0x3, 0x5}, {0x1, 0x4}, {0x7, 0x3}, {0x1, 0x6}, {0x1, 0x8}, {0x2, 0x3}, {0x1, 0x8}, {0x3}, {0x2, 0x5}, {0x7, 0x9}, {0x1, 0x4}, {0x0, 0x2}, {0x1, 0x2}, {0x2, 0x2}, {0x5, 0x9}, {0x4}, {0x4, 0x9}, {0x0, 0xa}, {0x6, 0x8}, {0x2, 0x1}, {0x7, 0xa}, {0x0, 0x5}, {0x1, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x4, 0x9}, {0x3, 0x7}, {0x0, 0x2}, {0x2, 0x4}, {0x6, 0x9}, {0x2, 0x5}, {0x4, 0x5}, {0x4, 0x7}, {0x5, 0x7}, {0x2, 0x5}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x8, 0xfc39, 0xd, 0x52b5, 0x3, 0x8, 0x54d8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x4, 0xe, 0x26f, 0x6, 0x5, 0x5, 0x331a]}}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3d}]}]}]}, 0x974}}, 0x1) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000200)={0xffffffffffffffff}, 0x4) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000000400)={&(0x7f0000000380)=""/75, 0x4b}) (async) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x40}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xe0004000}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 2.688824196s ago: executing program 4 (id=2617): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e20, 0x1fe, @mcast1, 0x80000001}, 0x72) 1.926357256s ago: executing program 3 (id=2618): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x3, 0x1, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=@newqdisc={0x170, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "abcc61b4e508c02286f1bafc7a22c407a52b0e13291c865d493f15736245f220cd4e40006df455836aa3bd3aaa2c9b95578719c46f89e0179832927deecf7465ea95bd97b018b7afaccdcb28bb42d677b73c44e790f0875fb4b795ca95b7dd712d2c5d69945535f92f74a71236749b077cc85e96554beb53c986a216051bd5979a8cfcfe9f98be58ff7944f6cfda8579dbaedceee578bfd1fb554b6e185e9315425ef0a3fc69d17ede93fc7c46357990604b9f12033688caa0b04adecfc926b3f6ca25bcb5432905e3f30ccbf10cf0f2d00858ba2bbd2702b8d4a7a7c744fbaa2fa35b1c586020d600"}, @TCA_GRED_PARMS={0x38, 0x1, {0x1ff, 0x1, 0x6, 0xf, 0x2, 0x0, 0xcb, 0xf, 0x5, 0xb, 0x1f, 0x1a, 0x8, 0xf, 0xf, 0x9}}]}}]}, 0x170}}, 0x24008004) 1.915605787s ago: executing program 2 (id=2619): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x80, 0x8d5558dc7bf693d6}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @random="4d5154444389"}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008040}, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r2, 0x4001af84, &(0x7f0000000500)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x3, &(0x7f0000000440)=[{0x45, 0x0, 0x1, 0xfffffffc}, {0x4, 0x0, 0x3}, {0x6, 0xfc, 0x0, 0x7fff0000}]}) syz_usb_connect(0x0, 0x4d, 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="0c0100000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400fc0000000000000000000000000000000c00028005000100000000003c0002800c000280050001000000f5ff2c000180140003000000000000000000000000000000000114000400fe8000000000000000000000000000aa08000740000000007800068014000500fc0200000000000000000000000000010c0003"], 0x10c}}, 0x10) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000180)=r5, 0x4) sendmsg$inet(r7, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'netdevsim0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x2900, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f0000000080)=0x3) ioctl$BTRFS_IOC_START_SYNC(r10, 0x540b, 0x0) ioctl$TCGETS2(r10, 0x802c542a, &(0x7f00000000c0)) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400000010000305000000000000000000100000", @ANYRES32=0x0, @ANYBLOB="01000000000000001c0012800b0001006d616373656300000c00028005000f000200000008000500", @ANYRES32=r8, @ANYBLOB], 0x44}}, 0x0) 1.863959397s ago: executing program 3 (id=2620): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) getpid() r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5, 0x0, 0x7}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x6) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240), 0x0}) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000400)={0x53, 0xfffffffffffffffd, 0x6, 0xf9, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000040)='\x00\x00\x00\x00\x00\x00', 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd000000}) 1.746393801s ago: executing program 4 (id=2621): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x3, &(0x7f0000000040)=0xffffade5, 0x4) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_buf(r1, 0x29, 0x4b, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xd) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x204c02) ioctl$TCFLSH(r2, 0x541b, 0x7ffffffffffffffe) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100), 0x18803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0xd, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x54}]}, &(0x7f0000000080)='syzkaller\x00', 0x3}, 0x94) 1.374429181s ago: executing program 4 (id=2622): syz_usb_connect(0x2, 0x24, 0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe8a, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) 207.797603ms ago: executing program 3 (id=2623): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000700)=@newtfilter={0x84, 0x2c, 0xd27, 0x70fd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {}, {}, {0x8, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x54, 0x2, [@TCA_FLOWER_ACT={0x50, 0x3, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0xe90, 0x0, 0x6, 0x101}, 0x21}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0xf5ffffffffffffff, 0x20000040}, 0x20000000) 126.972213ms ago: executing program 1 (id=2624): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x22803) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x4) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a81000000000800410073697700140033006c6f00"/56], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0xff0f0000) prlimit64(r1, 0xc, 0x0, &(0x7f0000000f80)) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x80d02, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f0000000000)={{0x80}, 'port0\x00', 0x0, 0x0, 0x0, 0x0, 0x80000001}) dup3(r0, r5, 0x0) syz_open_dev$video4linux(&(0x7f0000000440), 0xb, 0xa0040) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000ffffff7f000000000900000018110000", @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r6, @ANYBLOB="00040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000006d0000009500000000000000fecafccfe9bba4c5cd474b0b840ce606142dbb1228a0a6d4574bd8abb3826ba9454ed41e9563543141dc724aa5905bdafeb925af04696f1d1e4d4c46b961fe9ce08cdcdc696532f18db9191eb750617ed2205a0dcde9315cba351714d8d30de343d4edaab9a8b91a029ec32d1ca2"], &(0x7f0000000600)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 74.935013ms ago: executing program 0 (id=2625): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0xffffffff, 0x81, 0xffffffff}) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000004007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, 0x0, 0x0}, 0x94) 30.251095ms ago: executing program 2 (id=2626): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = mq_open(&(0x7f0000000000)='bat\x13\x1b\r\xcbs\xecave_5\x00', 0x8c2, 0x30, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) prctl$PR_SCHED_CORE(0x43, 0x0, 0x0, 0x0, &(0x7f0000000200)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mq_getsetattr(r3, &(0x7f0000000040)={0x0, 0x40, 0x4, 0xffff}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x3, &(0x7f00000003c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(&(0x7f00000001c0)='binder\x00', 0x1) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r8, &(0x7f00000007c0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @rand_addr=0x64010101, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000700)=@in6={0xa, 0x4e22, 0x7, @dev={0xfe, 0x80, '\x00', 0x18}, 0x860}, 0x80, 0x0}}], 0x2, 0x480d4) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000009ffe6b309a07cd1bd4f2d89f1852dc9592dcdfd694c5228009afabd8c063a20d22aa7b2623354d4482ca52f9765b8ed79c8d3f1bf292707a78507f4f7e9c5eb3424cec8bfeeeea9a148253d029028c653b3b7d78db650129624e3bc401a9de00f9bee83115337d3ed66bfe5dd9020db98d11128611b6413df1c0908f54ff2a685bfe4ab28acb91d89eb9bb2e78e060f0a1", @ANYRES16=r10, @ANYRES64=r9], 0x14}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0xc2a) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYRES32=0x0, @ANYRESHEX=r11, @ANYBLOB="0000000000000000000000000000ef00"/27, @ANYRES32=0x0, @ANYBLOB="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"], 0x48) 29.97882ms ago: executing program 3 (id=2627): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000100000000000000cc00003300000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e64021d683910c3090b3188a7c747eb2278a273c1b800294429118927"], 0xfdef) 0s ago: executing program 0 (id=2628): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000400)) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000740)={0x30, 0x5, 0x0, {0x0, 0x2, 0x0, 0x1}}, 0x30) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x48) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r4 = getpgrp(0xffffffffffffffff) sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb0}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x800000}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x0, 0xffffff1f}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x20, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {0x4, 0x0, 0x6}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0xb30cd3a6838594b8, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs(0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0x0) mknodat$loop(0xffffffffffffff9c, 0x0, 0x6004, 0x1) kernel console output (not intermixed with test programs): nd, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 465.903714][ T849] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.913912][ T849] usb 2-1: config 0 descriptor?? [ 465.975732][ T5925] usb 5-1: palm_os_4_probe - error -71 getting connection info [ 466.000297][ T5925] visor 5-1:1.0: Handspring Visor / Palm OS converter detected [ 466.012456][ T5925] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 466.027427][ T5925] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 466.039785][ T5925] usb 5-1: USB disconnect, device number 37 [ 466.050196][ T5925] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 466.063654][ T5925] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 466.074185][ T5925] visor 5-1:1.0: device disconnected [ 466.475885][ T5863] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5) [ 466.487048][ T5863] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 466.498131][ T5863] usb 4-1: 5:0: failed to get current value for ch 1 (-22) [ 466.516954][ T5863] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 466.526891][ T849] usbhid 2-1:0.0: can't add hid device: -71 [ 466.534733][ T5863] usb 4-1: USB disconnect, device number 23 [ 466.534864][ T849] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 466.554014][ T849] usb 2-1: USB disconnect, device number 24 [ 466.563396][T11228] netlink: 'syz.0.1484': attribute type 10 has an invalid length. [ 466.571214][T11228] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1484'. [ 466.596342][T11228] openvswitch: netlink: Flow key attr not present in new flow. [ 466.633010][T11228] netlink: 'syz.0.1484': attribute type 21 has an invalid length. [ 466.641968][T11228] netlink: 'syz.0.1484': attribute type 6 has an invalid length. [ 466.655049][T11228] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1484'. [ 466.861603][ T5980] usb 5-1: new full-speed USB device number 38 using dummy_hcd [ 467.023100][ T5980] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 467.031264][ T5980] usb 5-1: config 0 has no interface number 0 [ 467.037439][ T5980] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 467.046592][ T5980] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.058405][ T5980] usb 5-1: config 0 descriptor?? [ 467.073629][ T5980] usb 5-1: selecting invalid altsetting 1 [ 467.081089][ T5980] dvb_ttusb_budget: ttusb_init_controller: error [ 467.087944][ T5980] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 467.147185][ T5980] DVB: Unable to find symbol cx22700_attach() [ 467.179314][ T5980] DVB: Unable to find symbol tda10046_attach() [ 467.884994][ T5980] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 468.059462][T11245] comedi comedi3: comedi_test: 10 microvolt, 2046 microsecond waveform attached [ 468.168757][T11244] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 468.177083][T11244] overlayfs: missing 'lowerdir' [ 468.193243][T11243] delete_channel: no stack [ 469.061725][ T849] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 469.224519][ T849] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 469.253782][ T849] usb 4-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 469.278781][ T849] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.300589][ T849] usb 4-1: config 0 descriptor?? [ 469.313417][ T849] usbhid 4-1:0.0: fixing wrong optional hid class descriptors count [ 469.731368][T11268] bridge0: entered promiscuous mode [ 469.737164][T11268] macvlan2: entered promiscuous mode [ 469.939012][ T849] usbhid 4-1:0.0: can't add hid device: -71 [ 470.011040][ T849] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 470.118513][T11270] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1496'. [ 470.129744][ T849] usb 4-1: USB disconnect, device number 24 [ 470.142061][T11270] netlink: 'syz.2.1496': attribute type 2 has an invalid length. [ 471.228039][ T5863] usb 5-1: USB disconnect, device number 38 [ 471.440124][ T849] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 471.509630][T11295] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1504'. [ 471.519414][T11295] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1504'. [ 471.528469][T11295] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1504'. [ 472.109299][ T849] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 472.120970][ T849] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 472.227664][ T849] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 472.291774][ T5863] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 472.351657][ T849] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 472.374209][ T849] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 472.391867][ T849] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 472.401174][ T849] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 472.409509][ T849] usb 4-1: Product: syz [ 472.414955][ T849] usb 4-1: Manufacturer: syz [ 472.419594][ T849] usb 4-1: SerialNumber: syz [ 472.425705][ T849] usb 4-1: config 0 descriptor?? [ 472.492844][ T5863] usb 5-1: Using ep0 maxpacket: 32 [ 472.507944][ T5863] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 472.520002][ T5863] usb 5-1: New USB device found, idVendor=0bfd, idProduct=0120, bcdDevice=f9.ad [ 472.529167][ T5863] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.537191][ T5863] usb 5-1: Product: syz [ 472.547218][ T5863] usb 5-1: Manufacturer: syz [ 472.554168][ T5863] usb 5-1: SerialNumber: syz [ 472.707304][ T5863] usb 5-1: config 0 descriptor?? [ 472.712609][ T849] radio-si470x 4-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 472.719710][ T849] radio-si470x 4-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 472.720364][ T5863] kvaser_usb 5-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 472.913606][ T849] radio-si470x 4-1:0.0: software version 0, hardware version 0 [ 472.926279][ T849] radio-si470x 4-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 473.002713][ T849] radio-si470x 4-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 473.135480][T11311] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1502'. [ 473.331261][ T5980] IPVS: starting estimator thread 0... [ 473.418052][ T849] radio-si470x 4-1:0.0: submitting int urb failed (-90) [ 473.464858][T11311] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 473.528154][T11313] IPVS: using max 42 ests per chain, 100800 per kthread [ 473.606609][ T5980] usb 5-1: USB disconnect, device number 39 [ 473.804150][T11312] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1500'. [ 473.813106][T11312] netlink: 'syz.3.1500': attribute type 5 has an invalid length. [ 473.820815][T11312] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1500'. [ 473.860218][T11312] geneve2: entered promiscuous mode [ 473.865766][T11312] geneve2: entered allmulticast mode [ 473.896681][T11316] xt_socket: unknown flags 0x4 [ 474.071721][ T849] radio-si470x 4-1:0.0: si470x_set_report: usb_control_msg returned -110 [ 474.081044][ T849] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -22 [ 474.671892][T11330] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1513'. [ 475.437074][ T5863] usb 4-1: USB disconnect, device number 25 [ 475.489809][ T30] audit: type=1400 audit(1768322157.890:661): avc: denied { mount } for pid=11336 comm="syz.3.1517" name="/" dev="autofs" ino=26447 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 476.277425][ T30] audit: type=1400 audit(1768322158.680:662): avc: denied { unmount } for pid=5815 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 477.516986][T11368] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 477.557227][ T30] audit: type=1400 audit(1768322159.960:663): avc: denied { accept } for pid=11367 comm="syz.0.1527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 477.685276][ T5863] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 477.716704][T11376] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1529'. [ 477.727811][T11376] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1529'. [ 477.853366][ T5863] usb 3-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 477.894055][ T5863] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 477.921809][ T5863] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 477.971656][ T5863] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 477.980759][ T5863] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.993776][T11364] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 478.424045][ T30] audit: type=1400 audit(1768322160.830:664): avc: denied { ioctl } for pid=11392 comm="syz.3.1533" path="socket:[26498]" dev="sockfs" ino=26498 ioctlcmd=0xf509 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 478.462767][ T5863] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 478.481066][ T5863] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input24 [ 478.973754][ T5863] usb 3-1: USB disconnect, device number 22 [ 478.979711][ C1] aiptek 3-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 479.220733][ T849] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 479.981927][ T849] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 479.989948][ T849] usb 2-1: config 0 has no interface number 0 [ 479.996398][ T849] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 480.012261][ T849] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.024130][ T849] usb 2-1: config 0 descriptor?? [ 480.044015][ T849] usb 2-1: selecting invalid altsetting 1 [ 480.049864][ T849] dvb_ttusb_budget: ttusb_init_controller: error [ 480.058266][ T849] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 480.091846][T11411] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1539'. [ 480.103243][ T849] DVB: Unable to find symbol cx22700_attach() [ 480.131238][T11411] netlink: 'syz.4.1539': attribute type 2 has an invalid length. [ 480.147591][ T849] DVB: Unable to find symbol tda10046_attach() [ 480.158672][ T849] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 482.047705][T11428] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1541'. [ 482.501641][ T5863] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 482.631268][T11434] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1547'. [ 482.662992][ T5863] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 482.707232][ T5863] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 31, changing to 7 [ 482.720095][ T5863] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 482.809098][ T5863] usb 3-1: language id specifier not provided by device, defaulting to English [ 482.823005][ T5863] usb 3-1: New USB device found, idVendor=2013, idProduct=0251, bcdDevice=e8.6e [ 482.845667][ T5863] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.873517][ T5863] usb 3-1: Manufacturer: ‰ [ 482.882345][ T5863] usb 3-1: SerialNumber: syz [ 482.940372][ T5863] usb 3-1: config 0 descriptor?? [ 483.043496][ T5863] em28xx 3-1:0.0: New device ‰ @ 480 Mbps (2013:0251, interface 0, class 0) [ 483.062623][ T5863] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 483.186096][T11430] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1545'. [ 483.206957][T11456] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.1549'. [ 483.251938][ T5863] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 483.275796][ T5863] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 483.294824][ T5863] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 483.299837][T11459] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1551'. [ 483.319101][ T5863] em28xx 3-1:0.0: No AC97 audio processor [ 483.360978][T11461] netlink: 'syz.0.1553': attribute type 21 has an invalid length. [ 483.373367][ T5863] usb 3-1: USB disconnect, device number 23 [ 484.020834][T11461] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1553'. [ 484.060898][ T5863] em28xx 3-1:0.0: Disconnecting em28xx [ 484.086377][T11461] netlink: 'syz.0.1553': attribute type 4 has an invalid length. [ 484.097153][ T5863] em28xx 3-1:0.0: Freeing device [ 484.128231][T11461] netlink: 'syz.0.1553': attribute type 3 has an invalid length. [ 484.166256][T11461] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1553'. [ 484.178237][ T5890] usb 2-1: USB disconnect, device number 25 [ 486.642513][T11512] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1569'. [ 486.971406][ T30] audit: type=1400 audit(1768322169.370:665): avc: denied { bind } for pid=11513 comm="syz.1.1570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 487.245003][T11517] syzkaller0: entered promiscuous mode [ 487.250471][T11517] syzkaller0: entered allmulticast mode [ 488.150475][T11534] netlink: 'syz.3.1577': attribute type 4 has an invalid length. [ 490.304800][T11549] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1582'. [ 490.444955][T11550] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1580'. [ 490.454180][T11550] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1580'. [ 490.463161][T11550] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1580'. [ 490.593912][T11557] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1584'. [ 490.969372][T11570] process '/newroot/349/file0' started with executable stack [ 492.020662][T11592] NFSD: Failed to start, no listeners configured. [ 494.527343][ T30] audit: type=1400 audit(1768322176.930:666): avc: denied { remount } for pid=11599 comm="syz.2.1593" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 494.995631][ T30] audit: type=1400 audit(1768322177.400:667): avc: denied { mounton } for pid=11621 comm="syz.4.1602" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 495.019922][T11622] tmpfs: Bad value for 'mpol' [ 495.177068][T11622] overlayfs: missing 'lowerdir' [ 495.421675][ T5890] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 495.621661][ T5890] usb 5-1: Using ep0 maxpacket: 16 [ 495.701728][ T5890] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 495.725197][ T5890] usb 5-1: config 0 has no interface number 0 [ 495.739302][T11629] lo speed is unknown, defaulting to 1000 [ 495.754938][ T5890] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 495.791682][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.799776][ T5890] usb 5-1: Product: syz [ 495.809833][ T5890] usb 5-1: Manufacturer: syz [ 495.819940][ T5890] usb 5-1: SerialNumber: syz [ 495.832156][ T5890] usb 5-1: config 0 descriptor?? [ 495.849257][ T5890] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 496.041688][ T5890] gspca_spca1528: reg_w err -71 [ 496.064255][ T5890] spca1528 5-1:0.1: probe with driver spca1528 failed with error -71 [ 496.104349][ T5890] usb 5-1: USB disconnect, device number 40 [ 496.991498][T11647] syzkaller0: entered promiscuous mode [ 497.022426][T11647] syzkaller0: entered allmulticast mode [ 497.054088][T11653] Invalid option length (1164) for dns_resolver key [ 497.072718][T11654] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1609'. [ 497.234515][T11659] loop2: detected capacity change from 0 to 7 [ 497.241065][T11659] Dev loop2: unable to read RDB block 7 [ 497.246777][ T30] audit: type=1400 audit(1768322179.590:668): avc: denied { create } for pid=11650 comm="syz.2.1609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 497.269409][T11659] loop2: AHDI p2 p3 [ 497.274270][T11659] loop2: partition table partially beyond EOD, truncated [ 497.284479][T11659] loop2: p3 start 335544320 is beyond EOD, truncated [ 497.292323][ T30] audit: type=1400 audit(1768322179.590:669): avc: denied { write } for pid=11650 comm="syz.2.1609" path="socket:[27458]" dev="sockfs" ino=27458 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 497.945355][ T30] audit: type=1326 audit(1768322180.350:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11665 comm="syz.0.1615" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f23e8d8f749 code=0x0 [ 498.053203][ T30] audit: type=1326 audit(1768322180.460:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11665 comm="syz.0.1615" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f23e8d8f749 code=0x0 [ 498.141587][ T849] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 498.421572][ T849] usb 5-1: Using ep0 maxpacket: 8 [ 498.932794][ T849] usb 5-1: config 1 has an invalid interface number: 128 but max is 1 [ 498.942512][ T849] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 498.952633][ T849] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 498.961469][ T849] usb 5-1: config 1 has no interface number 0 [ 498.967561][ T849] usb 5-1: config 1 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 498.978626][ T849] usb 5-1: config 1 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 498.990305][ T849] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 498.999361][ T849] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.021594][ T849] usb 5-1: Product: syz [ 499.025774][ T849] usb 5-1: Manufacturer: syz [ 499.032923][ T849] usb 5-1: SerialNumber: syz [ 499.049325][ T849] cdc_wdm 5-1:1.128: skipping garbage [ 499.083520][ T849] cdc_wdm 5-1:1.128: cdc-wdm0: USB WDM device [ 499.089588][ T849] cdc_wdm 5-1:1.128: Unknown control protocol [ 499.134336][T11685] IPv6: addrconf: prefix option has invalid lifetime [ 499.256428][ T5890] usb 5-1: USB disconnect, device number 41 [ 499.622322][T11706] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 499.630570][T11706] overlayfs: missing 'lowerdir' [ 499.637262][T11705] delete_channel: no stack [ 501.242771][ T5863] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 501.243185][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.256955][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.431574][ T5890] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 501.466726][ T5863] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 501.475721][ T5863] usb 2-1: config 0 has no interface number 0 [ 501.483746][ T5863] usb 2-1: New USB device found, idVendor=0b48, idProduct=1004, bcdDevice=8c.1e [ 501.509634][ T5863] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.536651][ T5863] usb 2-1: config 0 descriptor?? [ 501.565467][ T5863] usb 2-1: selecting invalid altsetting 1 [ 501.574271][ T5863] dvb_ttusb_budget: ttusb_init_controller: error [ 501.580687][ T5863] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 501.591913][ T5890] usb 4-1: Using ep0 maxpacket: 32 [ 501.607049][ T5890] usb 4-1: unable to get BOS descriptor or descriptor too short [ 501.678166][ T5890] usb 4-1: config 7 has an invalid interface number: 187 but max is 0 [ 501.692005][ T5890] usb 4-1: config 7 has no interface number 0 [ 501.708434][ T5890] usb 4-1: config 7 interface 187 has no altsetting 0 [ 501.720519][ T5890] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 501.739101][ T5863] DVB: Unable to find symbol ves1820_attach() [ 501.747475][ T5890] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.762957][ T5890] usb 4-1: Product: syz [ 501.774932][ T5890] usb 4-1: Manufacturer: syz [ 501.782451][ T5890] usb 4-1: SerialNumber: syz [ 501.812803][ T5863] DVB: Unable to find symbol stv0297_attach() [ 501.818883][ T5863] dvb_ttusb_budget: no frontend driver found for device [0b48:1004] [ 501.832894][ T5863] usb 2-1: USB disconnect, device number 26 [ 502.007605][ T5890] usb 4-1: Cannot retrieve CPort count: 0 [ 502.021618][ T5890] usb 4-1: Cannot retrieve CPort count: -5 [ 502.027614][ T5890] es2_ap_driver 4-1:7.187: probe with driver es2_ap_driver failed with error -5 [ 502.236036][ T5890] usb 4-1: USB disconnect, device number 26 [ 502.525793][T11751] fuse: Bad value for 'fd' [ 502.595497][T11755] overlayfs: failed to resolve './file1': -2 [ 502.896092][T11765] comedi comedi3: comedi_test: 10 microvolt, 2046 microsecond waveform attached [ 502.975246][T11765] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 502.983685][T11765] overlayfs: missing 'lowerdir' [ 502.990735][T11764] delete_channel: no stack [ 503.501120][ T30] audit: type=1400 audit(1768322185.900:672): avc: denied { bind } for pid=11776 comm="syz.4.1645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 503.524366][ T30] audit: type=1400 audit(1768322185.930:673): avc: denied { setattr } for pid=11776 comm="syz.4.1645" name="IEEE-802.15.4-MAC" dev="sockfs" ino=28675 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 503.695444][ T30] audit: type=1400 audit(1768322186.100:674): avc: denied { map } for pid=11782 comm="syz.2.1648" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 503.722831][T11784] lo speed is unknown, defaulting to 1000 [ 503.878368][T11791] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1649'. [ 503.910602][T11793] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1650'. [ 503.942825][T11793] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1650'. [ 505.873680][T11826] fuse: Bad value for 'fd' [ 506.460447][T11831] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 506.468763][T11831] overlayfs: missing 'lowerdir' [ 506.677176][T11833] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11833 comm=syz.3.1654 [ 506.694570][T11830] delete_channel: no stack [ 506.791080][T11833] netlink: 'syz.3.1654': attribute type 1 has an invalid length. [ 507.593204][T11841] bond1: (slave gretap1): making interface the new active one [ 507.604435][T11841] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 507.662601][T11848] NFSD: Failed to start, no listeners configured. [ 508.996367][T11862] siw: device registration error -23 [ 509.722487][T11867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 509.742396][T11867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 509.951748][ T5980] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 510.627759][ T5980] usb 2-1: device descriptor read/64, error -71 [ 510.940450][ T5980] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 511.294613][ T5980] usb 2-1: device descriptor read/64, error -71 [ 511.463397][ T5980] usb usb2-port1: attempt power cycle [ 511.701698][T11887] comedi comedi3: comedi_test: 10 microvolt, 2046 microsecond waveform attached [ 511.836515][T11884] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 511.845125][T11884] overlayfs: missing 'lowerdir' [ 512.015100][ T5980] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 512.063150][ T5980] usb 2-1: device descriptor read/8, error -71 [ 512.210025][T11883] delete_channel: no stack [ 512.281586][ T5863] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 512.311795][ T5980] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 512.342169][ T5980] usb 2-1: device descriptor read/8, error -71 [ 512.450210][ T5863] usb 4-1: Using ep0 maxpacket: 8 [ 512.461880][ T5980] usb usb2-port1: unable to enumerate USB device [ 512.463847][ T5863] usb 4-1: config 0 has an invalid interface number: 186 but max is 0 [ 512.479055][ T5863] usb 4-1: config 0 has no interface number 0 [ 512.498422][ T5863] usb 4-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 512.521639][ T5863] usb 4-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 512.561727][ T5863] usb 4-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 512.588237][ T5863] usb 4-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 512.619912][ T5863] usb 4-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 512.704346][ T5863] usb 4-1: New USB device found, idVendor=07c0, idProduct=1500, bcdDevice=b8.c5 [ 512.719665][ T5863] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.729759][ T5863] usb 4-1: Product: syz [ 512.746819][ T5863] usb 4-1: Manufacturer: syz [ 512.753718][ T5863] usb 4-1: SerialNumber: syz [ 512.780473][ T5863] usb 4-1: config 0 descriptor?? [ 512.997852][ T5863] iowarrior 4-1:0.186: IOWarrior product=0x1500, serial=42424242 interface=186 now attached to iowarrior0 [ 513.583629][T11915] syzkaller0: entered promiscuous mode [ 513.589101][T11915] syzkaller0: entered allmulticast mode [ 514.161626][ T5980] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 514.193575][ T5863] usb 4-1: USB disconnect, device number 27 [ 514.323090][ T5980] usb 2-1: config 0 has an invalid interface number: 110 but max is 0 [ 514.350348][ T5980] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 514.416005][ T5980] usb 2-1: config 0 has no interface number 0 [ 514.453305][ T5980] usb 2-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55 [ 514.469722][ T5980] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.482513][ T5980] usb 2-1: Product: syz [ 514.484444][T11932] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1689'. [ 514.486679][ T5980] usb 2-1: Manufacturer: syz [ 514.511785][ T5980] usb 2-1: SerialNumber: syz [ 514.518415][ T5980] usb 2-1: config 0 descriptor?? [ 514.801745][ T5980] cdc_subset 2-1:0.110: probe with driver cdc_subset failed with error -22 [ 515.341716][T11940] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1691'. [ 515.350812][T11940] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1691'. [ 515.359794][T11940] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1691'. [ 515.745120][ T30] audit: type=1400 audit(1768322197.870:675): avc: denied { mount } for pid=11933 comm="syz.2.1690" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 515.767679][ T5980] usb 2-1: USB disconnect, device number 31 [ 515.790454][ T30] audit: type=1400 audit(1768322197.970:676): avc: denied { remount } for pid=11933 comm="syz.2.1690" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 515.877688][T11946] comedi comedi3: comedi_test: 10 microvolt, 2046 microsecond waveform attached [ 515.895962][ T30] audit: type=1400 audit(1768322198.280:677): avc: denied { unmount } for pid=5816 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 516.089695][T11951] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 516.098093][T11951] overlayfs: missing 'lowerdir' [ 516.703834][T11942] delete_channel: no stack [ 516.804582][T11965] tipc: Enabling of bearer rejected, failed to enable media [ 517.269135][T11987] lo speed is unknown, defaulting to 1000 [ 518.742411][T12012] mac80211_hwsim hwsim10 4: renamed from wlan1 [ 520.685281][T12040] lo speed is unknown, defaulting to 1000 [ 520.704814][ T30] audit: type=1400 audit(1768322203.110:678): avc: denied { getopt } for pid=12041 comm="syz.4.1713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 520.748853][T12044] loop2: detected capacity change from 0 to 7 [ 520.757238][T12044] Dev loop2: unable to read RDB block 7 [ 520.786254][T12044] loop2: AHDI p2 p3 [ 520.795480][T12044] loop2: partition table partially beyond EOD, truncated [ 520.825776][T12044] loop2: p3 start 335544320 is beyond EOD, truncated [ 521.221968][T12047] lo speed is unknown, defaulting to 1000 [ 522.260409][T12067] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1722'. [ 522.345660][ T30] audit: type=1400 audit(1768322204.750:679): avc: denied { watch } for pid=12070 comm="syz.0.1723" path="/388/file0" dev="tmpfs" ino=2054 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 522.562407][T12081] netlink: 'syz.4.1726': attribute type 4 has an invalid length. [ 523.603617][T12105] comedi comedi3: comedi_test: 10 microvolt, 2046 microsecond waveform attached [ 524.286813][T12105] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 524.336046][T12105] overlayfs: missing 'lowerdir' [ 524.703966][T12119] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1734'. [ 524.723215][ T30] audit: type=1400 audit(1768322207.120:680): avc: denied { ioctl } for pid=12113 comm="syz.3.1734" path="/dev/ptyqb" dev="devtmpfs" ino=130 ioctlcmd=0x5420 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 524.752378][T12104] delete_channel: no stack [ 524.809516][T12120] comedi comedi3: comedi_test: 10 microvolt, 2046 microsecond waveform attached [ 524.944734][T12121] overlay: Unknown parameter 'appraise_type' [ 525.065937][T12115] delete_channel: no stack [ 526.552527][T12148] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1745'. [ 527.378324][T12157] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1747'. [ 528.212162][ T30] audit: type=1326 audit(1768322210.490:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12166 comm="syz.3.1751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f996438f749 code=0x7ffc0000 [ 528.423628][T12177] syzkaller0: entered promiscuous mode [ 528.431631][ T30] audit: type=1326 audit(1768322210.490:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12166 comm="syz.3.1751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f996438f749 code=0x7ffc0000 [ 528.461606][T12177] syzkaller0: entered allmulticast mode [ 528.485461][ T30] audit: type=1326 audit(1768322210.500:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12166 comm="syz.3.1751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f996438f749 code=0x7ffc0000 [ 528.547825][ T30] audit: type=1326 audit(1768322210.500:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12166 comm="syz.3.1751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7f996438f749 code=0x7ffc0000 [ 528.605560][ T30] audit: type=1326 audit(1768322210.500:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12166 comm="syz.3.1751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f996438f749 code=0x7ffc0000 [ 528.740903][ T30] audit: type=1326 audit(1768322210.510:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12166 comm="syz.3.1751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f996438f749 code=0x7ffc0000 [ 528.834358][ T30] audit: type=1326 audit(1768322210.510:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12166 comm="syz.3.1751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f996438f749 code=0x7ffc0000 [ 529.527150][ T30] audit: type=1326 audit(1768322210.510:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12166 comm="syz.3.1751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f996438f749 code=0x7ffc0000 [ 529.581817][ T30] audit: type=1326 audit(1768322210.520:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12166 comm="syz.3.1751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f996438f749 code=0x7ffc0000 [ 529.661004][ T30] audit: type=1326 audit(1768322210.520:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12166 comm="syz.3.1751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f996438df90 code=0x7ffc0000 [ 530.274125][T12205] siw: device registration error -23 [ 530.901563][ T849] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 531.291564][ T849] usb 2-1: Using ep0 maxpacket: 16 [ 531.300538][ T849] usb 2-1: config 1 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 195, changing to 11 [ 531.324503][T12220] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1766'. [ 531.351583][ T849] usb 2-1: config 1 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 531.469769][ T849] usb 2-1: config 1 interface 0 has no altsetting 0 [ 531.993913][ T849] usb 2-1: New USB device found, idVendor=046d, idProduct=c20a, bcdDevice= 0.40 [ 532.023240][ T849] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.037082][ T849] usb 2-1: Product:  [ 532.048713][ T849] usb 2-1: Manufacturer: 켖㸾ᾘᲾ몳│Ƛ㷝엨힊爯鰰❪ꎬ炀닙⟍뤓ꡭ꭭Nj웲驏♗礤壃आ腈ಓЈ㋋἖졀﵃狝勎弍뗯ퟏ冤ᛓ㘸鐾彝伖対煿尠鈜ゞ飠㏺⹹䉊䰬쓖㭩툣藕岔ᳲ氡쬘댵몔怊㿌ܼ♸៺講㺞澘睟䀵萺ῦ휻焺殓펖튜 [ 532.119328][ T849] usb 2-1: SerialNumber: syz [ 532.192326][T12230] loop2: detected capacity change from 0 to 7 [ 532.202050][T12230] loop2: [ 532.205069][T12230] loop2: partition table partially beyond EOD, truncated [ 533.346002][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 533.346019][ T30] audit: type=1400 audit(1768322215.750:720): avc: denied { map } for pid=12204 comm="syz.1.1760" path="socket:[29969]" dev="sockfs" ino=29969 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 533.347066][T12206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 533.561902][T12206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 533.615493][T12206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 533.625937][T12206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 533.634770][ T30] audit: type=1400 audit(1768322216.040:721): avc: denied { accept } for pid=12204 comm="syz.1.1760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 534.179375][T12206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 534.195864][T12206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 534.223386][ T849] usbhid 2-1:1.0: can't add hid device: -71 [ 534.236643][ T849] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 534.261422][ T849] usb 2-1: USB disconnect, device number 32 [ 534.529379][T12257] IPv6: addrconf: prefix option has invalid lifetime [ 534.661616][T12260] netlink: 'syz.3.1777': attribute type 4 has an invalid length. [ 534.691136][T12262] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1778'. [ 534.710983][T12262] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 534.746999][T12264] comedi comedi3: comedi_test: 10 microvolt, 2046 microsecond waveform attached [ 534.970921][T12264] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 534.979519][T12264] overlayfs: missing 'lowerdir' [ 534.991320][T12263] delete_channel: no stack [ 535.011824][T12274] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1782'. [ 535.443389][T12289] 9p: Bad value for 'wfdno' [ 535.607130][T12285] NFSD: Failed to start, no listeners configured. [ 535.822262][ T849] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 535.992961][ T849] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 536.043441][ T849] usb 3-1: config 0 has no interface number 0 [ 536.051345][ T849] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 536.072515][ T849] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.105717][T12296] NFSD: Failed to start, no listeners configured. [ 536.152160][ T849] usb 3-1: config 0 descriptor?? [ 536.168576][ T849] usb 3-1: selecting invalid altsetting 1 [ 536.175911][ T849] dvb_ttusb_budget: ttusb_init_controller: error [ 536.182983][ T849] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 536.295666][ T849] DVB: Unable to find symbol cx22700_attach() [ 536.338896][ T849] DVB: Unable to find symbol tda10046_attach() [ 536.347916][ T849] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 536.391632][ T5927] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 536.553861][ T5927] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 536.585299][ T5927] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 536.601532][ T5927] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.611940][ T5927] usb 4-1: Product: syz [ 536.620647][ T5927] usb 4-1: Manufacturer: syz [ 536.625519][ T5927] usb 4-1: SerialNumber: syz [ 537.166332][ T849] usb 3-1: USB disconnect, device number 24 [ 538.591627][ T30] audit: type=1400 audit(1768322220.900:722): avc: denied { getopt } for pid=12311 comm="syz.4.1795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 538.815590][ T5927] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 538.912793][ T5927] cdc_ncm 4-1:1.0: dwNtbInMaxSize=5 is too small. Using 2048 [ 538.924324][ T5927] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 538.944133][T12328] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1799'. [ 539.458642][ T5927] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 539.499379][ T5927] usb 4-1: USB disconnect, device number 28 [ 539.508635][ T5927] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 539.950389][T12344] erofs (device nbd2): cannot find valid erofs superblock [ 540.703374][T12351] lo speed is unknown, defaulting to 1000 [ 541.191562][ T5927] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 541.371656][ T5927] usb 4-1: Using ep0 maxpacket: 16 [ 541.387519][ T5927] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 541.396933][ T5927] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.405954][ T5927] usb 4-1: Product: syz [ 541.411034][ T5927] usb 4-1: Manufacturer: syz [ 541.445309][ T5927] usb 4-1: SerialNumber: syz [ 541.456946][ T5927] r8152-cfgselector 4-1: Unknown version 0x0000 [ 541.463569][ T5927] r8152-cfgselector 4-1: config 0 descriptor?? [ 541.720198][T12374] comedi comedi3: comedi_test: 10 microvolt, 2046 microsecond waveform attached [ 542.013256][T12374] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 542.021906][T12374] overlayfs: missing 'lowerdir' [ 542.129823][T12380] hub 9-0:1.0: USB hub found [ 542.170736][ T30] audit: type=1400 audit(1768322224.570:723): avc: denied { mount } for pid=12358 comm="syz.3.1808" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 542.198100][T12380] hub 9-0:1.0: 1 port detected [ 542.211239][T12373] delete_channel: no stack [ 542.232372][T12376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 542.241310][T12376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 542.305535][ T30] audit: type=1400 audit(1768322224.710:724): avc: denied { write } for pid=12386 comm="syz.0.1816" lport=54038 faddr=255.255.255.254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 543.633904][ T849] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 543.793550][ T849] usb 3-1: unable to get BOS descriptor or descriptor too short [ 543.821003][ T849] usb 3-1: not running at top speed; connect to a high speed hub [ 543.838340][ T849] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 543.867338][ T849] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 543.891085][ T849] usb 3-1: string descriptor 0 read error: -22 [ 543.906655][ T849] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 543.930769][ T849] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.992048][ T5927] r8152-cfgselector 4-1: Unknown version 0x0000 [ 544.004523][ T5927] r8152-cfgselector 4-1: bad CDC descriptors [ 544.021443][ T849] usb 3-1: 0:2 : does not exist [ 544.044236][ T30] audit: type=1400 audit(1768322226.450:725): avc: denied { append } for pid=12417 comm="syz.3.1825" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 545.158373][ T5927] r8152-cfgselector 4-1: USB disconnect, device number 29 [ 545.249807][T12419] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 545.260595][T12419] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 545.424976][ T4044] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.438343][ T4044] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.447996][ T4044] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.448020][T12422] netlink: 'syz.1.1826': attribute type 1 has an invalid length. [ 545.457256][ T4044] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.492908][T12422] 8021q: adding VLAN 0 to HW filter on device bond1 [ 545.562122][ T30] audit: type=1400 audit(1768322227.970:726): avc: denied { read } for pid=12421 comm="syz.1.1826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 545.582762][T12424] overlayfs: missing 'lowerdir' [ 545.809217][T12428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 545.837877][T12428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 546.757970][T12439] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1832'. [ 547.754257][T12449] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1834'. [ 549.408488][ T30] audit: type=1400 audit(1768322231.810:727): avc: denied { setopt } for pid=12457 comm="syz.3.1827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 549.562799][T12464] loop2: detected capacity change from 0 to 7 [ 549.571994][T12464] loop2: [ 549.574960][T12464] loop2: partition table partially beyond EOD, truncated [ 549.988616][T12472] netlink: 'syz.1.1837': attribute type 12 has an invalid length. [ 550.021652][ T30] audit: type=1400 audit(1768322232.310:728): avc: denied { setopt } for pid=12465 comm="syz.3.1841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 550.468250][ T849] usb 3-1: 5:0: failed to get current value for ch 0 (-110) [ 550.551080][ T849] usb 3-1: 5:0: cannot get min/max values for control 2 (id 5) [ 550.576215][ T849] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 550.603071][ T849] usb 3-1: 5:0: failed to get current value for ch 1 (-22) [ 550.666456][ T849] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 550.698131][ T849] usb 3-1: 5:0: cannot get min/max values for control 2 (id 5) [ 552.396146][ T5890] usb 3-1: USB disconnect, device number 25 [ 552.554575][T12503] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1849'. [ 552.670304][T12503] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1849'. [ 552.798568][T12505] netlink: 'syz.3.1851': attribute type 1 has an invalid length. [ 552.806388][T12505] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1851'. [ 553.226323][T12503] program syz.2.1849 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 553.263991][T12503] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 554.430901][T12524] NFSD: Failed to start, no listeners configured. [ 554.981572][ T849] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 555.099355][T12542] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1862'. [ 555.157709][ T849] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 555.214611][ T849] usb 2-1: config 0 has no interface number 0 [ 555.234953][ T849] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 555.293465][ T849] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.327568][ T849] usb 2-1: config 0 descriptor?? [ 555.346832][ T849] usb 2-1: selecting invalid altsetting 1 [ 555.359085][ T849] dvb_ttusb_budget: ttusb_init_controller: error [ 555.376819][ T849] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 555.467766][ T849] DVB: Unable to find symbol cx22700_attach() [ 555.547763][ T849] DVB: Unable to find symbol tda10046_attach() [ 555.579997][ T849] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 556.586750][ T30] audit: type=1400 audit(1768322238.910:729): avc: denied { connect } for pid=12562 comm="syz.3.1867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 556.735511][T12566] sp0: Synchronizing with TNC [ 557.915377][T12573] syz_tun: entered allmulticast mode [ 560.413039][T12584] loop2: detected capacity change from 0 to 7 [ 560.500812][T12573] syz_tun: left allmulticast mode [ 560.510170][T12584] loop2: [ 560.542207][T12584] loop2: partition table partially beyond EOD, truncated [ 560.688920][T12593] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1872'. [ 562.172226][ T5890] usb 2-1: USB disconnect, device number 33 [ 562.420674][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.427194][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.403401][T12641] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1892'. [ 565.710168][T12673] NFSD: Failed to start, no listeners configured. [ 568.991582][ T849] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 569.174677][ T849] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 569.201829][ T849] usb 2-1: config 1 has no interface number 0 [ 569.211997][ T849] usb 2-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 569.241825][ T849] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 569.268658][ T849] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 569.293638][ T849] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 569.311593][ T849] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.339935][ T849] usb 2-1: Product: syz [ 569.346447][ T849] usb 2-1: Manufacturer: syz [ 569.364469][ T849] usb 2-1: SerialNumber: syz [ 569.442960][T12693] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 569.507791][T12707] IPv6: sit1: Disabled Multicast RS [ 569.548308][T12707] sit1: entered allmulticast mode [ 569.684894][T12693] bridge0: port 3(syz_tun) entered blocking state [ 569.806674][T12693] bridge0: port 3(syz_tun) entered disabled state [ 569.831804][T12693] syz_tun: entered allmulticast mode [ 569.853284][T12711] NFSD: Failed to start, no listeners configured. [ 569.889447][T12717] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 569.975066][T12693] syz_tun: entered promiscuous mode [ 569.990104][T12693] bridge0: port 3(syz_tun) entered blocking state [ 569.996989][T12693] bridge0: port 3(syz_tun) entered forwarding state [ 570.239411][ T849] sierra_net 2-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.1-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:01:07 [ 570.458448][ T849] sierra_net 2-1:1.7 wwan0: Submit SYNC failed -71 [ 570.511864][ T849] sierra_net 2-1:1.7 wwan0: Send SYNC failed, status -71 [ 570.613175][ T849] sierra_net 2-1:1.7 wwan0: Submit SYNC failed -71 [ 570.645852][ T849] sierra_net 2-1:1.7 wwan0: Send SYNC failed, status -71 [ 570.712029][ T849] usb 2-1: USB disconnect, device number 34 [ 570.750213][ T849] sierra_net 2-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.1-1, Sierra Wireless USB-to-WWAN Modem [ 570.871573][ T5890] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 570.935029][ T849] sierra_net 2-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 571.439167][T12729] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1920'. [ 571.515972][ T5890] usb 3-1: Using ep0 maxpacket: 32 [ 571.529195][ T5890] usb 3-1: config index 0 descriptor too short (expected 3406, got 27) [ 571.551739][ T5890] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 571.579166][ T5890] usb 3-1: config 0 has no interface number 0 [ 571.597035][ T5890] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 571.609594][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.618642][ T5890] usb 3-1: Product: syz [ 571.633148][ T5890] usb 3-1: Manufacturer: syz [ 571.637798][ T5890] usb 3-1: SerialNumber: syz [ 571.723760][ T5890] usb 3-1: config 0 descriptor?? [ 571.752389][ T5890] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 572.008905][T12725] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1919'. [ 572.020374][ T5890] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 572.033839][T12746] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1925'. [ 572.079290][ T5890] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 573.362028][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 10 [ 573.566389][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 573.566594][ T849] usb 3-1: USB disconnect, device number 26 [ 573.597546][ T849] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 573.655958][ T849] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 573.691832][ T849] quatech2 3-1:0.51: device disconnected [ 574.199811][T12762] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1931'. [ 575.001629][ T30] audit: type=1400 audit(1768322257.410:730): avc: denied { unmount } for pid=5817 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 575.471577][ T849] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 576.531818][ T849] usb 2-1: Using ep0 maxpacket: 16 [ 576.811897][ T849] usb 2-1: config 0 has an invalid interface number: 3 but max is 0 [ 576.819914][ T849] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 576.833790][ T849] usb 2-1: config 0 has no interface number 0 [ 576.839924][ T849] usb 2-1: config 0 interface 3 altsetting 142 bulk endpoint 0x5 has invalid maxpacket 32 [ 577.163507][ T849] usb 2-1: config 0 interface 3 altsetting 142 endpoint 0xB has an invalid bInterval 36, changing to 9 [ 577.211580][ T849] usb 2-1: config 0 interface 3 altsetting 142 has an invalid descriptor for endpoint zero, skipping [ 577.261558][ T849] usb 2-1: config 0 interface 3 altsetting 142 has a duplicate endpoint with address 0xB, skipping [ 577.284120][ T849] usb 2-1: config 0 interface 3 altsetting 142 bulk endpoint 0x6 has invalid maxpacket 8 [ 577.421557][ T849] usb 2-1: config 0 interface 3 altsetting 142 has 7 endpoint descriptors, different from the interface descriptor's value: 11 [ 577.980420][ T849] usb 2-1: config 0 interface 3 has no altsetting 0 [ 578.087061][ T849] usb 2-1: string descriptor 0 read error: -71 [ 578.626923][ T849] usb 2-1: New USB device found, idVendor=0bfd, idProduct=000b, bcdDevice=4e.46 [ 578.684698][ T849] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.802173][ T849] usb 2-1: config 0 descriptor?? [ 578.819085][ T849] usb 2-1: can't set config #0, error -71 [ 578.834145][ T849] usb 2-1: USB disconnect, device number 35 [ 579.591767][ T5980] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 580.355892][ T5980] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 580.381665][ T5980] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.421140][ T5980] usb 5-1: config 0 descriptor?? [ 580.534362][ T5980] cp210x 5-1:0.0: cp210x converter detected [ 580.944532][T12815] batadv_slave_0: entered promiscuous mode [ 580.950486][T12815] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1947'. [ 580.965534][ T5980] usb 5-1: cp210x converter now attached to ttyUSB0 [ 581.174988][ T5980] usb 5-1: USB disconnect, device number 42 [ 581.223757][ T5980] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 581.278163][ T5980] cp210x 5-1:0.0: device disconnected [ 582.097697][ T30] audit: type=1400 audit(1768322264.500:731): avc: denied { create } for pid=12832 comm="syz.1.1954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 582.167295][ T30] audit: type=1400 audit(1768322264.540:732): avc: denied { ioctl } for pid=12832 comm="syz.1.1954" path="socket:[31985]" dev="sockfs" ino=31985 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 582.313596][T12843] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1956'. [ 582.418481][T12849] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1950'. [ 582.429165][T12845] syzkaller0: entered promiscuous mode [ 582.441619][T12845] syzkaller0: entered allmulticast mode [ 582.684100][ T5980] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 582.893446][ T5980] usb 4-1: unable to get BOS descriptor or descriptor too short [ 582.915989][ T5980] usb 4-1: not running at top speed; connect to a high speed hub [ 582.929943][ T5980] usb 4-1: config 14 has an invalid interface number: 78 but max is 0 [ 582.938785][ T5980] usb 4-1: config 14 has no interface number 0 [ 582.945216][ T5980] usb 4-1: config 14 interface 78 has no altsetting 0 [ 582.961430][ T5980] usb 4-1: New USB device found, idVendor=07c4, idProduct=a4a5, bcdDevice=1b.5d [ 583.165786][ T5980] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.201003][ T5980] usb 4-1: Product: syz [ 583.211571][ T5980] usb 4-1: Manufacturer: syz [ 583.216512][ T5980] usb 4-1: SerialNumber: syz [ 584.155337][T12882] netlink: 'syz.2.1966': attribute type 4 has an invalid length. [ 584.241019][ T5980] usb-storage 4-1:14.78: USB Mass Storage device detected [ 584.278249][ T5980] usb-storage 4-1:14.78: Quirks match for vid 07c4 pid a4a5: 420 [ 584.436157][ T5980] usb 4-1: USB disconnect, device number 30 [ 586.653830][T12909] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1974'. [ 587.170714][T12918] binder: BINDER_SET_CONTEXT_MGR already set [ 587.178918][T12916] binder_alloc: binder_alloc_mmap_handler: 12915 200000ffd000-200001000000 already mapped failed -16 [ 587.193636][T12918] binder: 12915:12918 ioctl 4018620d 2000000002c0 returned -16 [ 587.421641][T12922] comedi comedi3: comedi_test: 10 microvolt, 2046 microsecond waveform attached [ 588.156868][T12917] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 588.165232][T12917] overlayfs: missing 'lowerdir' [ 588.186978][T12914] delete_channel: no stack [ 588.490138][T12933] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=52510 sclass=netlink_route_socket pid=12933 comm=syz.0.1982 [ 588.662531][T12936] binder: 12935:12936 ioctl c0306201 0 returned -14 [ 588.720351][T12938] IPv6: addrconf: prefix option has invalid lifetime [ 588.793909][T12940] netlink: 'syz.0.1984': attribute type 4 has an invalid length. [ 589.012025][ T5863] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 589.571525][ T5863] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 590.463922][ T5863] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.496507][ T5863] usb 4-1: Product: syz [ 590.501179][ T5863] usb 4-1: Manufacturer: syz [ 590.522869][ T5863] usb 4-1: SerialNumber: syz [ 590.530994][ T5863] usb 4-1: config 0 descriptor?? [ 590.754745][T12936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 590.784270][T12936] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 590.976949][T12973] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1983'. [ 591.291277][ T5863] usb-storage 4-1:0.0: USB Mass Storage device detected [ 591.356376][ T5863] usb 4-1: USB disconnect, device number 31 [ 591.946579][ T30] audit: type=1400 audit(1768322274.350:733): avc: denied { connect } for pid=12983 comm="syz.4.1997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 595.340539][ T30] audit: type=1400 audit(1768322277.740:734): avc: denied { accept } for pid=13023 comm="syz.4.2007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 596.232594][T13033] IPv6: addrconf: prefix option has invalid lifetime [ 596.566057][T13048] netlink: 'syz.1.2013': attribute type 3 has an invalid length. [ 596.642904][T13051] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2015'. [ 598.093044][T13054] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 598.207437][T13067] FAULT_INJECTION: forcing a failure. [ 598.207437][T13067] name failslab, interval 1, probability 0, space 0, times 1 [ 598.221195][T13067] CPU: 1 UID: 0 PID: 13067 Comm: syz.1.2018 Tainted: G L syzkaller #0 PREEMPT(full) [ 598.221222][T13067] Tainted: [L]=SOFTLOCKUP [ 598.221228][T13067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 598.221237][T13067] Call Trace: [ 598.221243][T13067] [ 598.221250][T13067] dump_stack_lvl+0x16c/0x1f0 [ 598.221278][T13067] should_fail_ex+0x512/0x640 [ 598.221303][T13067] ? fs_reclaim_acquire+0xae/0x150 [ 598.221328][T13067] should_failslab+0xc2/0x120 [ 598.221350][T13067] __kmalloc_noprof+0xeb/0x910 [ 598.221376][T13067] ? tomoyo_encode2+0x100/0x3e0 [ 598.221404][T13067] ? tomoyo_encode2+0x100/0x3e0 [ 598.221425][T13067] tomoyo_encode2+0x100/0x3e0 [ 598.221451][T13067] tomoyo_encode+0x29/0x50 [ 598.221475][T13067] tomoyo_realpath_from_path+0x18f/0x6e0 [ 598.221504][T13067] tomoyo_path_number_perm+0x245/0x580 [ 598.221522][T13067] ? tomoyo_path_number_perm+0x237/0x580 [ 598.221543][T13067] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 598.221565][T13067] ? find_held_lock+0x2b/0x80 [ 598.221615][T13067] ? find_held_lock+0x2b/0x80 [ 598.221639][T13067] ? hook_file_ioctl_common+0x144/0x410 [ 598.221668][T13067] ? __fget_files+0x20e/0x3c0 [ 598.221696][T13067] security_file_ioctl+0x9b/0x240 [ 598.221719][T13067] __x64_sys_ioctl+0xb7/0x210 [ 598.221740][T13067] do_syscall_64+0xcd/0xf80 [ 598.221764][T13067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.221780][T13067] RIP: 0033:0x7fe06818f749 [ 598.221794][T13067] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 598.221808][T13067] RSP: 002b:00007fe0663b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 598.221824][T13067] RAX: ffffffffffffffda RBX: 00007fe0683e6180 RCX: 00007fe06818f749 [ 598.221834][T13067] RDX: 0000200000000080 RSI: 0000000080045104 RDI: 0000000000000007 [ 598.221844][T13067] RBP: 00007fe0663b4090 R08: 0000000000000000 R09: 0000000000000000 [ 598.221854][T13067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 598.221863][T13067] R13: 00007fe0683e6218 R14: 00007fe0683e6180 R15: 00007fff98af2708 [ 598.221887][T13067] [ 598.433607][T13067] ERROR: Out of memory at tomoyo_realpath_from_path. [ 600.888100][T13103] syzkaller0: entered promiscuous mode [ 600.914465][T13103] syzkaller0: entered allmulticast mode [ 600.967744][T13103] tipc: Enabled bearer , priority 0 [ 600.981761][T13102] tipc: Resetting bearer [ 600.995166][T13102] tipc: Disabling bearer [ 601.492683][ T5980] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 601.507190][T13111] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2033'. [ 601.601038][T13115] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2034'. [ 601.752157][ T5980] usb 2-1: config 0 has no interfaces? [ 601.762958][ T5980] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 601.791436][ T5980] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 601.823877][ T5980] usb 2-1: SerialNumber: syz [ 601.839326][ T5980] usb 2-1: config 0 descriptor?? [ 602.143024][T13120] NFSD: Failed to start, no listeners configured. [ 602.162261][ T5980] usb 2-1: USB disconnect, device number 36 [ 602.273971][T13132] Invalid argument reading file caps for ./file0 [ 602.543727][T13144] loop2: detected capacity change from 0 to 7 [ 602.578812][T13144] loop2: [ 602.610521][T13144] loop2: partition table partially beyond EOD, truncated [ 602.662113][T13149] netlink: 'syz.0.2045': attribute type 4 has an invalid length. [ 602.877537][T13155] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13155 comm=syz.4.2035 [ 603.117819][ T30] audit: type=1400 audit(1768322285.520:735): avc: denied { shutdown } for pid=13152 comm="syz.4.2035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 604.804029][ T30] audit: type=1400 audit(1768322287.020:736): avc: denied { append } for pid=13175 comm="syz.1.2054" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 605.194233][T13188] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2056'. [ 605.429007][T13192] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2059'. [ 605.451295][T13193] syzkaller0: entered promiscuous mode [ 605.457287][T13193] syzkaller0: entered allmulticast mode [ 605.477244][T13193] tipc: Enabled bearer , priority 0 [ 605.591760][T13191] tipc: Resetting bearer [ 605.648291][T13191] tipc: Disabling bearer [ 606.692089][ T30] audit: type=1400 audit(1768322289.090:737): avc: denied { setattr } for pid=13204 comm="syz.3.2062" name="sequencer" dev="devtmpfs" ino=1286 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 606.756565][T13210] autofs: Unknown parameter './file0' [ 606.788656][T13210] IPVS: set_ctl: invalid protocol: 0 172.30.0.5:20001 [ 606.921364][T13218] netlink: 'syz.3.2066': attribute type 4 has an invalid length. [ 610.376892][T13273] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2082'. [ 610.916794][T13280] IPv6: addrconf: prefix option has invalid lifetime [ 614.235313][T13308] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 615.559954][T13329] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2098'. [ 615.569439][T13329] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2098'. [ 615.578471][T13329] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2098'. [ 617.584031][ T30] audit: type=1400 audit(1768322299.980:738): avc: denied { name_bind 0x1000000 } for pid=13340 comm="syz.4.2101" path="socket:[33795]" dev="sockfs" ino=33795 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 618.131574][ T5980] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 618.351551][ T5980] usb 5-1: Using ep0 maxpacket: 16 [ 618.380219][ T5980] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 618.405713][ T5980] usb 5-1: can't read configurations, error -22 [ 620.221582][ T5980] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 620.287336][T13359] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2102'. [ 621.351816][ T5980] usb 5-1: Using ep0 maxpacket: 16 [ 621.358874][ T5980] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 621.367265][ T5980] usb 5-1: can't read configurations, error -22 [ 621.374322][ T5980] usb usb5-port1: attempt power cycle [ 621.935960][T13382] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 621.944240][T13382] overlayfs: missing 'lowerdir' [ 621.970298][T13381] delete_channel: no stack [ 622.687440][T13389] fuse: Bad value for 'rootmode' [ 622.903458][T13392] netlink: 176 bytes leftover after parsing attributes in process `syz.4.2113'. [ 623.213911][T13392] lo speed is unknown, defaulting to 1000 [ 623.448718][T13404] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2110'. [ 623.767403][T13411] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2120'. [ 623.814449][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.820759][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.342013][ T5890] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 625.498414][T13426] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2123'. [ 626.102847][ T5890] usb 4-1: Using ep0 maxpacket: 8 [ 626.685652][ T5890] usb 4-1: unable to get BOS descriptor or descriptor too short [ 626.712206][ T5890] usb 4-1: config 4 has an invalid interface number: 147 but max is 0 [ 626.722360][ T5890] usb 4-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 626.731109][ T5890] usb 4-1: config 4 has no interface number 0 [ 626.753958][ T5890] usb 4-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 626.763106][ T5890] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.784801][ T5890] usb 4-1: Product: syz [ 626.844549][T13440] xt_hashlimit: max too large, truncated to 1048576 [ 626.914303][ T5890] usb 4-1: Manufacturer: syz [ 626.927201][ T5890] usb 4-1: SerialNumber: syz [ 627.051783][ T5890] usb 4-1: can't set config #4, error -71 [ 627.064478][ T5890] usb 4-1: USB disconnect, device number 32 [ 628.053868][T13450] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2132'. [ 630.273184][T13475] comedi comedi3: comedi_test: 10 microvolt, 2046 microsecond waveform attached [ 630.452183][T13475] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 630.460467][T13475] overlayfs: missing 'lowerdir' [ 631.129454][T13492] xt_CT: You must specify a L4 protocol and not use inversions on it [ 631.338497][T13493] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2144'. [ 631.361589][T13474] delete_channel: no stack [ 631.434601][T13500] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2147'. [ 631.556080][T13503] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2148'. [ 631.731807][ T5890] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 631.951624][ T5890] usb 3-1: device descriptor read/64, error -71 [ 632.694377][ T5890] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 632.743460][T13519] tmpfs: Unknown parameter 'grpquota_inodei' [ 633.579849][ T5890] usb 3-1: device descriptor read/64, error -71 [ 633.612649][T13521] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2156'. [ 633.653498][T13526] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2157'. [ 633.655063][T13521] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2156'. [ 633.706974][ T5890] usb usb3-port1: attempt power cycle [ 633.959419][T13537] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2153'. [ 634.251602][ T5890] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 634.273180][ T5890] usb 3-1: device descriptor read/8, error -71 [ 634.342358][T13537] netlink: 'syz.1.2153': attribute type 2 has an invalid length. [ 634.514925][ T5890] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 634.621951][ T5890] usb 3-1: device descriptor read/8, error -71 [ 634.784881][ T5890] usb usb3-port1: unable to enumerate USB device [ 634.902250][T13554] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2164'. [ 635.872859][ T30] audit: type=1400 audit(1768322318.270:739): avc: denied { setopt } for pid=13542 comm="syz.3.2163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 636.804992][ T30] audit: type=1400 audit(1768322319.200:740): avc: denied { read } for pid=13548 comm="syz.2.2165" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 637.513501][T13571] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2169'. [ 637.971122][ T30] audit: type=1400 audit(1768322320.370:741): avc: denied { ioctl } for pid=13572 comm="syz.3.2170" path="socket:[34113]" dev="sockfs" ino=34113 ioctlcmd=0x9361 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 639.673087][T13587] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2175'. [ 640.441048][ T5980] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 640.666541][ T5980] usb 2-1: config 6 has an invalid interface number: 216 but max is 0 [ 640.691537][ T5980] usb 2-1: config 6 has an invalid descriptor of length 196, skipping remainder of the config [ 640.725592][ T5980] usb 2-1: config 6 has no interface number 0 [ 640.751034][ T5980] usb 2-1: config 6 interface 216 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 640.782700][ T5980] usb 2-1: config 6 interface 216 has no altsetting 0 [ 640.804355][ T5980] usb 2-1: New USB device found, idVendor=093a, idProduct=010e, bcdDevice=91.f6 [ 640.821519][ T5980] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.829595][ T5980] usb 2-1: Product: syz [ 640.834904][ T5980] usb 2-1: Manufacturer: syz [ 640.840018][ T5980] usb 2-1: SerialNumber: syz [ 641.722175][ T5980] gspca_main: mr97310a-2.14.0 probing 093a:010e [ 641.728486][ T5980] gspca_mr97310a: reg write [21] error -22 [ 641.779261][ T5980] mr97310a 2-1:6.216: probe with driver mr97310a failed with error -22 [ 641.820929][ T5980] usb 2-1: USB disconnect, device number 37 [ 642.061486][T13613] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2187'. [ 644.895491][T13661] random: crng reseeded on system resumption [ 644.954310][ T30] audit: type=1400 audit(1768322327.350:742): avc: denied { ioctl } for pid=13657 comm="syz.2.2195" path="/dev/snapshot" dev="devtmpfs" ino=92 ioctlcmd=0x3311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 646.056228][T13682] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 646.069108][ T5813] Bluetooth: hci5: sending frame failed (-49) [ 646.076574][ T5830] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 646.101576][ T5890] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 646.261697][ T5890] usb 5-1: Using ep0 maxpacket: 32 [ 646.271249][ T5890] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 646.294821][ T5890] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 646.401544][ T5890] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 646.417138][ T5890] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.443878][ T5890] usb 5-1: config 0 descriptor?? [ 647.884800][ T5890] savu 0003:1E7D:2D5A.0008: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 648.480975][T13673] binder: 13670:13673 ioctl c0306201 200000000080 returned -14 [ 648.757611][ T5980] usb 5-1: USB disconnect, device number 46 [ 648.788932][T13700] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2205'. [ 649.753961][T13714] loop2: detected capacity change from 0 to 7 [ 649.780250][T13714] loop2: [ 649.783336][T13714] loop2: partition table partially beyond EOD, truncated [ 649.921874][ T30] audit: type=1400 audit(1768322332.330:743): avc: denied { write } for pid=13722 comm="syz.1.2213" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 650.905894][T13729] input: syz0 as /devices/virtual/input/input27 [ 652.472948][T13743] openvswitch: netlink: Key type 31 is not supported [ 655.376782][ T30] audit: type=1400 audit(1768322337.780:744): avc: denied { unmount } for pid=5814 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 655.398950][T13773] Process accounting resumed [ 655.561679][T13785] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=13785 comm=syz.1.2229 [ 657.090894][T13807] erspan0: entered promiscuous mode [ 658.123265][ T5980] kernel write not supported for file /uinput (pid: 5980 comm: kworker/0:7) [ 660.571720][ T5980] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 661.121550][ T5980] usb 4-1: Using ep0 maxpacket: 32 [ 661.131343][ T5980] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 661.151560][ T5980] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 661.167572][ T5980] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 661.187300][ T5980] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 661.207319][ T5980] usb 4-1: config 0 descriptor?? [ 661.225378][ T5980] hub 4-1:0.0: USB hub found [ 661.429753][ T5980] hub 4-1:0.0: config failed, can't read hub descriptor (err -90) [ 661.471653][T13862] ceph: No mds server is up or the cluster is laggy [ 661.611571][ T30] audit: type=1400 audit(1768322344.010:745): avc: denied { listen } for pid=13875 comm="syz.4.2256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 662.064623][T13843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 662.075872][T13843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 662.610767][ T5980] hid-generic 0003:046D:C31C.0009: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.3-1/input0 [ 662.694126][T13882] netlink: 204 bytes leftover after parsing attributes in process `syz.1.2257'. [ 662.825633][ T30] audit: type=1400 audit(1768322345.230:746): avc: denied { append } for pid=13880 comm="syz.1.2257" name="video9" dev="devtmpfs" ino=957 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 662.918923][T13892] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2260'. [ 663.144393][T13901] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2262'. [ 663.469303][ T5890] usb 4-1: USB disconnect, device number 33 [ 664.211528][ T5890] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 664.349943][T13926] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2269'. [ 664.370941][T13926] netlink: 'syz.1.2269': attribute type 22 has an invalid length. [ 664.390418][T13926] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2269'. [ 664.401541][ T5890] usb 4-1: Using ep0 maxpacket: 8 [ 664.415692][ T5890] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 664.435228][ T5890] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.460731][ T5890] usb 4-1: Product: syz [ 664.471665][ T5890] usb 4-1: Manufacturer: syz [ 664.486838][ T5890] usb 4-1: SerialNumber: syz [ 664.497241][ T5890] usb 4-1: config 0 descriptor?? [ 664.851606][ T849] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 665.165673][ T5890] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 665.198761][ T5890] usb write operation failed. (-71) [ 665.207549][ T5890] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 665.218002][ T5890] dvbdev: DVB: registering new adapter (Terratec H7) [ 665.225046][ T5890] usb 4-1: media controller created [ 665.239456][ T5890] usb read operation failed. (-71) [ 665.245074][ T5890] usb write operation failed. (-71) [ 665.268521][T13947] hub 9-0:1.0: USB hub found [ 665.276417][T13947] hub 9-0:1.0: 1 port detected [ 665.297140][ T5890] dvb_usb_az6007 4-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 665.311225][ T5890] usb 4-1: USB disconnect, device number 34 [ 665.586522][T13951] block nbd1: NBD_DISCONNECT [ 665.612750][ T849] usb 5-1: Using ep0 maxpacket: 32 [ 665.622656][ T5980] IPVS: starting estimator thread 0... [ 665.639432][ T849] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 665.659114][ T849] usb 5-1: config 0 has no interface number 0 [ 665.668566][ T849] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 665.678393][ T849] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.741549][T13954] IPVS: using max 42 ests per chain, 100800 per kthread [ 665.801857][ T849] usb 5-1: Product: syz [ 665.806028][ T849] usb 5-1: Manufacturer: syz [ 665.810587][ T849] usb 5-1: SerialNumber: syz [ 666.288239][ T849] usb 5-1: config 0 descriptor?? [ 666.299375][ T849] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 666.542020][ T849] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 666.693810][ T849] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 668.813789][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 668.823437][ T849] usb 5-1: USB disconnect, device number 47 [ 668.863889][ T849] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 668.875369][T13970] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2279'. [ 668.990363][ T849] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 669.086615][T13987] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2283'. [ 669.095951][T13987] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2283'. [ 669.105070][T13987] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2283'. [ 669.527991][ T849] quatech2 5-1:0.51: device disconnected [ 670.575264][T14006] hub 9-0:1.0: USB hub found [ 670.575629][T14006] hub 9-0:1.0: 1 port detected [ 670.633572][T14010] ip6erspan0: entered promiscuous mode [ 670.681354][ T30] audit: type=1400 audit(1768322353.080:747): avc: denied { map } for pid=14011 comm="syz.0.2290" path="socket:[35848]" dev="sockfs" ino=35848 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 670.937939][T14021] netlink: 'syz.0.2293': attribute type 4 has an invalid length. [ 670.969439][T14022] comedi comedi3: comedi_test: 10 microvolt, 2046 microsecond waveform attached [ 671.972345][T14022] overlayfs: failed to resolve './bus': -2 [ 671.989118][T14038] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 671.997651][T14038] overlayfs: missing 'lowerdir' [ 672.015598][T14037] delete_channel: no stack [ 672.037911][T14020] delete_channel: no stack [ 673.247689][ T5925] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 673.961700][ T5925] usb 4-1: Using ep0 maxpacket: 32 [ 673.983082][ T5925] usb 4-1: config 254 has an invalid interface number: 217 but max is 0 [ 674.003563][ T5925] usb 4-1: config 254 has no interface number 0 [ 674.041722][ T5925] usb 4-1: config 254 interface 217 has no altsetting 0 [ 674.061821][ T5925] usb 4-1: New USB device found, idVendor=2040, idProduct=7500, bcdDevice=db.85 [ 674.088143][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.104822][ T5925] usb 4-1: Product: syz [ 674.114641][ T5925] usb 4-1: Manufacturer: syz [ 674.127025][ T5925] usb 4-1: SerialNumber: syz [ 674.508437][T14067] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2303'. [ 674.518343][T14067] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2303'. [ 674.527399][T14067] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2303'. [ 675.465764][T14086] syzkaller0: entered promiscuous mode [ 675.471428][T14086] syzkaller0: entered allmulticast mode [ 675.503228][T14086] tipc: Enabled bearer , priority 0 [ 675.513790][ T5925] pvrusb2: Hardware description: WinTV HVR-1950 Model 750xx [ 675.523533][ T5925] usb 4-1: selecting invalid altsetting 0 [ 675.532377][ T5925] usb 4-1: USB disconnect, device number 35 [ 675.536676][ T2335] usb 4-1: Direct firmware load for v4l-pvrusb2-73xxx-01.fw failed with error -2 [ 675.549644][T14085] tipc: Resetting bearer [ 675.603131][T14085] tipc: Disabling bearer [ 675.604871][ T10] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 675.620624][ T30] audit: type=1400 audit(1768322358.020:748): avc: denied { firmware_load } for pid=2335 comm="pvrusb2-context" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 675.632905][ T2335] usb 4-1: Falling back to sysfs fallback for: v4l-pvrusb2-73xxx-01.fw [ 675.710477][T14096] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2316'. [ 675.811813][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 675.855166][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 675.981403][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 675.990913][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.435646][ T10] usb 2-1: config 0 descriptor?? [ 676.443417][ T10] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 676.778012][T14107] lo speed is unknown, defaulting to 1000 [ 677.262864][ T10] gspca_vc032x: reg_r err -110 [ 677.545727][ T10] vc032x 2-1:0.0: probe with driver vc032x failed with error -110 [ 677.585126][T14113] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 677.599269][T14113] team0: Port device batadv1 added [ 677.600951][T14116] netlink: 'syz.3.2324': attribute type 1 has an invalid length. [ 677.965649][ T30] audit: type=1400 audit(1768322360.370:749): avc: denied { create } for pid=14115 comm="syz.3.2324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 678.041722][ T30] audit: type=1400 audit(1768322360.450:750): avc: denied { write } for pid=14115 comm="syz.3.2324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 678.211614][ T10] usb 2-1: USB disconnect, device number 38 [ 678.266665][T14130] loop2: detected capacity change from 0 to 7 [ 678.273336][T14130] loop2: [ 678.276301][T14130] loop2: partition table partially beyond EOD, truncated [ 678.308270][T14124] bond2: (slave gretap2): making interface the new active one [ 678.357448][T14124] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 678.381640][T14128] macvlan2: entered promiscuous mode [ 678.387150][T14128] macvlan2: entered allmulticast mode [ 678.419517][T14128] bond2: entered promiscuous mode [ 678.448958][T14128] gretap2: entered promiscuous mode [ 678.475095][T14128] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 678.512322][T14128] bond2: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 678.692252][T14128] bond2: left promiscuous mode [ 678.703752][T14128] gretap2: left promiscuous mode [ 679.391000][T14148] loop2: detected capacity change from 0 to 7 [ 679.416661][T14148] Dev loop2: unable to read RDB block 7 [ 679.553842][T14148] loop2: AHDI p2 p3 [ 679.557871][T14148] loop2: partition table partially beyond EOD, truncated [ 679.565474][T14148] loop2: p3 start 335544320 is beyond EOD, truncated [ 679.687266][T14156] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2334'. [ 679.765624][T14162] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2337'. [ 681.506815][T14196] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2344'. [ 681.528289][T14196] netlink: 'syz.3.2344': attribute type 2 has an invalid length. [ 681.576508][T14184] netlink: 'syz.2.2342': attribute type 1 has an invalid length. [ 681.595285][T14184] 8021q: adding VLAN 0 to HW filter on device bond1 [ 681.608775][T14184] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2342'. [ 681.684019][T14184] bond1: entered promiscuous mode [ 681.689109][T14184] bond1: entered allmulticast mode [ 683.186613][T14212] pim6reg: entered allmulticast mode [ 683.394446][T14218] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2349'. [ 683.945473][T14225] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2354'. [ 683.968740][T14226] loop2: detected capacity change from 0 to 7 [ 684.046449][T14226] Dev loop2: unable to read RDB block 7 [ 684.093567][T14226] loop2: AHDI p2 p3 [ 684.122287][T14226] loop2: partition table partially beyond EOD, truncated [ 684.175749][T14226] loop2: p3 start 335544320 is beyond EOD, truncated [ 684.267026][ T30] audit: type=1400 audit(1768322366.670:751): avc: denied { setopt } for pid=14228 comm="syz.0.2347" lport=49027 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 685.205127][ T5890] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 685.254796][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.261239][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.398573][ T5890] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 685.491701][ T5890] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 685.500750][ T5890] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.543437][ T5890] usb 5-1: config 0 descriptor?? [ 685.830230][T14231] syzkaller0: entered promiscuous mode [ 685.841485][T14231] syzkaller0: entered allmulticast mode [ 685.964120][ T30] audit: type=1400 audit(1768322368.210:752): avc: denied { read } for pid=14236 comm="syz.1.2357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 686.077141][ T5890] keytouch 0003:0926:3333.000A: fixing up Keytouch IEC report descriptor [ 686.095058][ T10] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 686.117668][ T5890] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.000A/input/input28 [ 686.213347][ T5890] keytouch 0003:0926:3333.000A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 686.252846][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 686.263990][ T10] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 686.306485][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 686.315652][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.334198][ T10] usb 2-1: Product: syz [ 686.344387][ T10] usb 2-1: Manufacturer: syz [ 686.360863][T14231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 686.386746][T14231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 686.392319][ T10] usb 2-1: SerialNumber: syz [ 686.544152][ T10] cdc_ncm 2-1:1.0: skipping garbage [ 686.555479][ T10] cdc_ncm 2-1:1.0: NCM or ECM functional descriptors missing [ 686.967331][ T10] cdc_ncm 2-1:1.0: bind() failure [ 687.024913][T14269] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2364'. [ 687.063169][ T10] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 687.079320][ T10] cdc_ncm 2-1:1.1: bind() failure [ 687.095906][ T5890] usb 5-1: USB disconnect, device number 48 [ 687.112573][ T10] usb 2-1: USB disconnect, device number 39 [ 688.856784][T14284] 9p: Bad value for 'wfdno' [ 688.899270][ T30] audit: type=1400 audit(1768322371.260:753): avc: denied { write } for pid=14282 comm="syz.0.2370" path="socket:[37103]" dev="sockfs" ino=37103 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 688.994298][T14289] loop2: detected capacity change from 0 to 7 [ 689.003181][ T5890] usb 2-1: new full-speed USB device number 40 using dummy_hcd [ 689.022928][T14289] Dev loop2: unable to read RDB block 7 [ 689.043058][T14289] loop2: AHDI p2 p3 [ 689.056751][T14289] loop2: partition table partially beyond EOD, truncated [ 689.156019][T14289] loop2: p3 start 335544320 is beyond EOD, truncated [ 689.343580][ T5890] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 689.351917][ T5890] usb 2-1: config 0 has no interface number 0 [ 689.358292][ T5890] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 689.367617][ T5890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 689.383573][ T5890] usb 2-1: config 0 descriptor?? [ 689.399676][ T5890] usb 2-1: selecting invalid altsetting 1 [ 689.408159][ T5890] dvb_ttusb_budget: ttusb_init_controller: error [ 689.420912][ T5890] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 689.564536][ T5890] DVB: Unable to find symbol cx22700_attach() [ 689.638081][T14300] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2374'. [ 689.647776][T14300] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2374'. [ 689.656859][T14300] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2374'. [ 690.127438][ T5890] DVB: Unable to find symbol tda10046_attach() [ 690.160223][ T5890] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 692.329599][T14334] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2384'. [ 692.610419][ T5890] usb 2-1: USB disconnect, device number 40 [ 693.052035][T14339] NFSD: Failed to start, no listeners configured. [ 695.813909][T14392] netlink: 'syz.4.2402': attribute type 39 has an invalid length. [ 696.111562][ T10] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 696.301497][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 696.308218][ T10] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 696.346648][ T10] usb 5-1: config 0 has no interface number 0 [ 696.382800][ T10] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 696.422241][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.453007][ T10] usb 5-1: Product: syz [ 696.457197][ T10] usb 5-1: Manufacturer: syz [ 696.471733][ T10] usb 5-1: SerialNumber: syz [ 696.492731][ T10] usb 5-1: config 0 descriptor?? [ 696.709513][ T10] uvcvideo 5-1:0.31: probe with driver uvcvideo failed with error -22 [ 696.779692][ T10] usb 5-1: USB disconnect, device number 49 [ 698.893363][T14429] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2411'. [ 698.902761][T14429] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2411'. [ 698.911776][T14429] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2411'. [ 699.392739][ T30] audit: type=1400 audit(1768322381.800:754): avc: denied { connect } for pid=14430 comm="syz.4.2412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 699.467530][T14430] mmap: syz.4.2412 (14430): VmData 37597184 exceed data ulimit 222. Update limits or use boot option ignore_rlimit_data. [ 702.242575][T14456] bridge0: entered promiscuous mode [ 702.248377][T14456] macvlan2: entered promiscuous mode [ 703.202976][T14471] hub 9-0:1.0: USB hub found [ 703.211550][T14471] hub 9-0:1.0: 1 port detected [ 704.596298][ T30] audit: type=1400 audit(1768322387.000:755): avc: denied { associate } for pid=14479 comm="syz.0.2426" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 705.122616][T14489] netlink: 'syz.3.2431': attribute type 4 has an invalid length. [ 706.036165][T14499] openvswitch: netlink: Missing key (keys=40, expected=80) [ 706.780223][T14508] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2437'. [ 706.789251][T14508] netlink: 'syz.3.2437': attribute type 2 has an invalid length. [ 706.813055][T14506] comedi comedi3: comedi_test: 14 microvolt, 2046 microsecond waveform attached [ 707.103515][T14506] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 707.111818][T14506] overlayfs: missing 'lowerdir' [ 707.141689][T14505] delete_channel: no stack [ 709.301593][ T5863] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 709.530972][ T5863] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 709.546196][ T5863] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 709.573363][ T5863] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 709.630631][ T5863] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 709.649062][T14549] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2449'. [ 709.660607][ T5863] usb 3-1: Product: syz [ 709.667303][ T5863] usb 3-1: Manufacturer: syz [ 709.680658][ T5863] usb 3-1: SerialNumber: syz [ 709.693849][ T5863] usb 3-1: config 0 descriptor?? [ 709.721781][T14528] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 709.728936][T14528] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 709.986710][T14525] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 709.994105][T14525] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 710.253057][T14525] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2442'. [ 711.433026][ T30] audit: type=1326 audit(1768322393.700:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14570 comm="syz.3.2455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f996438f749 code=0x7ffc0000 [ 711.674226][ T30] audit: type=1326 audit(1768322393.700:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14570 comm="syz.3.2455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7f996438f749 code=0x7ffc0000 [ 711.703291][ T30] audit: type=1326 audit(1768322393.700:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14570 comm="syz.3.2455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f996438f749 code=0x7ffc0000 [ 711.728505][ T30] audit: type=1326 audit(1768322393.710:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14570 comm="syz.3.2455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f996438f749 code=0x7ffc0000 [ 711.838487][ T30] audit: type=1326 audit(1768322393.710:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14570 comm="syz.3.2455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f996438f749 code=0x7ffc0000 [ 711.875132][ T30] audit: type=1326 audit(1768322393.710:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14570 comm="syz.3.2455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f996438f749 code=0x7ffc0000 [ 711.995542][ T30] audit: type=1326 audit(1768322393.710:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14570 comm="syz.3.2455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f996438f749 code=0x7ffc0000 [ 712.134695][ T30] audit: type=1326 audit(1768322393.720:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14570 comm="syz.3.2455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9964391667 code=0x7ffc0000 [ 712.173467][ T30] audit: type=1326 audit(1768322393.720:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14570 comm="syz.3.2455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f99643915dc code=0x7ffc0000 [ 712.464936][T14590] lo speed is unknown, defaulting to 1000 [ 712.832472][ T30] audit: type=1326 audit(1768322393.730:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14570 comm="syz.3.2455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f9964391514 code=0x7ffc0000 [ 715.012341][ T5863] Error reading MAC address [ 715.097311][T14613] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2466'. [ 715.120405][T14610] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 715.245896][T14616] netlink: 'syz.4.2470': attribute type 4 has an invalid length. [ 715.392339][T14622] loop2: detected capacity change from 0 to 7 [ 715.408568][T14622] loop2: [ 715.417615][T14622] loop2: partition table partially beyond EOD, truncated [ 717.079448][T14644] overlayfs: missing 'lowerdir' [ 717.632899][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 717.632912][ T30] audit: type=1400 audit(1768322400.040:793): avc: denied { setattr } for pid=14647 comm="syz.3.2464" name="tty4" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 717.672453][ T5980] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 717.997690][ T5980] usb 5-1: Using ep0 maxpacket: 16 [ 718.066669][ T5980] usb 5-1: config 0 has an invalid interface number: 3 but max is 0 [ 718.074964][ T5980] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 718.182747][ T5980] usb 5-1: config 0 has no interface number 0 [ 718.188870][ T5980] usb 5-1: config 0 interface 3 altsetting 142 bulk endpoint 0x5 has invalid maxpacket 32 [ 718.364900][ T5980] usb 5-1: config 0 interface 3 altsetting 142 endpoint 0xB has an invalid bInterval 36, changing to 9 [ 718.396472][ T5980] usb 5-1: config 0 interface 3 altsetting 142 has an invalid descriptor for endpoint zero, skipping [ 718.442913][T14677] NFSD: Failed to start, no listeners configured. [ 718.474010][ T5980] usb 5-1: config 0 interface 3 altsetting 142 has a duplicate endpoint with address 0xB, skipping [ 718.532988][ T5980] usb 5-1: config 0 interface 3 altsetting 142 bulk endpoint 0x6 has invalid maxpacket 8 [ 718.603065][ T5980] usb 5-1: config 0 interface 3 altsetting 142 has 7 endpoint descriptors, different from the interface descriptor's value: 11 [ 718.678006][ T5980] usb 5-1: config 0 interface 3 has no altsetting 0 [ 718.701311][ T5980] usb 5-1: string descriptor 0 read error: -22 [ 718.713222][ T5980] usb 5-1: New USB device found, idVendor=0bfd, idProduct=000b, bcdDevice=4e.46 [ 718.743410][ T5980] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 718.796826][ T5980] usb 5-1: config 0 descriptor?? [ 718.811634][T14640] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 718.843844][T14640] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 718.970328][T14656] delete_channel: no stack [ 718.980777][ T5980] kvaser_usb 5-1:0.3: error -ENODEV: Cannot get usb endpoint(s) [ 719.001559][ T30] audit: type=1400 audit(1768322401.400:794): avc: denied { setopt } for pid=14682 comm="syz.1.2490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 719.241494][ T5863] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 719.254642][ T5980] usb 5-1: USB disconnect, device number 50 [ 719.394360][ T5863] usb 2-1: unable to get BOS descriptor or descriptor too short [ 719.432659][ T5863] usb 2-1: config 64 has an invalid interface number: 110 but max is 1 [ 719.446449][ T5863] usb 2-1: config 64 has an invalid interface number: 71 but max is 1 [ 719.454787][ T5863] usb 2-1: config 64 has no interface number 0 [ 719.460991][ T5863] usb 2-1: config 64 has no interface number 1 [ 719.468024][ T5863] usb 2-1: config 64 interface 110 has no altsetting 0 [ 719.477728][ T5863] usb 2-1: New USB device found, idVendor=1199, idProduct=901f, bcdDevice=eb.98 [ 719.507145][ T5863] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.522164][ T5863] usb 2-1: Product: syz [ 719.531570][ T5863] usb 2-1: Manufacturer: syz [ 719.539810][ T5863] usb 2-1: SerialNumber: syz [ 720.359735][ T5863] usb 2-1: USB disconnect, device number 41 [ 720.495699][T14698] loop2: detected capacity change from 0 to 7 [ 720.518631][T14698] loop2: [ 720.522039][T14698] loop2: partition table partially beyond EOD, truncated [ 720.597237][T14700] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2498'. [ 720.611786][T14700] netlink: 'syz.4.2498': attribute type 2 has an invalid length. [ 721.091642][ T30] audit: type=1400 audit(1768322403.430:795): avc: denied { relabelfrom } for pid=14709 comm="syz.1.2502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 721.261841][ T30] audit: type=1400 audit(1768322403.430:796): avc: denied { relabelto } for pid=14709 comm="syz.1.2502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 721.315975][ T30] audit: type=1400 audit(1768322403.560:797): avc: denied { write } for pid=14707 comm="syz.3.2501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 721.479256][ T30] audit: type=1400 audit(1768322403.610:798): avc: denied { read } for pid=14707 comm="syz.3.2501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 723.313646][T14730] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2495'. [ 725.724393][T14740] loop2: detected capacity change from 0 to 7 [ 725.740957][T14740] Dev loop2: unable to read RDB block 7 [ 725.750810][T14740] loop2: AHDI p2 p3 [ 725.772012][T14740] loop2: partition table partially beyond EOD, truncated [ 725.791605][T14740] loop2: p3 start 335544320 is beyond EOD, truncated [ 726.201533][ T5890] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 726.387159][ T5890] usb 5-1: config 0 has an invalid interface number: 204 but max is 0 [ 726.413094][ T5890] usb 5-1: config 0 has no interface number 0 [ 726.436782][ T5890] usb 5-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=29.3d [ 726.480103][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 726.506464][ T5890] usb 5-1: Product: syz [ 726.524221][ T5890] usb 5-1: Manufacturer: syz [ 726.528889][ T5890] usb 5-1: SerialNumber: syz [ 726.545373][ T5890] usb 5-1: config 0 descriptor?? [ 726.612154][ T5890] ems_usb 5-1:0.204 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 726.642474][ T5890] ems_usb 5-1:0.204: probe with driver ems_usb failed with error -22 [ 726.872187][ T30] audit: type=1400 audit(1768322409.270:799): avc: denied { ioctl } for pid=14746 comm="syz.3.2512" path="socket:[38181]" dev="sockfs" ino=38181 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 726.975707][T14730] 0XD: renamed from macvtap0 (while UP) [ 726.984797][T14730] 0XD: entered allmulticast mode [ 726.990153][T14730] veth0_macvtap: entered allmulticast mode [ 726.997341][T14730] A link change request failed with some changes committed already. Interface 30XD may have been left with an inconsistent configuration, please check. [ 727.348390][T14742] lo speed is unknown, defaulting to 1000 [ 727.510269][ T5890] usb 5-1: USB disconnect, device number 51 [ 727.843718][T14765] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2519'. [ 727.852750][T14765] netlink: 'syz.2.2519': attribute type 2 has an invalid length. [ 727.857928][T14767] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2520'. [ 728.189577][T14772] syz.1.2521: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 728.205038][T14772] CPU: 1 UID: 0 PID: 14772 Comm: syz.1.2521 Tainted: G L syzkaller #0 PREEMPT(full) [ 728.205068][T14772] Tainted: [L]=SOFTLOCKUP [ 728.205075][T14772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 728.205085][T14772] Call Trace: [ 728.205092][T14772] [ 728.205099][T14772] dump_stack_lvl+0x16c/0x1f0 [ 728.205128][T14772] warn_alloc+0x248/0x3a0 [ 728.205150][T14772] ? __pfx_warn_alloc+0x10/0x10 [ 728.205166][T14772] ? lockdep_hardirqs_on+0x7c/0x110 [ 728.205191][T14772] ? rcu_is_watching+0x12/0xc0 [ 728.205216][T14772] ? xskq_create+0xfb/0x1d0 [ 728.205240][T14772] ? xskq_create+0xfb/0x1d0 [ 728.205258][T14772] __vmalloc_node_range_noprof+0x12c2/0x16b0 [ 728.205294][T14772] ? xskq_create+0xfb/0x1d0 [ 728.205320][T14772] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 728.205359][T14772] ? xskq_create+0xfb/0x1d0 [ 728.205378][T14772] vmalloc_user_noprof+0x9e/0xe0 [ 728.205404][T14772] ? xskq_create+0xfb/0x1d0 [ 728.205423][T14772] xskq_create+0xfb/0x1d0 [ 728.205443][T14772] xsk_setsockopt+0x932/0xc00 [ 728.205461][T14772] ? __pfx_xsk_setsockopt+0x10/0x10 [ 728.205485][T14772] ? security_socket_setsockopt+0x47/0x240 [ 728.205507][T14772] ? __sanitizer_cov_trace_pc+0x4d/0x70 [ 728.205529][T14772] ? __pfx_xsk_setsockopt+0x10/0x10 [ 728.205547][T14772] do_sock_setsockopt+0xf3/0x1d0 [ 728.205575][T14772] __sys_setsockopt+0x1a0/0x230 [ 728.205598][T14772] __x64_sys_setsockopt+0xbd/0x160 [ 728.205614][T14772] ? do_syscall_64+0x91/0xf80 [ 728.205636][T14772] ? lockdep_hardirqs_on+0x7c/0x110 [ 728.205659][T14772] do_syscall_64+0xcd/0xf80 [ 728.205684][T14772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 728.205702][T14772] RIP: 0033:0x7fe06818f749 [ 728.205716][T14772] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 728.205732][T14772] RSP: 002b:00007fe0663b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 728.205749][T14772] RAX: ffffffffffffffda RBX: 00007fe0683e6180 RCX: 00007fe06818f749 [ 728.205760][T14772] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000009 [ 728.205776][T14772] RBP: 00007fe068213f91 R08: 0000000000000004 R09: 0000000000000000 [ 728.205786][T14772] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 728.205797][T14772] R13: 00007fe0683e6218 R14: 00007fe0683e6180 R15: 00007fff98af2708 [ 728.205823][T14772] [ 728.205847][T14772] Mem-Info: [ 728.445424][T14772] active_anon:22999 inactive_anon:0 isolated_anon:0 [ 728.445424][T14772] active_file:21859 inactive_file:40869 isolated_file:0 [ 728.445424][T14772] unevictable:16189 dirty:140 writeback:0 [ 728.445424][T14772] slab_reclaimable:13107 slab_unreclaimable:100621 [ 728.445424][T14772] mapped:36006 shmem:18889 pagetables:1483 [ 728.445424][T14772] sec_pagetables:0 bounce:0 [ 728.445424][T14772] kernel_misc_reclaimable:0 [ 728.445424][T14772] free:1237650 free_pcp:38017 free_cma:0 [ 728.491188][T14772] Node 0 active_anon:91996kB inactive_anon:0kB active_file:87364kB inactive_file:163276kB unevictable:63220kB isolated(anon):0kB isolated(file):0kB mapped:144024kB dirty:560kB writeback:0kB shmem:74020kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12560kB pagetables:5804kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 728.523080][T14772] Node 1 active_anon:0kB inactive_anon:0kB active_file:72kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 728.552961][T14772] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 728.582753][T14772] lowmem_reserve[]: 0 2481 2482 2482 2482 [ 728.588478][T14772] Node 0 DMA32 free:1037804kB boost:0kB min:34092kB low:42612kB high:51132kB reserved_highatomic:0KB free_highatomic:0KB active_anon:91996kB inactive_anon:0kB active_file:87364kB inactive_file:163276kB unevictable:63220kB writepending:560kB zspages:0kB present:3129332kB managed:2540824kB mlocked:0kB bounce:0kB free_pcp:137764kB local_pcp:39792kB free_cma:0kB [ 728.621915][T14772] lowmem_reserve[]: 0 0 1 1 1 [ 728.626593][T14772] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 728.656134][T14772] lowmem_reserve[]: 0 0 0 0 0 [ 728.660814][T14772] Node 1 Normal free:3897436kB boost:0kB min:55784kB low:69728kB high:83672kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:72kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:14304kB local_pcp:7072kB free_cma:0kB [ 728.693128][T14772] lowmem_reserve[]: 0 0 0 0 0 [ 728.697802][T14772] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 728.710384][T14772] Node 0 DMA32: 827*4kB (UM) 920*8kB (UM) 1312*16kB (UM) 1155*32kB (UM) 587*64kB (UME) 216*128kB (UM) 79*256kB (UM) 58*512kB (UM) 58*1024kB (UM) 12*2048kB (ME) 188*4096kB (UM) = 1037772kB [ 728.728908][T14772] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 728.740347][T14772] Node 1 Normal: 183*4kB (UME) 46*8kB (UME) 41*16kB (UME) 174*32kB (UME) 51*64kB (UME) 14*128kB (UME) 6*256kB (UME) 3*512kB (UME) 1*1024kB (M) 1*2048kB (E) 947*4096kB (M) = 3897436kB [ 728.758460][T14772] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 728.768025][T14772] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 728.777443][T14772] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 728.787054][T14772] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 728.796316][T14772] 97036 total pagecache pages [ 728.800959][T14772] 0 pages in swap cache [ 728.805088][T14772] Free swap = 124996kB [ 728.809207][T14772] Total swap = 124996kB [ 728.813346][T14772] 2097051 pages RAM [ 728.817131][T14772] 0 pages HighMem/MovableOnly [ 728.821784][T14772] 429819 pages reserved [ 728.825903][T14772] 0 pages cma reserved [ 734.764827][T14815] NFSD: Failed to start, no listeners configured. [ 734.996134][T14820] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2538'. [ 736.862576][ T2335] pvrusb2: request_firmware fatal error with code=-110 [ 736.869427][ T2335] pvrusb2: Failure uploading firmware1 [ 736.893975][ T2335] pvrusb2: Device initialization was not successful. [ 736.924485][ T2335] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 736.946991][ T2335] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 736.986121][ T5925] pvrusb2: Device being rendered inoperable [ 737.054642][ T30] audit: type=1400 audit(1768322419.460:800): avc: denied { getopt } for pid=14837 comm="syz.1.2544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 737.992254][T14856] netlink: 'syz.1.2548': attribute type 4 has an invalid length. [ 739.225178][ T30] audit: type=1400 audit(1768322421.630:801): avc: denied { mount } for pid=14866 comm="syz.4.2551" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 739.225704][T14867] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1107 sclass=netlink_route_socket pid=14867 comm=syz.4.2551 [ 739.306399][T14872] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2552'. [ 739.316327][ T5980] IPVS: starting estimator thread 0... [ 739.346650][ T30] audit: type=1326 audit(1768322421.740:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14866 comm="syz.4.2551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f286f18f749 code=0x7ffc0000 [ 739.421820][ T30] audit: type=1326 audit(1768322421.740:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14866 comm="syz.4.2551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f286f18f749 code=0x7ffc0000 [ 739.445842][T14874] IPVS: using max 79 ests per chain, 189600 per kthread [ 739.460266][ T30] audit: type=1326 audit(1768322421.750:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14866 comm="syz.4.2551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f286f18f749 code=0x7ffc0000 [ 739.485944][ T30] audit: type=1326 audit(1768322421.750:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14866 comm="syz.4.2551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f286f18f749 code=0x7ffc0000 [ 739.512046][ T30] audit: type=1326 audit(1768322421.750:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14866 comm="syz.4.2551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f286f18f749 code=0x7ffc0000 [ 739.801615][ T5980] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 739.976527][ T5980] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 34, using maximum allowed: 30 [ 739.990785][ T5980] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 740.045706][ T5980] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 740.102161][ T5980] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 34 [ 740.123916][ T30] audit: type=1326 audit(1768322421.750:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14866 comm="syz.4.2551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f286f18f749 code=0x7ffc0000 [ 740.129137][ T5980] usb 5-1: New USB device found, idVendor=056a, idProduct=00ef, bcdDevice= 0.00 [ 740.147628][ T30] audit: type=1326 audit(1768322421.750:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14866 comm="syz.4.2551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f286f18f749 code=0x7ffc0000 [ 740.180757][ T30] audit: type=1326 audit(1768322421.750:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14866 comm="syz.4.2551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f286f18f749 code=0x7ffc0000 [ 740.217683][ T5980] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 740.251232][ T5980] usb 5-1: config 0 descriptor?? [ 740.543810][T14897] Failed to get privilege flags for destination (handle=0x0:0x0) [ 741.070023][ T5980] wacom 0003:056A:00EF.000B: unknown main item tag 0x0 [ 741.077476][ T5980] wacom 0003:056A:00EF.000B: unknown main item tag 0x0 [ 741.084617][ T5980] wacom 0003:056A:00EF.000B: unknown main item tag 0x0 [ 741.095645][ T5980] wacom 0003:056A:00EF.000B: unknown main item tag 0x0 [ 741.130904][ T5980] wacom 0003:056A:00EF.000B: unknown main item tag 0x0 [ 741.158187][ T5980] wacom 0003:056A:00EF.000B: unknown main item tag 0x0 [ 741.241855][ T5980] wacom 0003:056A:00EF.000B: unknown main item tag 0x0 [ 741.258478][ T5980] wacom 0003:056A:00EF.000B: unknown main item tag 0x0 [ 741.269221][ T5980] wacom 0003:056A:00EF.000B: unknown main item tag 0x0 [ 741.277205][ T5980] wacom 0003:056A:00EF.000B: unknown main item tag 0x0 [ 741.297812][ T5980] usb 5-1: USB disconnect, device number 52 [ 741.421728][ T5925] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 741.482358][T14915] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2566'. [ 741.611533][ T5980] usb 5-1: new full-speed USB device number 53 using dummy_hcd [ 741.623075][ T5925] usb 2-1: Using ep0 maxpacket: 8 [ 741.637623][ T5925] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 741.674405][ T5925] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 741.729740][ T5925] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 741.754012][ T5925] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 741.773420][ T5980] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 741.781948][ T5980] usb 5-1: config 0 has no interface number 0 [ 741.797853][ T5980] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 741.811345][ T5925] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 741.816782][ T5980] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.833881][ T5925] usb 2-1: Product: Ќ [ 741.838023][ T5925] usb 2-1: Manufacturer: 곦馐⿚㫈ᶟ⃲Ẓꪥ쨀ᷨ羳ἅ뺝〟꡼Ѽ墦髚싢黫 [ 741.870379][ T5980] usb 5-1: config 0 descriptor?? [ 741.886166][ T5980] usb 5-1: selecting invalid altsetting 1 [ 741.898438][ T5980] dvb_ttusb_budget: ttusb_init_controller: error [ 741.899469][ T5925] usb 2-1: SerialNumber:   [ 741.912244][ T5980] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 741.989852][ T5980] DVB: Unable to find symbol cx22700_attach() [ 742.046197][ T5980] DVB: Unable to find symbol tda10046_attach() [ 742.061376][ T5980] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 742.179498][ T5925] cdc_ncm 2-1:1.0: bind() failure [ 742.216126][ T5925] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 742.237883][ T5925] cdc_ncm 2-1:1.1: bind() failure [ 742.454334][ T5925] usb 2-1: USB disconnect, device number 42 [ 743.599642][T14942] netlink: 'syz.2.2572': attribute type 4 has an invalid length. [ 743.900777][T14954] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2576'. [ 745.186745][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 745.195403][ T30] audit: type=1400 audit(1768322427.130:816): avc: denied { lock } for pid=14962 comm="syz.2.2580" path="socket:[39241]" dev="sockfs" ino=39241 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 745.398184][T14973] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2582'. [ 745.667547][ T30] audit: type=1400 audit(1768322428.070:817): avc: denied { bind } for pid=14971 comm="syz.3.2582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 745.737817][ T5890] usb 5-1: USB disconnect, device number 53 [ 746.010685][T14989] openvswitch: netlink: IP tunnel dst address not specified [ 746.031872][T14989] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2585'. [ 746.117054][ T30] audit: type=1400 audit(1768322428.520:818): avc: denied { read } for pid=14980 comm="syz.2.2584" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 746.264304][ T30] audit: type=1400 audit(1768322428.520:819): avc: denied { open } for pid=14980 comm="syz.2.2584" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 746.360171][T14990] NFSD: Failed to start, no listeners configured. [ 746.744705][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.767077][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 749.662131][T15031] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2595'. [ 749.671512][T15031] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2595'. [ 749.680467][T15031] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2595'. [ 750.375195][ T30] audit: type=1400 audit(1768322432.780:820): avc: denied { write } for pid=15039 comm="syz.1.2600" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 750.514362][T15044] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2601'. [ 751.201344][T15058] loop2: detected capacity change from 0 to 7 [ 751.252110][ T5816] loop2: [ 751.255090][ T5816] loop2: partition table partially beyond EOD, truncated [ 751.293787][T15058] loop2: [ 751.296755][T15058] loop2: partition table partially beyond EOD, truncated [ 751.355287][T15061] FAULT_INJECTION: forcing a failure. [ 751.355287][T15061] name failslab, interval 1, probability 0, space 0, times 0 [ 751.371603][T15061] CPU: 1 UID: 0 PID: 15061 Comm: syz.3.2607 Tainted: G L syzkaller #0 PREEMPT(full) [ 751.371630][T15061] Tainted: [L]=SOFTLOCKUP [ 751.371635][T15061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 751.371645][T15061] Call Trace: [ 751.371650][T15061] [ 751.371657][T15061] dump_stack_lvl+0x16c/0x1f0 [ 751.371683][T15061] should_fail_ex+0x512/0x640 [ 751.371707][T15061] ? fs_reclaim_acquire+0xae/0x150 [ 751.371733][T15061] should_failslab+0xc2/0x120 [ 751.371755][T15061] __kmalloc_noprof+0xeb/0x910 [ 751.371781][T15061] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 751.371814][T15061] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 751.371836][T15061] tomoyo_realpath_from_path+0xc2/0x6e0 [ 751.371862][T15061] ? tomoyo_profile+0x47/0x60 [ 751.371890][T15061] tomoyo_path_number_perm+0x245/0x580 [ 751.371909][T15061] ? tomoyo_path_number_perm+0x237/0x580 [ 751.371936][T15061] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 751.371958][T15061] ? find_held_lock+0x2b/0x80 [ 751.372008][T15061] ? find_held_lock+0x2b/0x80 [ 751.372031][T15061] ? hook_file_ioctl_common+0x144/0x410 [ 751.372063][T15061] ? __fget_files+0x20e/0x3c0 [ 751.372090][T15061] security_file_ioctl+0x9b/0x240 [ 751.372114][T15061] __x64_sys_ioctl+0xb7/0x210 [ 751.372135][T15061] do_syscall_64+0xcd/0xf80 [ 751.372157][T15061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 751.372173][T15061] RIP: 0033:0x7f996438f749 [ 751.372186][T15061] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 751.372201][T15061] RSP: 002b:00007f9965237038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 751.372217][T15061] RAX: ffffffffffffffda RBX: 00007f99645e5fa0 RCX: 00007f996438f749 [ 751.372227][T15061] RDX: 0000200000000200 RSI: 00000000c04064aa RDI: 0000000000000003 [ 751.372237][T15061] RBP: 00007f9965237090 R08: 0000000000000000 R09: 0000000000000000 [ 751.372246][T15061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 751.372255][T15061] R13: 00007f99645e6038 R14: 00007f99645e5fa0 R15: 00007ffc2ffd0008 [ 751.372281][T15061] [ 751.372333][T15061] ERROR: Out of memory at tomoyo_realpath_from_path. [ 751.461961][ T30] audit: type=1400 audit(1768322433.870:821): avc: denied { open } for pid=15059 comm="syz.2.2606" path="/dev/ptyq8" dev="devtmpfs" ino=127 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 753.032984][ T30] audit: type=1400 audit(1768322435.440:822): avc: denied { ioctl } for pid=15087 comm="syz.2.2615" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 754.204379][T15103] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2619'. [ 754.213610][T15103] netlink: 'syz.2.2619': attribute type 2 has an invalid length. [ 754.403665][ T30] audit: type=1400 audit(1768322436.810:823): avc: denied { setopt } for pid=15106 comm="syz.4.2621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 861.131397][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 861.138371][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P6004/1:b..l P5814/1:b..l [ 861.147883][ C1] rcu: (detected by 1, t=10502 jiffies, g=55517, q=549 ncpus=2) [ 861.155591][ C1] task:syz-executor state:R running task stack:22792 pid:5814 tgid:5814 ppid:5807 task_flags:0x400140 flags:0x00080000 [ 861.170087][ C1] Call Trace: [ 861.173364][ C1] [ 861.176289][ C1] ? __schedule+0x10b9/0x6150 [ 861.180962][ C1] __schedule+0x1139/0x6150 [ 861.185471][ C1] ? lock_acquire+0x179/0x330 [ 861.190147][ C1] ? __pfx___schedule+0x10/0x10 [ 861.194996][ C1] ? mark_held_locks+0x49/0x80 [ 861.199755][ C1] preempt_schedule_irq+0x51/0x90 [ 861.204776][ C1] irqentry_exit+0x1d8/0x8c0 [ 861.209367][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 861.215341][ C1] RIP: 0010:debug_lockdep_rcu_enabled+0xa/0x40 [ 861.221493][ C1] Code: eb b6 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 8b 05 56 77 10 05 <85> c0 74 20 8b 05 00 a7 10 05 85 c0 74 16 65 48 8b 05 98 68 3a 08 [ 861.241097][ C1] RSP: 0018:ffffc90002f27330 EFLAGS: 00000283 [ 861.247158][ C1] RAX: 0000000000000002 RBX: ffffc90002f27d90 RCX: ffffc90002f28001 [ 861.255116][ C1] RDX: ffffc90002f27d98 RSI: ffffc90002f27d60 RDI: ffffc90002f273b8 [ 861.263058][ C1] RBP: 0000000000000001 R08: 0000000000000001 R09: 00000000df546d7e [ 861.270998][ C1] R10: 0000000000000002 R11: 0000000000014490 R12: ffffc90002f273f8 [ 861.278947][ C1] R13: ffffc90002f273a8 R14: ffffc90002f27d90 R15: ffffc90002f273dc [ 861.286894][ C1] unwind_next_frame+0x3de/0x20b0 [ 861.291893][ C1] ? evict+0x3c2/0xad0 [ 861.295931][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 861.302054][ C1] arch_stack_walk+0x94/0x100 [ 861.306703][ C1] ? iput.part.0+0x621/0x1190 [ 861.311348][ C1] stack_trace_save+0x8e/0xc0 [ 861.315995][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 861.321334][ C1] ? __lock_acquire+0x436/0x2890 [ 861.326250][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 861.331418][ C1] save_stack+0x160/0x1f0 [ 861.335716][ C1] ? __pfx_save_stack+0x10/0x10 [ 861.340533][ C1] ? free_unref_folios+0xa22/0x1610 [ 861.345696][ C1] ? folios_put_refs+0x4be/0x750 [ 861.350600][ C1] ? shmem_undo_range+0x58f/0x1140 [ 861.355677][ C1] ? shmem_evict_inode+0x39e/0xbe0 [ 861.360753][ C1] ? evict+0x3c2/0xad0 [ 861.364792][ C1] ? page_ext_put+0x3e/0xd0 [ 861.369266][ C1] __reset_page_owner+0x84/0x1a0 [ 861.374175][ C1] free_unref_folios+0xa22/0x1610 [ 861.379169][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 861.384945][ C1] folios_put_refs+0x4be/0x750 [ 861.389678][ C1] ? __pfx_folios_put_refs+0x10/0x10 [ 861.394943][ C1] ? folio_batch_remove_exceptionals+0x115/0x1a0 [ 861.401243][ C1] shmem_undo_range+0x58f/0x1140 [ 861.406151][ C1] ? __pfx_shmem_undo_range+0x10/0x10 [ 861.411499][ C1] ? arch_stack_walk+0xa6/0x100 [ 861.416328][ C1] ? kasan_save_stack+0x33/0x60 [ 861.421147][ C1] ? kasan_record_aux_stack+0xa7/0xc0 [ 861.426486][ C1] ? __call_rcu_common.constprop.0+0xa5/0xa10 [ 861.432523][ C1] ? dentry_free+0xc2/0x160 [ 861.436997][ C1] ? __dentry_kill+0x498/0x600 [ 861.441726][ C1] ? finish_dput+0x76/0x480 [ 861.446197][ C1] ? dput+0x1f/0x30 [ 861.449973][ C1] shmem_evict_inode+0x39e/0xbe0 [ 861.454878][ C1] ? inode_wait_for_writeback+0x170/0x390 [ 861.460569][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 861.465992][ C1] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 861.472030][ C1] ? find_held_lock+0x2b/0x80 [ 861.476677][ C1] ? evict+0x37e/0xad0 [ 861.480713][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 861.486139][ C1] evict+0x3c2/0xad0 [ 861.490005][ C1] ? __pfx_evict+0x10/0x10 [ 861.494390][ C1] ? iput.part.0+0x619/0x1190 [ 861.499035][ C1] iput.part.0+0x621/0x1190 [ 861.503510][ C1] iput+0x35/0x40 [ 861.507120][ C1] do_unlinkat+0x3d2/0x660 [ 861.511510][ C1] ? __pfx_do_unlinkat+0x10/0x10 [ 861.516425][ C1] ? getname_flags.part.0+0x1c5/0x550 [ 861.521766][ C1] __x64_sys_unlink+0xc5/0x110 [ 861.526500][ C1] do_syscall_64+0xcd/0xf80 [ 861.530976][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 861.536837][ C1] RIP: 0033:0x7fe06818ecf7 [ 861.541216][ C1] RSP: 002b:00007fff98af1998 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 861.549599][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe06818ecf7 [ 861.557537][ C1] RDX: 00007fff98af19c0 RSI: 00007fff98af1a50 RDI: 00007fff98af1a50 [ 861.565475][ C1] RBP: 00007fff98af1a50 R08: 0000000000000000 R09: 0000000000000000 [ 861.573420][ C1] R10: 0000000000000100 R11: 0000000000000206 R12: 00007fff98af2ae0 [ 861.581358][ C1] R13: 00007fe068213d7d R14: 00000000000b7be7 R15: 00007fff98af2b20 [ 861.589303][ C1] [ 861.592292][ C1] task:kworker/u8:18 state:R running task stack:24088 pid:6004 tgid:6004 ppid:2 task_flags:0x4208160 flags:0x00080000 [ 861.605816][ C1] Workqueue: iou_exit io_ring_exit_work [ 861.611335][ C1] Call Trace: [ 861.614585][ C1] [ 861.617488][ C1] ? __schedule+0x10b9/0x6150 [ 861.622132][ C1] __schedule+0x1139/0x6150 [ 861.626613][ C1] ? __pfx___schedule+0x10/0x10 [ 861.631434][ C1] ? mark_held_locks+0x49/0x80 [ 861.636168][ C1] preempt_schedule_irq+0x51/0x90 [ 861.641164][ C1] irqentry_exit+0x1d8/0x8c0 [ 861.645723][ C1] ? rcu_is_watching+0x12/0xc0 [ 861.650455][ C1] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 861.655881][ C1] RIP: 0010:lock_acquire+0x62/0x330 [ 861.661048][ C1] Code: b4 18 12 83 f8 07 0f 87 a2 02 00 00 89 c0 48 0f a3 05 e2 c1 ee 0e 0f 82 74 02 00 00 8b 35 7a f2 ee 0e 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 f9 b3 18 12 0f 85 ad 02 00 00 48 83 c4 [ 861.680623][ C1] RSP: 0018:ffffc900048bf500 EFLAGS: 00000206 [ 861.686656][ C1] RAX: 0000000000000046 RBX: ffffffff8e3c96a0 RCX: 00000000307c2bd5 [ 861.694597][ C1] RDX: 0000000000000000 RSI: ffffffff8daa8a1d RDI: ffffffff8bf2b400 [ 861.702534][ C1] RBP: 0000000000000002 R08: 0000000019dcea74 R09: 00000000419dcea7 [ 861.710473][ C1] R10: 0000000000000002 R11: ffff88803627aff0 R12: 0000000000000000 [ 861.718414][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 861.726374][ C1] ? unwind_next_frame+0x3f4/0x20b0 [ 861.731543][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 861.737676][ C1] unwind_next_frame+0xd1/0x20b0 [ 861.742585][ C1] ? unwind_next_frame+0xbd/0x20b0 [ 861.747666][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 861.752577][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 861.758701][ C1] arch_stack_walk+0x94/0x100 [ 861.763351][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 861.768261][ C1] stack_trace_save+0x8e/0xc0 [ 861.772905][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 861.778245][ C1] ? kasan_save_stack+0x42/0x60 [ 861.783065][ C1] ? kasan_save_stack+0x33/0x60 [ 861.787882][ C1] kasan_save_stack+0x33/0x60 [ 861.792526][ C1] ? kasan_save_stack+0x33/0x60 [ 861.797345][ C1] ? kasan_record_aux_stack+0xa7/0xc0 [ 861.802683][ C1] ? kmem_cache_free+0x15e/0x770 [ 861.807585][ C1] ? __io_req_caches_free+0x19e/0x5c0 [ 861.812926][ C1] ? io_ring_exit_work+0x33c/0x1170 [ 861.818095][ C1] ? process_one_work+0x9ba/0x1b20 [ 861.823184][ C1] ? worker_thread+0x6c8/0xf10 [ 861.827915][ C1] ? kthread+0x3c5/0x780 [ 861.832127][ C1] ? ret_from_fork+0x983/0xb10 [ 861.836857][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 861.841782][ C1] kasan_record_aux_stack+0xa7/0xc0 [ 861.846947][ C1] kmem_cache_free+0x15e/0x770 [ 861.851678][ C1] ? __io_req_caches_free+0x19e/0x5c0 [ 861.857024][ C1] ? __io_req_caches_free+0x19e/0x5c0 [ 861.862372][ C1] __io_req_caches_free+0x19e/0x5c0 [ 861.867543][ C1] io_ring_exit_work+0x33c/0x1170 [ 861.872543][ C1] ? __pfx_io_ring_exit_work+0x10/0x10 [ 861.877974][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 861.883144][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 861.888931][ C1] ? debug_object_deactivate+0x1ec/0x3a0 [ 861.894537][ C1] ? rcu_is_watching+0x12/0xc0 [ 861.899268][ C1] process_one_work+0x9ba/0x1b20 [ 861.904180][ C1] ? __pfx_process_one_work+0x10/0x10 [ 861.909524][ C1] ? assign_work+0x1a0/0x250 [ 861.914095][ C1] worker_thread+0x6c8/0xf10 [ 861.918662][ C1] ? __pfx_worker_thread+0x10/0x10 [ 861.923744][ C1] kthread+0x3c5/0x780 [ 861.927781][ C1] ? __pfx_kthread+0x10/0x10 [ 861.932340][ C1] ? rcu_is_watching+0x12/0xc0 [ 861.937071][ C1] ? __pfx_kthread+0x10/0x10 [ 861.941629][ C1] ret_from_fork+0x983/0xb10 [ 861.946189][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 861.951269][ C1] ? rcu_is_watching+0x12/0xc0 [ 861.956001][ C1] ? __switch_to+0x7af/0x10d0 [ 861.960647][ C1] ? __pfx_kthread+0x10/0x10 [ 861.965205][ C1] ret_from_fork_asm+0x1a/0x30 [ 861.969950][ C1] [ 861.972944][ C1] rcu: rcu_preempt kthread starved for 10512 jiffies! g55517 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 861.984116][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 861.994062][ C1] rcu: RCU grace-period kthread stack dump: [ 861.999925][ C1] task:rcu_preempt state:R running task stack:28488 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 862.013366][ C1] Call Trace: [ 862.016621][ C1] [ 862.019529][ C1] ? __schedule+0x10b9/0x6150 [ 862.024179][ C1] __schedule+0x1139/0x6150 [ 862.028662][ C1] ? __pfx___schedule+0x10/0x10 [ 862.033483][ C1] ? find_held_lock+0x2b/0x80 [ 862.038135][ C1] ? schedule+0x2d7/0x3a0 [ 862.042435][ C1] schedule+0xe7/0x3a0 [ 862.046485][ C1] schedule_timeout+0x123/0x290 [ 862.051303][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 862.056645][ C1] ? __pfx_process_timeout+0x10/0x10 [ 862.061902][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 862.067677][ C1] ? prepare_to_swait_event+0xf5/0x480 [ 862.073106][ C1] rcu_gp_fqs_loop+0x1ea/0xaf0 [ 862.077853][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 862.083109][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 862.088279][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 862.093186][ C1] ? rcu_gp_cleanup+0x7c1/0xe90 [ 862.098008][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 862.103785][ C1] rcu_gp_kthread+0x26d/0x380 [ 862.108434][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 862.113600][ C1] ? rcu_is_watching+0x12/0xc0 [ 862.118332][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 862.123500][ C1] ? __kthread_parkme+0x19e/0x250 [ 862.128492][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 862.133659][ C1] kthread+0x3c5/0x780 [ 862.137698][ C1] ? __pfx_kthread+0x10/0x10 [ 862.142259][ C1] ? rcu_is_watching+0x12/0xc0 [ 862.146994][ C1] ? __pfx_kthread+0x10/0x10 [ 862.151557][ C1] ret_from_fork+0x983/0xb10 [ 862.156118][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 862.161199][ C1] ? __switch_to+0x7af/0x10d0 [ 862.165846][ C1] ? __pfx_kthread+0x10/0x10 [ 862.170407][ C1] ret_from_fork_asm+0x1a/0x30 [ 862.175161][ C1] [ 862.178149][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 862.184438][ C1] Sending NMI from CPU 1 to CPUs 0: [ 862.189619][ C0] NMI backtrace for cpu 0 [ 862.189630][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 862.189647][ C0] Tainted: [L]=SOFTLOCKUP [ 862.189651][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 862.189658][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 862.189675][ C0] Code: 96 5f 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 09 12 00 fb f4 cc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 862.189687][ C0] RSP: 0018:ffffffff8e007df8 EFLAGS: 000002c6 [ 862.189697][ C0] RAX: 0000000003956b0b RBX: 0000000000000000 RCX: ffffffff8b7856d9 [ 862.189705][ C0] RDX: 0000000000000000 RSI: ffffffff8daceab2 RDI: ffffffff8bf2b400 [ 862.189713][ C0] RBP: fffffbfff1c12f68 R08: 0000000000000001 R09: ffffed101708673d [ 862.189721][ C0] R10: ffff8880b84339eb R11: ffffffff8e098670 R12: 0000000000000000 [ 862.189729][ C0] R13: ffffffff8e097b40 R14: ffffffff9088bdd0 R15: 0000000000000000 [ 862.189736][ C0] FS: 0000000000000000(0000) GS:ffff8881248f5000(0000) knlGS:0000000000000000 [ 862.189749][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 862.189757][ C0] CR2: 00002000000003c0 CR3: 0000000079113000 CR4: 00000000003526f0 [ 862.189765][ C0] Call Trace: [ 862.189769][ C0] [ 862.189772][ C0] default_idle+0x13/0x20 [ 862.189789][ C0] default_idle_call+0x6c/0xb0 [ 862.189805][ C0] do_idle+0x38d/0x510 [ 862.189822][ C0] ? __pfx_do_idle+0x10/0x10 [ 862.189840][ C0] ? do_idle+0x13/0x510 [ 862.189857][ C0] cpu_startup_entry+0x4f/0x60 [ 862.189874][ C0] rest_init+0x16b/0x2b0 [ 862.189884][ C0] ? acpi_subsystem_init+0x133/0x180 [ 862.189898][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 862.189911][ C0] start_kernel+0x3ef/0x4d0 [ 862.189923][ C0] x86_64_start_reservations+0x18/0x30 [ 862.189935][ C0] x86_64_start_kernel+0x130/0x190 [ 862.189947][ C0] common_startup_64+0x13e/0x148 [ 862.189966][ C0] [ 862.924267][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 862.930584][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 SYZFAIL: failed to send rpc fd=3 want=256 sent=0 n=-1 (errno 32: Broken pipe) [ 863.082876][ T5813] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 863.101757][ T5813] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 863.109707][ T5813] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 863.117620][ T5813] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 863.125276][ T5813] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 863.849069][T15130] lo speed is unknown, defaulting to 1000 [ 864.124080][T15130] chnl_net:caif_netlink_parms(): no params data found [ 864.167055][T15130] bridge0: port 1(bridge_slave_0) entered blocking state [ 864.174392][T15130] bridge0: port 1(bridge_slave_0) entered disabled state [ 864.181852][T15130] bridge_slave_0: entered allmulticast mode [ 864.188438][T15130] bridge_slave_0: entered promiscuous mode [ 864.195969][T15130] bridge0: port 2(bridge_slave_1) entered blocking state [ 864.203090][T15130] bridge0: port 2(bridge_slave_1) entered disabled state [ 864.210164][T15130] bridge_slave_1: entered allmulticast mode [ 864.217825][T15130] bridge_slave_1: entered promiscuous mode [ 864.238551][T15130] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 864.249129][T15130] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 864.270847][T15130] team0: Port device team_slave_0 added [ 864.278496][T15130] team0: Port device team_slave_1 added [ 864.295922][T15130] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 864.302943][T15130] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 864.328986][T15130] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 864.340582][T15130] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 864.348134][T15130] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 864.374068][T15130] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 864.402825][T15130] hsr_slave_0: entered promiscuous mode [ 864.408973][T15130] hsr_slave_1: entered promiscuous mode [ 864.415044][T15130] debugfs: 'hsr0' already exists in 'hsr' [ 864.420742][T15130] Cannot create hsr debugfs directory [ 864.508241][T15130] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 864.517152][T15130] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 864.526034][T15130] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 864.535468][T15130] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 864.555321][T15130] bridge0: port 2(bridge_slave_1) entered blocking state [ 864.562383][T15130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 864.569645][T15130] bridge0: port 1(bridge_slave_0) entered blocking state [ 864.576737][T15130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 864.613759][T15130] 8021q: adding VLAN 0 to HW filter on device bond0 [ 864.628365][T13456] bridge0: port 1(bridge_slave_0) entered disabled state [ 864.636492][T13456] bridge0: port 2(bridge_slave_1) entered disabled state [ 864.648318][T15130] 8021q: adding VLAN 0 to HW filter on device team0 [ 864.661650][ T4044] bridge0: port 1(bridge_slave_0) entered blocking state [ 864.668704][ T4044] bridge0: port 1(bridge_slave_0) entered forwarding state [ 864.680718][ T6004] bridge0: port 2(bridge_slave_1) entered blocking state [ 864.687777][ T6004] bridge0: port 2(bridge_slave_1) entered forwarding state [ 864.799512][T15130] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 864.928242][T15130] veth0_vlan: entered promiscuous mode [ 864.937085][T15130] veth1_vlan: entered promiscuous mode [ 864.958123][T15130] veth0_macvtap: entered promiscuous mode [ 864.966333][T15130] veth1_macvtap: entered promiscuous mode [ 864.978713][T15130] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 864.990451][T15130] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 865.003121][ T6004] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 865.013394][ T6004] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 865.022827][ T6004] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 865.033153][ T6004] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 865.331559][T13681] Bluetooth: hci5: command tx timeout [ 865.421621][ T849] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 865.428206][ T849] Bluetooth: hci5: Error when powering off device on rfkill (-110) [ 865.526464][T13215] bridge0: port 3(syz_tun) entered disabled state [ 865.539631][T13215] syz_tun (unregistering): left allmulticast mode [ 865.547803][T13215] syz_tun (unregistering): left promiscuous mode [ 865.554497][T13215] bridge0: port 3(syz_tun) entered disabled state [ 865.586284][ T4044] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 865.630146][ T4044] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 865.753894][ T6009] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 865.785742][ T3452] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 865.802105][ T3452] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 865.821530][ T30] audit: type=1400 audit(1768322548.220:824): avc: denied { mounton } for pid=15130 comm="syz-executor" path="/root/syzkaller.1iEMYI/syz-tmp" dev="sda1" ino=2033 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 865.888334][T15132] usb 3-1: USB disconnect, device number 31 [ 865.894777][ T30] audit: type=1400 audit(1768322548.220:825): avc: denied { mounton } for pid=15130 comm="syz-executor" path="/root/syzkaller.1iEMYI/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 865.940190][ T6009] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 865.941161][ T30] audit: type=1400 audit(1768322548.220:826): avc: denied { mounton } for pid=15130 comm="syz-executor" path="/root/syzkaller.1iEMYI/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=40340 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 865.991898][ T30] audit: type=1400 audit(1768322548.250:827): avc: denied { mounton } for pid=15130 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 866.046225][ T6009] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 866.118851][ T6009] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 866.203999][ T6009] bridge_slave_1: left allmulticast mode [ 866.209925][ T6009] bridge_slave_1: left promiscuous mode [ 866.217726][ T6009] bridge0: port 2(bridge_slave_1) entered disabled state [ 866.227097][ T6009] bridge_slave_0: left allmulticast mode [ 866.232813][ T6009] bridge_slave_0: left promiscuous mode [ 866.238446][ T6009] bridge0: port 1(bridge_slave_0) entered disabled state [ 866.574538][ T6009] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 866.585369][ T6009] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 866.595261][ T6009] bond0 (unregistering): (slave team0): Releasing backup interface [ 866.604285][ T6009] bond0 (unregistering): Released all slaves [ 866.656737][ T6009] tipc: Disabling bearer [ 866.662980][ T6009] tipc: Left network mode [ 866.851355][ T6009] hsr_slave_0: left promiscuous mode [ 866.857724][ T6009] hsr_slave_1: left promiscuous mode [ 866.863933][ T6009] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 866.871295][ T6009] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 866.879888][ T6009] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 866.887358][ T6009] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 866.904347][ T6009] veth1_macvtap: left promiscuous mode [ 866.910100][ T6009] veth0_macvtap: left allmulticast mode [ 866.916538][ T6009] veth0_macvtap: left promiscuous mode [ 866.959806][ T6009] team0 (unregistering): Port device batadv1 removed [ 867.120317][ T6009] team0 (unregistering): Port device team_slave_1 removed [ 867.152843][ T6009] team0 (unregistering): Port device team_slave_0 removed [ 867.718954][ T6009] IPVS: stop unused estimator thread 0... [ 867.818347][ T6009] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 868.594261][ T6009] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 868.652166][ T6009] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 868.695044][ T6009] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 868.811088][ T6009] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 868.822234][ T6009] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 868.889900][ T6009] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 868.900202][ T6009] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.012618][ T6009] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 869.023667][ T6009] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.084077][ T6009] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 869.094605][ T6009] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.190160][ T6009] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 869.200710][ T6009] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.253757][ T6009] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 869.264087][ T6009] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.313439][ T6009] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 869.323783][ T6009] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.384373][ T6009] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 869.395895][ T6009] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.501325][ T6009] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.574917][ T6009] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.585104][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.592021][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 869.679520][ T6009] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.735076][ T6009] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 870.091324][ T6009] bridge_slave_1: left allmulticast mode [ 870.097179][ T6009] bridge_slave_1: left promiscuous mode [ 870.103948][ T6009] bridge0: port 2(bridge_slave_1) entered disabled state [ 870.114176][ T6009] bridge_slave_0: left allmulticast mode [ 870.119818][ T6009] bridge_slave_0: left promiscuous mode [ 870.125809][ T6009] bridge0: port 1(bridge_slave_0) entered disabled state [ 870.138387][ T6009] bridge_slave_1: left allmulticast mode [ 870.144100][ T6009] bridge_slave_1: left promiscuous mode [ 870.149691][ T6009] bridge0: port 2(bridge_slave_1) entered disabled state [ 870.160240][ T6009] bridge_slave_0: left allmulticast mode [ 870.165892][ T6009] bridge_slave_0: left promiscuous mode [ 870.171821][ T6009] bridge0: port 1(bridge_slave_0) entered disabled state [ 870.182510][ T6009] bridge_slave_1: left allmulticast mode [ 870.188125][ T6009] bridge_slave_1: left promiscuous mode [ 870.194844][ T6009] bridge0: port 2(bridge_slave_1) entered disabled state [ 870.203466][ T6009] bridge_slave_0: left allmulticast mode [ 870.209078][ T6009] bridge_slave_0: left promiscuous mode [ 870.215499][ T6009] bridge0: port 1(bridge_slave_0) entered disabled state [ 870.512240][ T6009] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 870.522415][ T6009] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 870.532782][ T6009] bond0 (unregistering): Released all slaves [ 870.829158][ T6009] bond0 (unregistering): Released all slaves [ 870.898045][ T6009] bond1 (unregistering): Released all slaves