last executing test programs: 14.326016331s ago: executing program 0 (id=1408): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) sendmmsg$inet(r0, &(0x7f0000000800), 0x2, 0xc044) socket(0x11, 0x2, 0x10001) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'team0\x00', &(0x7f0000000080)=@ethtool_sfeatures={0x3b, 0x2, [{0x3f1, 0x6}, {0x10007, 0x30000080}]}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB="6a100000000000008fce0bdd3e"], &(0x7f0000000140)='GPL\x00', 0x5, 0xff5, &(0x7f0000001840)=""/4085, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x4a}, 0x94) write$binfmt_misc(r0, &(0x7f0000000300), 0x5b0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x701200, 0x0) r2 = fsopen(&(0x7f0000000080)='sysfs\x00', 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000100)={@hyper}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r3, 0x7af, &(0x7f0000000080)={@my=0x0, 0x1}) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000080)=0xb0000) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r5, 0x7af, &(0x7f0000000040)={@hyper, 0x2}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r6 = socket(0x1, 0x5, 0x0) getsockopt(r6, 0x1, 0x48, 0x0, &(0x7f00000007c0)=0x1c) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000000)={@my=0x0}) close_range(r2, r5, 0x2) r7 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r9 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r9, 0xc0106407, &(0x7f0000000000)={0x1, 0x0, 0x1, 0x2000000}) ioctl$KVM_SET_CPUID2(r8, 0x4008ae90, &(0x7f00000002c0)=ANY=[@ANYBLOB="01000000000000000d0000000000000001000000fdffffff008000400000a230cff80000ff0300"/52]) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r8}, './file0\x00'}) 14.146166874s ago: executing program 0 (id=1410): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20004000) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x1, 0x401, 0x0, 0x92, 0x55, 0x8, 0x7, 0x8}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) getrusage(0x1, &(0x7f0000000100)={{}, {0x0}}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x8000000000000000, 0x0, 0x41a2, 0x5, 0x1, 0xfffffffffffffffb, 0x2, 0x2, 0x3, 0x1, 0x6, 0x9, 0xed, 0xfffffffffffff801, 0x53, 0x1], 0x0, 0x210011}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000480)={0x2c, 0x0, &(0x7f00000004c0)=[@dead_binder_done, @free_buffer, @acquire_done], 0x0, 0x0, 0x0}) sendmsg$key(0xffffffffffffffff, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="02050902070000000000000000000000030006fca54bacff3af3c0be088a5ec4fafbd500000000000200000002000100ffffff7db00000000000000084980339fe40a126bc7f74e7401529b562e965233da7e59842ea5dd77811f29bf5ff1549368240c62d241de6b9a79e5c06529667c789877e3155745d39e74566c50c1b4ab09d826ee15f35a331c4ea33e258620d87a4077f9aea34a2d59214bc9fda56eb1da3439d0000000000000005a1ebfe36e2104b2dd9508a937e0118ee04bb27"], 0x38}}, 0x84) r5 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r5, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r5, &(0x7f0000000000)=""/42, 0x2a, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000180)="48b3c3e4f5655f", 0x7}], 0x1) r6 = socket$inet6(0x10, 0x3, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/address_bits', 0x0, 0x0) r8 = socket$inet(0xa, 0x801, 0x84) listen(r8, 0xfffffe00) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x4, &(0x7f0000000980)=ANY=[@ANYRESDEC=r2, @ANYRES32=r6, @ANYBLOB="ecec27b266f0b49a8cc20b1b5155ddc64759dc517e9357c7e456f4da9a566edb2c35d8694e60eb8c39a369eb4091e995bfc027238b1141f8a335c489a5760c14f4ff7bb8c8823f253efd0b4c4bbec0752b1565ba0d3168f7e365762804af80153a719deab3f66292d0b86091347cce2140887bbdbc5671055b7603", @ANYRES32, @ANYRESHEX=r4, @ANYRESDEC=r5], 0x0, 0x5, 0x0, 0x0, 0x41100, 0x9}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond_slave_1\x00'}) r9 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r9, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001200b7a325bd7000fddbdf25200f07074a264e22030000002f00000001ffffffc300000006000000000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="de00fbffa611195cc93f034708000000080003"], 0x54}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) openat$cgroup_ro(r7, &(0x7f0000000580)='memory.stat\x00', 0x0, 0x0) sendto$inet6(r6, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 13.688377129s ago: executing program 2 (id=1413): bind$packet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0xc0686611, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0xff08, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x82}, 0x20040044) r3 = socket(0x10, 0x80002, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_GROUP={0x8, 0x1b, 0x3}]}, 0x40}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) sendmsg$nl_route_sched(r4, 0x0, 0x40040) sendmsg$nl_route(r3, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@dellink={0x20, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, 0x1480, 0x2104}}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) r6 = io_uring_setup(0x160f, &(0x7f00000012c0)={0x0, 0x9e40, 0x800, 0x7}) io_uring_register$IORING_REGISTER_BUFFERS2(r6, 0xf, &(0x7f0000001580)={0x3, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/168, 0xa8}, {0x0}, {&(0x7f0000000280)=""/4086, 0xff6}], &(0x7f0000001540)=[0x2, 0x0, 0x4]}, 0x20) 12.125403675s ago: executing program 0 (id=1417): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) close(r0) 12.045961279s ago: executing program 0 (id=1418): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000002140)=""/4096, 0x1000}], 0x1, 0x141, 0x0) 11.923719843s ago: executing program 0 (id=1420): syz_open_dev$midi(&(0x7f0000000000), 0x2, 0x20000) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xd, 0x400009, 0x8, 0xa}, 0x0) syz_open_dev$media(0x0, 0x0, 0x101d01) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x2) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x802) ioctl$EVIOCGKEYCODE_V2(r6, 0x80284504, &(0x7f0000000040)=""/185) 9.36282553s ago: executing program 2 (id=1425): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r0, 0x0, 0xffdd) syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/fib_triestat\x00') r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f00000001c0), &(0x7f0000000240)=0x4) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r5, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @multicast1}}, 0xa, 0x0, 0xdd5, 0x7ff, 0x38fa8b00d923ddd5}, 0x9c) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000240)=@userptr={0x3ff, 0xb, 0x4, 0x70000, 0x6, {0x77359400}, {0x3, 0x0, 0x7, 0x4, 0x88, 0xd, '9\bC2'}, 0x10, 0x2, {&(0x7f0000000100)}, 0xa, 0x0, r3}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008800800030001"], 0x48}}, 0x0) sendmmsg$inet(r6, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x1b, [0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYRESOCT=r3], 0x48) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r8, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r8, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) 7.782712986s ago: executing program 1 (id=1433): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x501043) syz_open_dev$video(&(0x7f0000000000), 0x7ff, 0x40400) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) execve(0x0, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8080, 0x40) openat$dsp1(0xffffffffffffff9c, 0x0, 0x400080, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f00000009c0)={0xf, {"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", 0x1009}}, 0x1006) syz_emit_ethernet(0x3e, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaa59e0abe22112e7e5addee3ab6de7ecefaaaaaaaaaaaaaaaa2786dd603000bb00082b00fc020000000000000000000001000000fe8000000000000000de0b00000000aa00009a030000089078"], 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001040)={0x0, 0x0, 0x0}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'hsr0\x00', 0x0}) bind$packet(r4, &(0x7f0000000000)={0x11, 0x3, r5, 0x1, 0x0, 0x6, @local}, 0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x141220, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x40890}, 0x24008004) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000040)={r5, 0x1, 0x6, @local}, 0x10) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xc}, {0xfff3, 0x8}}}, 0x24}}, 0x20040000) 5.695310138s ago: executing program 2 (id=1443): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = syz_io_uring_setup(0xbda, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x8000002, 0x1c0}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r5}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) 4.592349542s ago: executing program 2 (id=1444): socket$inet_udplite(0x2, 0x2, 0x88) socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb48, 0x1, 0x9, 0x0, 0x3}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000005dc0)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001d40)="d8750288189987d0fabb09b2", 0xc}, {&(0x7f0000000040)="d7eca96a4596a9bc882d17c60e5ad0cf2b", 0x11}], 0x2, &(0x7f0000001800)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0) recvmmsg(r3, &(0x7f0000009580)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/21, 0x15}], 0x1}, 0x8}], 0x1, 0x10000, 0x0) sendmsg$nl_route_sched_retired(r3, 0x0, 0x40) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0x7c81, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESDEC=0x0]) socket$inet(0x2, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000002c0), 0x0, 0xfffffffffffffffd) keyctl$read(0xb, r4, &(0x7f0000000240)=""/112, 0x349b7f55) r5 = socket$nl_generic(0x10, 0x3, 0x10) msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000280)=""/254) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002740)=ANY=[@ANYBLOB="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"], 0x112c}}, 0x84) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) 3.967189274s ago: executing program 4 (id=1446): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0x10, 0x80000, 0x3) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r2, 0xc040565e, &(0x7f00000000c0)={0x5, 0x0, 0x0, {0xffff, 0x3, 0xb0c, 0x8}}) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmsg$TIPC_NL_BEARER_DISABLE(r4, 0x0, 0x4044015) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000000), 0x4) writev(r2, 0x0, 0x0) 3.751107896s ago: executing program 1 (id=1447): ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000000)=[0x0], 0x1, 0x80000}) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0xa, 0x3, 0x3a) r2 = socket$netlink(0x10, 0x3, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) r3 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000540)='.log\x00', 0x1c10c1, 0x9c37611dc13d0db7) fchown(r3, 0x0, 0xee01) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) r5 = socket(0x15, 0x5, 0x0) getsockopt(r5, 0x200000000114, 0x271f, &(0x7f0000000580)=""/102389, 0x0) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000240)={0x4, 0x0, 0x0, r4}, 0xc) write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 2.846220985s ago: executing program 3 (id=1448): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ioctl$I2C_PEC(0xffffffffffffffff, 0x708, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_CONN_TIMEOUT(r2, 0x10f, 0x82, &(0x7f0000000500), &(0x7f0000000fc0)=0xfffffe6b) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000000040)={0x1ff, 0x7d4, {0x0}, {0xee00}, 0x1, 0x4}) sched_setattr(r3, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffe, 0x0, 0xfffffffc}, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000001a80)=""/102400, 0x19000}, {0x0}], 0x2, 0x0, 0x0) renameat(r4, &(0x7f0000000180)='./file0\x00', 0xffffffffffffff9c, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3a, 0x0, 0x0) syz_emit_ethernet(0x6a, 0x0, 0x0) r5 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x97) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'dummy0\x00'}) write$tun(0xffffffffffffffff, &(0x7f00000006c0)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x2, 0x0, 0x16, 0xdd}, @ipv4=@gre={{0xe, 0x4, 0x2, 0x3, 0x1e1, 0x66, 0x0, 0x9, 0x2f, 0x0, @private=0xa010102, @remote, {[@timestamp_addr={0x44, 0x4, 0x58, 0x1, 0xf}, @timestamp={0x44, 0x20, 0x81, 0x0, 0x1, [0x7f, 0x9, 0xd, 0x447d00a1, 0xb29, 0x7c, 0x100]}]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x5b, 0x2, [0xa], "70c6473b36facf71448d0b85a39865dcdc8369f9946d0f93eecb003871cd5e5e9dfd718cee0028e0c0ca0424cd87ac6eb77d8f414a08ba997e412ffc45337d69430560b467a13839af9c6367c9f6d6ec7c9ce74fa60258d2e9fa0e"}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800, [0x1, 0x100], "ae9c2ee5fe6226c6138d52080100c5fbb5f08cfbbd5e690b949d7991c881462716ceb031e7b482e54797a1b907a802f0c61fb7ead961096545a9eb0c42"}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [0x0, 0x1], "6725656d5370442328d1aac1c610b0fa1489a36dbb61d9156cdca5d38c3cbf8751783ebc7678dbf7dde5cb7a61a281a7bdf7c250cb0ae89541b7a6f9df25c512d72abca23e188833759ba80c3148a463c0355d9af7bc444fd5666131"}, {0x8, 0x88be, 0x0, {{0xb, 0x1, 0xf, 0x0, 0x0, 0x0, 0x0, 0xeb}, 0x1, {0x1}}}, {0x8, 0x22eb, 0x0, {{0x1, 0x2, 0xfc, 0x0, 0x1, 0x3, 0x6, 0x5}, 0x2, {0x6, 0x4, 0x2, 0x2, 0x1, 0x1}}}, {0x8, 0x6558, 0x0, "602ddfca0fb4c952ae49f49a0ef6c180d4ddd96690a305533da7b6c247922f3f4930ba208c49f7105a77d126e1b25d432cde7534ad84582c3c27aea1b8c111bf85ccf9e5a11ef5d5df7f63413d01ffaa8d83b0072cc041ab4fde446b48229f22680ac3de8b8f96"}}}}, 0x1ef) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000005, 0x20000000ec071, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5903963197640ec6}, 0x20004800) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) 1.959241075s ago: executing program 4 (id=1449): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a6c000000060a010400000000000000000a0003ff400004803c0001800b00010065787468647200002c00028008000640000000010800074000000014050002008300"], 0x94}, 0x1, 0x0, 0x0, 0x4000015}, 0x24000000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "fc7771", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x3, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x56, &(0x7f00000002c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x20, 0x6, 0x7e, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x8, 0xa}]}}}}}}}}, 0x0) 1.766581687s ago: executing program 4 (id=1450): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000000280)=[{{&(0x7f0000003e80)={0xa, 0x4e22, 0x5, @mcast1}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e22, 0x8, @mcast2, 0x70fd}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@pktinfo={{0x20, 0x29, 0x32, {@private0={0xfc, 0x0, '\x00', 0x1}}}}], 0x20}}], 0x2, 0x4008810) 1.634077446s ago: executing program 2 (id=1451): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}, @NFT_MSG_DELCHAIN={0x14, 0x5, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}}], {0x14}}, 0x78}}, 0x0) 1.575505779s ago: executing program 4 (id=1452): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x0) read$qrtrtun(r0, 0x0, 0x0) r1 = socket(0x2a, 0x2, 0x5) sendto(r1, 0x0, 0x0, 0x0, &(0x7f0000000040)=@qipcrtr, 0x80) dup2(r0, r1) 1.544775857s ago: executing program 3 (id=1453): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newlink={0x20, 0x10, 0x403, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r2, 0xff7f}}, 0x20}}, 0x0) socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) 1.467202397s ago: executing program 1 (id=1454): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r0, &(0x7f0000003dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001440)=""/78, 0x4e}, 0x2}], 0x1, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 1.405782387s ago: executing program 0 (id=1455): syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0xb}, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) listxattr(&(0x7f0000000480)='./file0\x00', &(0x7f0000000540)=""/211, 0xd3) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r4 = fcntl$dupfd(r2, 0x406, r2) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000240)={0x1, 0xffff0fff, 0x1, r4, 0x1}) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f00000001c0)={0x0, 0x0}) prlimit64(r5, 0xe, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x5c, 0x18, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HOOK={0x30, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x28, 0x1, 'wg2\x00'}, {0x14, 0x1, 'pimreg0\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000440), 0x80800) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000002, 0x42032, 0xffffffffffffffff, 0x80000000) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r7, 0x0, 0x0) 1.405395206s ago: executing program 4 (id=1456): r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f00000003c0)={0x9a}, 0x8) sendmmsg$inet6(r0, &(0x7f0000000280)=[{{&(0x7f0000003e80)={0xa, 0x4e22, 0x5, @mcast1}, 0x1c, 0x0}}], 0x1, 0x4008810) 1.327090409s ago: executing program 2 (id=1457): r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0xb, @sliced}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000600), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000180)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, r2, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000009800)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000015000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000093160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffff3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f400000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fff30000000000007f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff0000000000000000000000000000002000", 0x2000, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101000, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f00000016c0), 0x3af4701e) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) read$FUSE(r5, &(0x7f0000001700)={0x2020}, 0x2020) r6 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'gre0\x00'}) bind$packet(r6, 0x0, 0x0) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x3c0, 0x43) sendfile(r6, r5, 0x0, 0x80004700) syz_fuse_handle_req(r1, &(0x7f0000004140)="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", 0x2000, &(0x7f0000000b00)={&(0x7f0000000380)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x4800206, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fdatasync(r3) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 1.307562707s ago: executing program 4 (id=1458): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x2203, &(0x7f0000000040)) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000080)={@multicast2, @multicast2, 0x0, "b18c89f8ec85752dace37a71e337f670bfac54f9a317850eaa73a3eb92f19456", 0x8, 0x8, 0x8, 0x1ff}, 0x3c) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, &(0x7f0000000140)) r2 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x7079, 0x0, 0x3, 0x1e5}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r6, 0x0, 0x0}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 1.29408118s ago: executing program 1 (id=1459): connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000180)=0x6, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvmsg(r0, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000002100)={@local, @random="fad1e048716e", @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp_addr={0x44, 0x4, 0xc3, 0x1, 0x8}]}}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0xa1, 0x0, @void}}}}}}}, 0x0) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000100}, 0x8000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000500), 0x106}}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000a80)=ANY=[], 0x1d0}, 0x1, 0x0, 0x0, 0x20000890}, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f00000000c0)={0x323, @time={0x0, 0x6}, 0x0, {}, 0x1, 0x0, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5393, &(0x7f0000000000)) 1.099233685s ago: executing program 3 (id=1460): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc73}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7fffffff, 0x5, 0x2], 0xeeee8000, 0x9344}) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000380)={0x60000, 0x0, [0x0, 0x6, 0x7fffffffffffffff, 0x9, 0x101, 0x3ff, 0x2, 0xb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 831.510701ms ago: executing program 3 (id=1461): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a6c000000060a010400000000000000000a0003ff400004803c0001800b00010065787468647200002c00028008000640000000010800074000000014050002008300"], 0x94}, 0x1, 0x0, 0x0, 0x4000015}, 0x24000000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "fc7771", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x3, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x56, &(0x7f00000002c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x20, 0x6, 0x7e, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x8, 0xa}]}}}}}}}}, 0x0) 827.617883ms ago: executing program 1 (id=1462): r0 = socket$inet6(0xa, 0x3, 0x26) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev={0xac, 0x14, 0x14, 0x15}, @in6=@private1, 0x4e20, 0x0, 0x4e22, 0x0, 0xa}, {0x9, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x24}, {0x0, 0x4}, 0x0, 0x0, 0x1, 0x0, 0x5, 0x3}, {{@in=@empty, 0x800, 0x33}, 0xa, @in=@private=0xa010102, 0x0, 0x0, 0x0, 0x4, 0xfffffffc, 0x4, 0x401}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 587.193476ms ago: executing program 3 (id=1463): socket$packet(0x11, 0xa, 0x300) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}}, 0x0) write$tun(r0, &(0x7f0000000240)=ANY=[], 0xbe) 431.109653ms ago: executing program 1 (id=1464): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000040)=""/74, 0x4a) writev(r1, &(0x7f0000000480)=[{&(0x7f00000003c0)="31b69e65", 0x4}, {0x0}], 0x2) 0s ago: executing program 3 (id=1465): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r3 = socket$inet6(0xa, 0x3, 0x26) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev={0xac, 0x14, 0x14, 0x15}, @in6=@private1, 0x4e20, 0x0, 0x4e22, 0x0, 0xa}, {0x9, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x24}, {0x0, 0x4}, 0x0, 0x0, 0x1, 0x0, 0x5, 0x3}, {{@in=@empty, 0x800, 0x33}, 0xa, @in=@private=0xa010102, 0x0, 0x0, 0x0, 0x4, 0xfffffffc, 0x4, 0x401}}, 0xe8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x3c, r5, 0x301, 0x800000, 0x25dfdbfb, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x40006) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r6, 0x6, 0xd, &(0x7f0000000000), 0x4) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000200), 0x20200, 0x0) lseek(0xffffffffffffffff, 0x24, 0x0) lseek(0xffffffffffffffff, 0x7fff, 0x0) preadv(r7, &(0x7f00000002c0)=[{&(0x7f0000000280)=""/37, 0x25}, {0x0}], 0x2, 0x3d5df652, 0x1) kernel console output (not intermixed with test programs): sconnect, device number 12 [ 346.925330][ T9] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 346.965930][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 346.988983][ T9] usb 2-1: SerialNumber: syz [ 349.173108][ T9432] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 350.287113][ T9] usb 2-1: 0:2 : does not exist [ 350.394567][ T9] usb 2-1: USB disconnect, device number 18 [ 350.717969][ T7806] udevd[7806]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 350.758478][ T9460] netlink: 12 bytes leftover after parsing attributes in process `syz.2.880'. [ 350.771144][ T30] audit: type=1400 audit(1756440824.884:404): avc: denied { bind } for pid=9459 comm="syz.2.880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 350.799893][ T30] audit: type=1400 audit(1756440824.884:405): avc: denied { node_bind } for pid=9459 comm="syz.2.880" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 350.949098][ T5934] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 351.567505][ T5934] usb 5-1: config 0 has an invalid interface number: 128 but max is 0 [ 351.630835][ T5934] usb 5-1: config 0 has no interface number 0 [ 351.651440][ T5934] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 351.651529][ T9472] FAULT_INJECTION: forcing a failure. [ 351.651529][ T9472] name failslab, interval 1, probability 0, space 0, times 0 [ 351.685825][ T5934] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.703972][ T9472] CPU: 1 UID: 0 PID: 9472 Comm: syz.1.884 Not tainted syzkaller #0 PREEMPT(full) [ 351.703997][ T9472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 351.704007][ T9472] Call Trace: [ 351.704013][ T9472] [ 351.704019][ T9472] dump_stack_lvl+0x16c/0x1f0 [ 351.704038][ T9472] should_fail_ex+0x512/0x640 [ 351.704051][ T9472] ? fs_reclaim_acquire+0xae/0x150 [ 351.704067][ T9472] ? tomoyo_encode2+0x100/0x3e0 [ 351.704082][ T9472] should_failslab+0xc2/0x120 [ 351.704096][ T9472] __kmalloc_noprof+0xd2/0x510 [ 351.704112][ T9472] tomoyo_encode2+0x100/0x3e0 [ 351.704130][ T9472] tomoyo_encode+0x29/0x50 [ 351.704145][ T9472] tomoyo_realpath_from_path+0x18f/0x6e0 [ 351.704163][ T9472] ? tomoyo_profile+0x47/0x60 [ 351.704175][ T9472] tomoyo_path_number_perm+0x245/0x580 [ 351.704189][ T9472] ? tomoyo_path_number_perm+0x237/0x580 [ 351.704204][ T9472] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 351.704219][ T9472] ? find_held_lock+0x2b/0x80 [ 351.704246][ T9472] ? find_held_lock+0x2b/0x80 [ 351.704259][ T9472] ? hook_file_ioctl_common+0x145/0x410 [ 351.704273][ T9472] ? __fget_files+0x20e/0x3c0 [ 351.704289][ T9472] security_file_ioctl+0x9b/0x240 [ 351.704306][ T9472] __x64_sys_ioctl+0xb7/0x210 [ 351.704325][ T9472] do_syscall_64+0xcd/0x4c0 [ 351.704338][ T9472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.704350][ T9472] RIP: 0033:0x7f389d38ebe9 [ 351.704360][ T9472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 351.704371][ T9472] RSP: 002b:00007f389e137038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 351.704386][ T9472] RAX: ffffffffffffffda RBX: 00007f389d5b5fa0 RCX: 00007f389d38ebe9 [ 351.704400][ T9472] RDX: 00002000000001c0 RSI: 000000004008ae89 RDI: 0000000000000005 [ 351.704410][ T9472] RBP: 00007f389e137090 R08: 0000000000000000 R09: 0000000000000000 [ 351.704419][ T9472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 351.704427][ T9472] R13: 00007f389d5b6038 R14: 00007f389d5b5fa0 R15: 00007ffcc51ea278 [ 351.704452][ T9472] [ 351.705088][ T9472] ERROR: Out of memory at tomoyo_realpath_from_path. [ 351.859381][ C1] vkms_vblank_simulate: vblank timer overrun [ 352.016954][ T5934] usb 5-1: Product: syz [ 352.028478][ T5934] usb 5-1: Manufacturer: syz [ 352.037485][ T5934] usb 5-1: SerialNumber: syz [ 352.047894][ T5934] usb 5-1: config 0 descriptor?? [ 353.749562][ T5934] usb 5-1: Firmware version (0.0) predates our first public release. [ 353.821434][ T5934] usb 5-1: Please update to version 0.2 or newer [ 353.844926][ T9496] netlink: 180 bytes leftover after parsing attributes in process `syz.2.889'. [ 353.937031][ T5934] usb 5-1: USB disconnect, device number 11 [ 354.322320][ T9509] RDS: rds_bind could not find a transport for fe88::3, load rds_tcp or rds_rdma? [ 354.435202][ T841] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 354.999193][ T841] usb 4-1: Using ep0 maxpacket: 32 [ 355.028597][ T841] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 355.169922][ T841] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 355.413616][ T841] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 355.437368][ T841] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 355.461140][ T841] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 355.504986][ T841] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 355.542130][ T30] audit: type=1400 audit(1756440829.644:406): avc: denied { map } for pid=9521 comm="syz.1.899" path="pipe:[21467]" dev="pipefs" ino=21467 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 355.571648][ T9522] Bluetooth: hci4: Opcode 0x0401 failed: -22 [ 355.588218][ T841] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.636610][ T841] usb 4-1: Product: syz [ 355.636634][ T841] usb 4-1: Manufacturer: syz [ 355.636649][ T841] usb 4-1: SerialNumber: syz [ 355.644909][ T841] usb 4-1: config 0 descriptor?? [ 355.705537][ T30] audit: type=1400 audit(1756440829.774:407): avc: denied { connect } for pid=9523 comm="syz.2.898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 355.873028][ T841] input input11: Device does not respond to id packet M [ 355.914909][ T841] input input11: Device does not respond to id packet P [ 356.118727][ T841] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 356.136988][ T841] input input11: Device does not respond to id packet B [ 356.170959][ T841] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 356.192351][ T841] input input11: Device does not respond to id packet N [ 356.228174][ T841] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 356.262081][ T841] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 356.289516][ T841] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 356.330363][ T841] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 356.373864][ T841] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input11 [ 356.461300][ T841] usb 4-1: USB disconnect, device number 17 [ 356.597647][ T9535] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3 sclass=netlink_route_socket pid=9535 comm=syz.4.902 [ 356.648090][ T30] audit: type=1400 audit(1756440830.754:408): avc: denied { ioctl } for pid=9534 comm="syz.4.902" path="socket:[22432]" dev="sockfs" ino=22432 ioctlcmd=0x9365 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 356.720257][ T30] audit: type=1400 audit(1756440830.754:409): avc: denied { accept } for pid=9534 comm="syz.4.902" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 356.787968][ T9545] FAULT_INJECTION: forcing a failure. [ 356.787968][ T9545] name failslab, interval 1, probability 0, space 0, times 0 [ 356.803267][ T9545] CPU: 1 UID: 0 PID: 9545 Comm: syz.0.905 Not tainted syzkaller #0 PREEMPT(full) [ 356.803292][ T9545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 356.803303][ T9545] Call Trace: [ 356.803308][ T9545] [ 356.803315][ T9545] dump_stack_lvl+0x16c/0x1f0 [ 356.803339][ T9545] should_fail_ex+0x512/0x640 [ 356.803358][ T9545] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 356.803379][ T9545] should_failslab+0xc2/0x120 [ 356.803397][ T9545] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 356.803415][ T9545] ? __alloc_skb+0x2b2/0x380 [ 356.803437][ T9545] __alloc_skb+0x2b2/0x380 [ 356.803452][ T9545] ? __pfx___alloc_skb+0x10/0x10 [ 356.803471][ T9545] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 356.803494][ T9545] netlink_alloc_large_skb+0x69/0x130 [ 356.803515][ T9545] netlink_sendmsg+0x6a1/0xdd0 [ 356.803538][ T9545] ? __pfx_netlink_sendmsg+0x10/0x10 [ 356.803566][ T9545] ____sys_sendmsg+0xa98/0xc70 [ 356.803590][ T9545] ? copy_msghdr_from_user+0x10a/0x160 [ 356.803608][ T9545] ? __pfx_____sys_sendmsg+0x10/0x10 [ 356.803649][ T9545] ___sys_sendmsg+0x134/0x1d0 [ 356.803668][ T9545] ? __pfx____sys_sendmsg+0x10/0x10 [ 356.803715][ T9545] __sys_sendmsg+0x16d/0x220 [ 356.803734][ T9545] ? __pfx___sys_sendmsg+0x10/0x10 [ 356.803767][ T9545] do_syscall_64+0xcd/0x4c0 [ 356.803788][ T9545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.803806][ T9545] RIP: 0033:0x7efc3ef8ebe9 [ 356.803820][ T9545] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 356.803835][ T9545] RSP: 002b:00007efc3fe0b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 356.803853][ T9545] RAX: ffffffffffffffda RBX: 00007efc3f1b5fa0 RCX: 00007efc3ef8ebe9 [ 356.803863][ T9545] RDX: 0000000000050040 RSI: 0000200000000280 RDI: 0000000000000003 [ 356.803874][ T9545] RBP: 00007efc3fe0b090 R08: 0000000000000000 R09: 0000000000000000 [ 356.803882][ T9545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 356.803892][ T9545] R13: 00007efc3f1b6038 R14: 00007efc3f1b5fa0 R15: 00007ffe9c0694e8 [ 356.803915][ T9545] [ 357.015478][ C1] vkms_vblank_simulate: vblank timer overrun [ 357.641369][ T5855] Bluetooth: hci4: command tx timeout [ 357.688624][ T30] audit: type=1400 audit(1756441087.787:410): avc: denied { getopt } for pid=9553 comm="syz.0.909" lport=43755 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 358.082844][ T9561] fuse: Unknown parameter 'user_id00000000000000000000' [ 359.058512][ T5968] Process accounting resumed [ 359.093597][ T30] audit: type=1400 audit(1756441089.198:411): avc: denied { read } for pid=9569 comm="syz.2.913" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 359.167919][ T841] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 359.180131][ T9571] netlink: 8 bytes leftover after parsing attributes in process `syz.2.913'. [ 359.227713][ T9571] netlink: 12 bytes leftover after parsing attributes in process `syz.2.913'. [ 359.363057][ T841] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 359.392535][ T841] usb 2-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 359.422270][ T841] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.508220][ T841] usb 2-1: config 0 descriptor?? [ 359.567570][ T6293] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 359.581780][ T6293] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 359.607581][ T6293] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 359.637722][ T30] audit: type=1400 audit(1756441089.198:412): avc: denied { open } for pid=9569 comm="syz.2.913" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 359.661072][ C1] vkms_vblank_simulate: vblank timer overrun [ 359.669502][ T5936] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 359.686886][ T6293] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 359.711973][ T30] audit: type=1400 audit(1756441089.198:413): avc: denied { ioctl } for pid=9569 comm="syz.2.913" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 359.766096][ T9564] Process accounting resumed [ 359.867029][ T30] audit: type=1400 audit(1756441089.978:414): avc: denied { read } for pid=9574 comm="syz.4.914" path="socket:[22483]" dev="sockfs" ino=22483 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 359.890082][ C1] vkms_vblank_simulate: vblank timer overrun [ 359.956123][ T9568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.965442][ T9568] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.997101][ T841] usbhid 2-1:0.0: can't add hid device: -71 [ 360.005829][ T841] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 360.137637][ T841] usb 2-1: USB disconnect, device number 19 [ 360.147325][ T5934] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 360.735527][ T5936] usb 4-1: device descriptor read/all, error -71 [ 360.772795][ T5934] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 360.805310][ T5934] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.827425][ T5934] usb 5-1: config 0 descriptor?? [ 360.846278][ T5934] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 361.061184][ T9602] RDS: rds_bind could not find a transport for fe88::2, load rds_tcp or rds_rdma? [ 361.834081][ T9576] netlink: 'syz.4.914': attribute type 1 has an invalid length. [ 361.892546][ T9576] netlink: 144 bytes leftover after parsing attributes in process `syz.4.914'. [ 361.985698][ T9610] misc userio: Begin command sent, but we're already running [ 362.032739][ T9576] netlink: 'syz.4.914': attribute type 2 has an invalid length. [ 362.076289][ T9576] netlink: 64 bytes leftover after parsing attributes in process `syz.4.914'. [ 362.159731][ T9616] fuse: Bad value for 'fd' [ 362.474370][ T5913] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 362.504338][ T5968] Process accounting resumed [ 362.609345][ T9618] Process accounting resumed [ 362.628155][ T5913] usb 1-1: unable to get BOS descriptor or descriptor too short [ 362.637036][ T5913] usb 1-1: config 2 has an invalid interface number: 253 but max is 1 [ 362.645234][ T5913] usb 1-1: config 2 has an invalid interface number: 94 but max is 1 [ 362.657627][ T5913] usb 1-1: config 2 has no interface number 0 [ 362.663756][ T5913] usb 1-1: config 2 has no interface number 1 [ 362.676067][ T5913] usb 1-1: config 2 interface 253 has no altsetting 0 [ 362.745288][ T5934] usb 5-1: USB disconnect, device number 12 [ 362.761330][ T5913] usb 1-1: config 2 interface 94 has no altsetting 0 [ 362.904837][ T5913] usb 1-1: New USB device found, idVendor=0813, idProduct=0002, bcdDevice=ac.bf [ 362.929634][ T5913] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.096082][ T5913] usb 1-1: Product: syz [ 363.100343][ T5913] usb 1-1: Manufacturer: syz [ 363.104991][ T5913] usb 1-1: SerialNumber: syz [ 363.231742][ T30] audit: type=1400 audit(1756441093.350:415): avc: denied { ioctl } for pid=9629 comm="syz.1.928" path="socket:[23583]" dev="sockfs" ino=23583 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 363.602396][ T5936] libceph: connect (1)[c::]:6789 error -101 [ 363.621636][ T5936] libceph: mon0 (1)[c::]:6789 connect error [ 363.697487][ T9638] ceph: No mds server is up or the cluster is laggy [ 363.734375][ T30] audit: type=1400 audit(1756441093.840:416): avc: denied { getopt } for pid=9637 comm="syz.3.932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 363.807823][ T30] audit: type=1400 audit(1756441093.840:417): avc: denied { write } for pid=9637 comm="syz.3.932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 363.887700][ T5968] libceph: connect (1)[c::]:6789 error -101 [ 363.894021][ T5968] libceph: mon0 (1)[c::]:6789 connect error [ 365.803101][ T5913] usb 1-1: USB disconnect, device number 18 [ 366.149416][ T841] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 366.392383][ T841] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 366.409180][ T841] usb 2-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 366.431122][ T841] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.456943][ T841] usb 2-1: config 0 descriptor?? [ 366.581743][ T9686] GUP no longer grows the stack in syz.2.935 (9686): 200000004000-20000000a000 (200000002000) [ 366.593043][ T9686] CPU: 1 UID: 0 PID: 9686 Comm: syz.2.935 Not tainted syzkaller #0 PREEMPT(full) [ 366.593060][ T9686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 366.593068][ T9686] Call Trace: [ 366.593072][ T9686] [ 366.593076][ T9686] dump_stack_lvl+0x16c/0x1f0 [ 366.593094][ T9686] gup_vma_lookup+0x1d2/0x220 [ 366.593110][ T9686] __get_user_pages+0x243/0x34a0 [ 366.593130][ T9686] ? find_held_lock+0x2b/0x80 [ 366.593145][ T9686] ? __pfx___get_user_pages+0x10/0x10 [ 366.593168][ T9686] get_user_pages_remote+0x243/0xab0 [ 366.593183][ T9686] ? mas_parent_gap+0x6f0/0x7b0 [ 366.593196][ T9686] ? __pfx_get_user_pages_remote+0x10/0x10 [ 366.593214][ T9686] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 366.593237][ T9686] __access_remote_vm+0x24d/0x850 [ 366.593257][ T9686] ? do_raw_spin_lock+0x12c/0x2b0 [ 366.593272][ T9686] ? __pfx___access_remote_vm+0x10/0x10 [ 366.593298][ T9686] proc_pid_cmdline_read+0x4de/0x8e0 [ 366.593320][ T9686] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 366.593343][ T9686] ? rw_verify_area+0xcf/0x6c0 [ 366.593365][ T9686] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 366.593377][ T9686] vfs_readv+0x5be/0x8b0 [ 366.593390][ T9686] ? __pfx_vfs_readv+0x10/0x10 [ 366.593401][ T9686] ? kmem_cache_free+0x2d1/0x4d0 [ 366.593419][ T9686] ? __fget_files+0x20e/0x3c0 [ 366.593435][ T9686] ? do_preadv+0x1a6/0x270 [ 366.593444][ T9686] do_preadv+0x1a6/0x270 [ 366.593454][ T9686] ? __pfx_do_preadv+0x10/0x10 [ 366.593467][ T9686] do_syscall_64+0xcd/0x4c0 [ 366.593481][ T9686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.593494][ T9686] RIP: 0033:0x7f84ac78ebe9 [ 366.593504][ T9686] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 366.593515][ T9686] RSP: 002b:00007f84ad546038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 366.593526][ T9686] RAX: ffffffffffffffda RBX: 00007f84ac9b6180 RCX: 00007f84ac78ebe9 [ 366.593533][ T9686] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000009 [ 366.593540][ T9686] RBP: 00007f84ac811e19 R08: 0000000000000000 R09: 0000000000000000 [ 366.593546][ T9686] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 366.593552][ T9686] R13: 00007f84ac9b6218 R14: 00007f84ac9b6180 R15: 00007ffd6c4e3b48 [ 366.593567][ T9686] [ 367.066326][ T841] logitech-djreceiver 0003:046D:C71F.0006: hidraw0: USB HID v0.00 Device [HID 046d:c71f] on usb-dummy_hcd.1-1/input0 [ 367.254236][ T9672] IPVS: set_ctl: invalid protocol: 46 0.0.0.0:20000 [ 367.273379][ T841] usb 2-1: USB disconnect, device number 20 [ 367.989775][ T9683] comedi comedi2: dt2801: I/O port conflict (0x4f27,2) [ 368.084970][ T30] audit: type=1400 audit(1756441098.183:418): avc: denied { mount } for pid=9697 comm="syz.2.943" name="/" dev="autofs" ino=22725 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 368.290181][ T9706] FAULT_INJECTION: forcing a failure. [ 368.290181][ T9706] name failslab, interval 1, probability 0, space 0, times 0 [ 368.305401][ T9706] CPU: 0 UID: 0 PID: 9706 Comm: syz.4.946 Not tainted syzkaller #0 PREEMPT(full) [ 368.305420][ T9706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 368.305427][ T9706] Call Trace: [ 368.305430][ T9706] [ 368.305435][ T9706] dump_stack_lvl+0x16c/0x1f0 [ 368.305458][ T9706] should_fail_ex+0x512/0x640 [ 368.305472][ T9706] ? fs_reclaim_acquire+0xae/0x150 [ 368.305488][ T9706] ? tomoyo_encode2+0x100/0x3e0 [ 368.305504][ T9706] should_failslab+0xc2/0x120 [ 368.305518][ T9706] __kmalloc_noprof+0xd2/0x510 [ 368.305529][ T9706] ? d_absolute_path+0x136/0x1a0 [ 368.305548][ T9706] tomoyo_encode2+0x100/0x3e0 [ 368.305566][ T9706] tomoyo_encode+0x29/0x50 [ 368.305581][ T9706] tomoyo_realpath_from_path+0x18f/0x6e0 [ 368.305602][ T9706] tomoyo_path_number_perm+0x245/0x580 [ 368.305616][ T9706] ? tomoyo_path_number_perm+0x237/0x580 [ 368.305631][ T9706] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 368.305646][ T9706] ? find_held_lock+0x2b/0x80 [ 368.305672][ T9706] ? find_held_lock+0x2b/0x80 [ 368.305685][ T9706] ? hook_file_ioctl_common+0x145/0x410 [ 368.305699][ T9706] ? __fget_files+0x20e/0x3c0 [ 368.305714][ T9706] security_file_ioctl+0x9b/0x240 [ 368.305731][ T9706] __x64_sys_ioctl+0xb7/0x210 [ 368.305749][ T9706] do_syscall_64+0xcd/0x4c0 [ 368.305763][ T9706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.305774][ T9706] RIP: 0033:0x7ff0be18ebe9 [ 368.305784][ T9706] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 368.305795][ T9706] RSP: 002b:00007ff0bef8f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 368.305807][ T9706] RAX: ffffffffffffffda RBX: 00007ff0be3b5fa0 RCX: 00007ff0be18ebe9 [ 368.305814][ T9706] RDX: 00002000000005c0 RSI: 0000000080084504 RDI: 0000000000000003 [ 368.305821][ T9706] RBP: 00007ff0bef8f090 R08: 0000000000000000 R09: 0000000000000000 [ 368.305827][ T9706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 368.305833][ T9706] R13: 00007ff0be3b6038 R14: 00007ff0be3b5fa0 R15: 00007ffce1c81b08 [ 368.305847][ T9706] [ 368.305857][ T9706] ERROR: Out of memory at tomoyo_realpath_from_path. [ 368.663458][ T30] audit: type=1400 audit(1756441098.783:419): avc: denied { create } for pid=9708 comm="syz.3.947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 369.407246][ T5934] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 369.572550][ T5934] usb 5-1: Using ep0 maxpacket: 32 [ 369.616325][ T5934] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 369.756115][ T5934] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 369.854727][ T5934] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 369.999375][ T5934] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 370.010647][ T5934] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 370.053104][ T30] audit: type=1400 audit(1756441100.174:420): avc: denied { mounton } for pid=9697 comm="syz.2.943" path="/173/file1" dev="autofs" ino=22725 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 370.120902][ T5934] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 370.130398][ T5934] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.139943][ T5934] usb 5-1: Product: syz [ 370.144394][ T5934] usb 5-1: Manufacturer: syz [ 370.149075][ T5934] usb 5-1: SerialNumber: syz [ 370.155251][ T9728] netlink: 'syz.3.952': attribute type 4 has an invalid length. [ 370.163936][ T5934] usb 5-1: config 0 descriptor?? [ 370.166731][ T5968] lo speed is unknown, defaulting to 1000 [ 370.181742][ T5968] –yz0: Port: 1 Link DOWN [ 370.582564][ T5934] input input13: Device does not respond to id packet M [ 370.652165][ T9732] FAULT_INJECTION: forcing a failure. [ 370.652165][ T9732] name failslab, interval 1, probability 0, space 0, times 0 [ 370.680656][ T9732] CPU: 1 UID: 0 PID: 9732 Comm: syz.0.954 Not tainted syzkaller #0 PREEMPT(full) [ 370.680681][ T9732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 370.680691][ T9732] Call Trace: [ 370.680697][ T9732] [ 370.680704][ T9732] dump_stack_lvl+0x16c/0x1f0 [ 370.680728][ T9732] should_fail_ex+0x512/0x640 [ 370.680747][ T9732] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 370.680768][ T9732] should_failslab+0xc2/0x120 [ 370.680787][ T9732] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 370.680805][ T9732] ? __alloc_skb+0x2b2/0x380 [ 370.680825][ T9732] __alloc_skb+0x2b2/0x380 [ 370.680841][ T9732] ? __pfx___alloc_skb+0x10/0x10 [ 370.680860][ T9732] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 370.680886][ T9732] netlink_alloc_large_skb+0x69/0x130 [ 370.680908][ T9732] netlink_sendmsg+0x6a1/0xdd0 [ 370.680932][ T9732] ? __pfx_netlink_sendmsg+0x10/0x10 [ 370.680961][ T9732] ____sys_sendmsg+0xa98/0xc70 [ 370.680987][ T9732] ? copy_msghdr_from_user+0x10a/0x160 [ 370.681007][ T9732] ? __pfx_____sys_sendmsg+0x10/0x10 [ 370.681059][ T9732] ___sys_sendmsg+0x134/0x1d0 [ 370.681079][ T9732] ? __pfx____sys_sendmsg+0x10/0x10 [ 370.681129][ T9732] __sys_sendmsg+0x16d/0x220 [ 370.681149][ T9732] ? __pfx___sys_sendmsg+0x10/0x10 [ 370.681187][ T9732] do_syscall_64+0xcd/0x4c0 [ 370.681209][ T9732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.681227][ T9732] RIP: 0033:0x7efc3ef8ebe9 [ 370.681242][ T9732] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 370.681259][ T9732] RSP: 002b:00007efc3fe0b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 370.681278][ T9732] RAX: ffffffffffffffda RBX: 00007efc3f1b5fa0 RCX: 00007efc3ef8ebe9 [ 370.681289][ T9732] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 370.681300][ T9732] RBP: 00007efc3fe0b090 R08: 0000000000000000 R09: 0000000000000000 [ 370.681310][ T9732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 370.681320][ T9732] R13: 00007efc3f1b6038 R14: 00007efc3f1b5fa0 R15: 00007ffe9c0694e8 [ 370.681343][ T9732] [ 370.893763][ T5934] input input13: Device does not respond to id packet P [ 370.951832][ T30] audit: type=1400 audit(1756441101.064:421): avc: denied { unmount } for pid=5845 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 371.094869][ T5934] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 371.181525][ T9741] tc_dump_action: action bad kind [ 371.399887][ T5934] input input13: Device does not respond to id packet B [ 371.414990][ T5934] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 371.427432][ T5934] input input13: Device does not respond to id packet N [ 371.447026][ T5934] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 371.479851][ T5934] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 371.497713][ T5934] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 371.521141][ T5934] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 371.540060][ T5934] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input13 [ 371.635352][ T9746] FAULT_INJECTION: forcing a failure. [ 371.635352][ T9746] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 371.656137][ T5934] usb 5-1: USB disconnect, device number 13 [ 371.677056][ T9746] CPU: 0 UID: 0 PID: 9746 Comm: syz.1.958 Not tainted syzkaller #0 PREEMPT(full) [ 371.677081][ T9746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 371.677090][ T9746] Call Trace: [ 371.677097][ T9746] [ 371.677104][ T9746] dump_stack_lvl+0x16c/0x1f0 [ 371.677128][ T9746] should_fail_ex+0x512/0x640 [ 371.677152][ T9746] _copy_from_user+0x2e/0xd0 [ 371.677175][ T9746] sctp_setsockopt+0x2045/0xb870 [ 371.677200][ T9746] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 371.677236][ T9746] ? __pfx_sctp_setsockopt+0x10/0x10 [ 371.677258][ T9746] ? find_held_lock+0x2b/0x80 [ 371.677283][ T9746] ? selinux_socket_setsockopt+0x6a/0x80 [ 371.677305][ T9746] ? sock_common_setsockopt+0x2e/0xf0 [ 371.677327][ T9746] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 371.677352][ T9746] do_sock_setsockopt+0xf3/0x1d0 [ 371.677378][ T9746] __sys_setsockopt+0x1a0/0x230 [ 371.677400][ T9746] __x64_sys_setsockopt+0xbd/0x160 [ 371.677416][ T9746] ? do_syscall_64+0x91/0x4c0 [ 371.677435][ T9746] ? lockdep_hardirqs_on+0x7c/0x110 [ 371.677453][ T9746] do_syscall_64+0xcd/0x4c0 [ 371.677473][ T9746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.677491][ T9746] RIP: 0033:0x7f389d38ebe9 [ 371.677505][ T9746] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 371.677521][ T9746] RSP: 002b:00007f389e137038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 371.677537][ T9746] RAX: ffffffffffffffda RBX: 00007f389d5b5fa0 RCX: 00007f389d38ebe9 [ 371.677548][ T9746] RDX: 0000000000000077 RSI: 0000000000000084 RDI: 0000000000000003 [ 371.677558][ T9746] RBP: 00007f389e137090 R08: 000000000000000a R09: 0000000000000000 [ 371.677569][ T9746] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 371.677579][ T9746] R13: 00007f389d5b6038 R14: 00007f389d5b5fa0 R15: 00007ffcc51ea278 [ 371.677603][ T9746] [ 371.946503][ T9750] fuse: Bad value for 'fd' [ 372.263706][ T5968] Process accounting resumed [ 372.281422][ T9751] Process accounting resumed [ 372.455080][ T9757] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 372.569964][ T30] audit: type=1400 audit(1756441102.685:422): avc: denied { connect } for pid=9747 comm="syz.2.959" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 375.344132][ T9785] tc_dump_action: action bad kind [ 376.320952][ T30] audit: type=1400 audit(1756441106.437:423): avc: denied { setopt } for pid=9797 comm="syz.4.971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 376.362464][ T30] audit: type=1400 audit(1756441106.467:424): avc: denied { read } for pid=9797 comm="syz.4.971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 376.965637][ T9811] fuse: Unknown parameter '0x0000000000000004' [ 377.246656][ T841] Process accounting resumed [ 377.383140][ T9810] Process accounting resumed [ 378.133139][ T9833] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 378.314488][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.338223][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.066383][ T9846] tc_dump_action: action bad kind [ 379.278183][ T9855] tc_dump_action: action bad kind [ 379.823037][ T9861] fuse: Unknown parameter '0x0000000000000004' [ 380.132598][ T5968] Process accounting resumed [ 380.204191][ T9864] Process accounting resumed [ 381.620732][ T9892] lo speed is unknown, defaulting to 1000 [ 381.734612][ T9895] FAULT_INJECTION: forcing a failure. [ 381.734612][ T9895] name failslab, interval 1, probability 0, space 0, times 0 [ 381.769088][ T9895] CPU: 1 UID: 0 PID: 9895 Comm: syz.0.1000 Not tainted syzkaller #0 PREEMPT(full) [ 381.769115][ T9895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 381.769124][ T9895] Call Trace: [ 381.769130][ T9895] [ 381.769137][ T9895] dump_stack_lvl+0x16c/0x1f0 [ 381.769161][ T9895] should_fail_ex+0x512/0x640 [ 381.769181][ T9895] ? fs_reclaim_acquire+0xae/0x150 [ 381.769206][ T9895] ? tomoyo_encode2+0x100/0x3e0 [ 381.769230][ T9895] should_failslab+0xc2/0x120 [ 381.769251][ T9895] __kmalloc_noprof+0xd2/0x510 [ 381.769276][ T9895] tomoyo_encode2+0x100/0x3e0 [ 381.769304][ T9895] tomoyo_encode+0x29/0x50 [ 381.769328][ T9895] tomoyo_realpath_from_path+0x18f/0x6e0 [ 381.769355][ T9895] ? tomoyo_profile+0x47/0x60 [ 381.769375][ T9895] tomoyo_path_number_perm+0x245/0x580 [ 381.769396][ T9895] ? tomoyo_path_number_perm+0x237/0x580 [ 381.769419][ T9895] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 381.769442][ T9895] ? find_held_lock+0x2b/0x80 [ 381.769488][ T9895] ? find_held_lock+0x2b/0x80 [ 381.769507][ T9895] ? hook_file_ioctl_common+0x145/0x410 [ 381.769531][ T9895] ? __fget_files+0x20e/0x3c0 [ 381.769556][ T9895] security_file_ioctl+0x9b/0x240 [ 381.769582][ T9895] __x64_sys_ioctl+0xb7/0x210 [ 381.769611][ T9895] do_syscall_64+0xcd/0x4c0 [ 381.769632][ T9895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.769649][ T9895] RIP: 0033:0x7efc3ef8ebe9 [ 381.769664][ T9895] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 381.769681][ T9895] RSP: 002b:00007efc3fe0b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 381.769698][ T9895] RAX: ffffffffffffffda RBX: 00007efc3f1b5fa0 RCX: 00007efc3ef8ebe9 [ 381.769709][ T9895] RDX: 0000200000000100 RSI: 000000004008ae89 RDI: 0000000000000005 [ 381.769720][ T9895] RBP: 00007efc3fe0b090 R08: 0000000000000000 R09: 0000000000000000 [ 381.769730][ T9895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 381.769739][ T9895] R13: 00007efc3f1b6038 R14: 00007efc3f1b5fa0 R15: 00007ffe9c0694e8 [ 381.769763][ T9895] [ 381.769778][ T9895] ERROR: Out of memory at tomoyo_realpath_from_path. [ 381.987965][ T9899] fuse: Unknown parameter '0xffffffffffffffff' [ 382.452247][ T841] Process accounting resumed [ 382.501568][ T9900] Process accounting resumed [ 382.607020][ T30] audit: type=1400 audit(1756441112.730:425): avc: denied { relabelfrom } for pid=9907 comm="syz.0.1003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 382.655896][ T30] audit: type=1400 audit(1756441112.740:426): avc: denied { relabelto } for pid=9907 comm="syz.0.1003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 382.784284][ T9914] block nbd1: NBD_DISCONNECT [ 382.821800][ T9914] block nbd1: Send disconnect failed -22 [ 382.849611][ T30] audit: type=1400 audit(1756441112.920:427): avc: denied { write } for pid=9905 comm="syz.1.1002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 383.833305][ T9905] block nbd1: Disconnected due to user request. [ 383.854875][ T9905] block nbd1: shutting down sockets [ 384.986753][ T841] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 385.151777][ T9928] comedi comedi2: reset error (fatal) [ 385.775609][ T30] audit: type=1326 audit(1756441115.771:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9934 comm="syz.3.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f751db8ebe9 code=0x7ffc0000 [ 385.775832][ T30] audit: type=1326 audit(1756441115.771:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9934 comm="syz.3.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f751db8ebe9 code=0x7ffc0000 [ 385.775988][ T30] audit: type=1326 audit(1756441115.771:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9934 comm="syz.3.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f751db8ebe9 code=0x7ffc0000 [ 385.776147][ T30] audit: type=1326 audit(1756441115.781:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9934 comm="syz.3.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f751db8ebe9 code=0x7ffc0000 [ 385.776304][ T30] audit: type=1326 audit(1756441115.781:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9934 comm="syz.3.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f751db8ebe9 code=0x7ffc0000 [ 385.776456][ T30] audit: type=1326 audit(1756441115.791:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9934 comm="syz.3.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f751db8ebe9 code=0x7ffc0000 [ 385.776612][ T30] audit: type=1326 audit(1756441115.791:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9934 comm="syz.3.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f751db8ebe9 code=0x7ffc0000 [ 385.808135][ T841] usb 5-1: Using ep0 maxpacket: 8 [ 385.988438][ T841] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 385.997667][ T841] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.044030][ T841] pvrusb2: Hardware description: Terratec Grabster AV400 [ 386.053027][ T841] pvrusb2: ********** [ 386.054320][ T9943] fuse: Unknown parameter '0x0000000000000004' [ 386.058866][ T841] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 386.075203][ T841] pvrusb2: Important functionality might not be entirely working. [ 386.083732][ T841] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 386.098298][ T9945] FAULT_INJECTION: forcing a failure. [ 386.098298][ T9945] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 386.111882][ T841] pvrusb2: ********** [ 386.140131][ T9945] CPU: 1 UID: 0 PID: 9945 Comm: syz.2.1012 Not tainted syzkaller #0 PREEMPT(full) [ 386.140155][ T9945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 386.140165][ T9945] Call Trace: [ 386.140171][ T9945] [ 386.140177][ T9945] dump_stack_lvl+0x16c/0x1f0 [ 386.140201][ T9945] should_fail_ex+0x512/0x640 [ 386.140224][ T9945] _copy_from_user+0x2e/0xd0 [ 386.140253][ T9945] copy_msghdr_from_user+0x98/0x160 [ 386.140272][ T9945] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 386.140295][ T9945] ? kfree+0x24f/0x4d0 [ 386.140319][ T9945] ? __lock_acquire+0x62e/0x1ce0 [ 386.140351][ T9945] ___sys_recvmsg+0xdb/0x1a0 [ 386.140370][ T9945] ? __pfx____sys_recvmsg+0x10/0x10 [ 386.140403][ T9945] ? __pfx___might_resched+0x10/0x10 [ 386.140431][ T9945] do_recvmmsg+0x2fe/0x750 [ 386.140453][ T9945] ? __pfx_do_recvmmsg+0x10/0x10 [ 386.140477][ T9945] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 386.140506][ T9945] ? __fget_files+0x20e/0x3c0 [ 386.140532][ T9945] __x64_sys_recvmmsg+0x22a/0x280 [ 386.140560][ T9945] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 386.140592][ T9945] do_syscall_64+0xcd/0x4c0 [ 386.140614][ T9945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.140631][ T9945] RIP: 0033:0x7f84ac78ebe9 [ 386.140646][ T9945] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 386.140663][ T9945] RSP: 002b:00007f84ad588038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 386.140679][ T9945] RAX: ffffffffffffffda RBX: 00007f84ac9b5fa0 RCX: 00007f84ac78ebe9 [ 386.140690][ T9945] RDX: 0000000000000002 RSI: 0000200000000640 RDI: 0000000000000004 [ 386.140706][ T9945] RBP: 00007f84ad588090 R08: 0000000000000000 R09: 0000000000000000 [ 386.140716][ T9945] R10: 0000000000002001 R11: 0000000000000246 R12: 0000000000000001 [ 386.140726][ T9945] R13: 00007f84ac9b6038 R14: 00007f84ac9b5fa0 R15: 00007ffd6c4e3b48 [ 386.140751][ T9945] [ 386.680487][ T5934] Process accounting resumed [ 386.725195][ T9942] Process accounting resumed [ 386.771499][ T2338] pvrusb2: Invalid write control endpoint [ 386.999233][ T2338] pvrusb2: Invalid write control endpoint [ 387.112965][ T2338] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 387.183741][ T5934] usb 5-1: USB disconnect, device number 14 [ 387.200766][ T2338] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 387.303862][ T2338] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 387.322534][ T2338] pvrusb2: Device being rendered inoperable [ 387.335445][ T2338] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 387.355078][ T2338] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 387.419678][ T2338] pvrusb2: Attached sub-driver cx25840 [ 387.512517][ T2338] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 387.520226][ T9966] Bluetooth: hci5: Frame reassembly failed (-84) [ 387.570633][ T2338] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 387.589886][ T6293] Bluetooth: hci5: Frame reassembly failed (-84) [ 387.610172][ T9960] netlink: 'syz.2.1014': attribute type 4 has an invalid length. [ 387.640458][ T9965] RDS: rds_bind could not find a transport for fe88::1, load rds_tcp or rds_rdma? [ 387.850984][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 387.851003][ T30] audit: type=1400 audit(1756441117.952:466): avc: denied { name_bind } for pid=9954 comm="syz.1.1016" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 387.897834][ T9960] netlink: 'syz.2.1014': attribute type 4 has an invalid length. [ 387.916384][ T9971] can0: slcan on ttyS3. [ 387.947369][ T30] audit: type=1400 audit(1756441118.072:467): avc: denied { read } for pid=9952 comm="syz.3.1015" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 387.947419][ T30] audit: type=1400 audit(1756441118.072:468): avc: denied { open } for pid=9952 comm="syz.3.1015" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 387.967158][ T9971] can0 (unregistered): slcan off ttyS3. [ 388.020799][ T9971] batman_adv: batadv0: Adding interface: dummy0 [ 388.020827][ T9971] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 388.020845][ T9971] batman_adv: batadv0: Interface activated: dummy0 [ 389.554630][ T5855] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 391.014259][ T9994] tipc: New replicast peer: 0.0.0.0 [ 391.031438][ T9994] tipc: Enabled bearer , priority 10 [ 391.236995][ T9999] netlink: 'syz.3.1024': attribute type 4 has an invalid length. [ 391.349917][T10006] netlink: 'syz.3.1024': attribute type 4 has an invalid length. [ 391.411303][ T841] lo speed is unknown, defaulting to 1000 [ 391.418366][ T841] –yz0: Port: 1 Link ACTIVE [ 391.517018][T10007] netlink: 'syz.0.1025': attribute type 4 has an invalid length. [ 391.567436][T10007] netlink: 'syz.0.1025': attribute type 4 has an invalid length. [ 392.230150][ T5936] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 392.431136][ T5936] usb 3-1: Using ep0 maxpacket: 8 [ 392.452769][ T5936] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 392.482135][ T5936] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.524286][ T5936] pvrusb2: Hardware description: Terratec Grabster AV400 [ 392.555570][ T5936] pvrusb2: ********** [ 392.577856][ T5936] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 392.638264][T10010] comedi comedi2: reset error (fatal) [ 392.661061][ T5936] pvrusb2: Important functionality might not be entirely working. [ 392.677280][ T5936] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 392.736943][ T5936] pvrusb2: ********** [ 392.784681][ T2338] pvrusb2: Invalid write control endpoint [ 392.909191][T10028] RDS: rds_bind could not find a transport for fe88::4, load rds_tcp or rds_rdma? [ 393.011391][ T841] usb 3-1: USB disconnect, device number 13 [ 393.372298][ T2338] pvrusb2: Invalid write control endpoint [ 393.385803][ T2338] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 393.435665][ T2338] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 393.466655][ T2338] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 393.610664][ T2338] pvrusb2: Device being rendered inoperable [ 393.662353][T10033] lo speed is unknown, defaulting to 1000 [ 393.852784][T10040] netlink: 'syz.3.1035': attribute type 4 has an invalid length. [ 393.864299][ T2338] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 394.833742][ T2338] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 394.843277][ T24] lo speed is unknown, defaulting to 1000 [ 394.849037][ T24] –yz0: Port: 1 Link DOWN [ 394.853992][ T2338] pvrusb2: Attached sub-driver cx25840 [ 394.859454][ T2338] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 394.872918][ T2338] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 394.884651][T10036] FAULT_INJECTION: forcing a failure. [ 394.884651][T10036] name failslab, interval 1, probability 0, space 0, times 0 [ 394.901520][T10036] CPU: 1 UID: 0 PID: 10036 Comm: syz.0.1034 Not tainted syzkaller #0 PREEMPT(full) [ 394.901538][T10036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 394.901545][T10036] Call Trace: [ 394.901549][T10036] [ 394.901553][T10036] dump_stack_lvl+0x16c/0x1f0 [ 394.901569][T10036] should_fail_ex+0x512/0x640 [ 394.901583][T10036] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 394.901597][T10036] should_failslab+0xc2/0x120 [ 394.901610][T10036] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 394.901622][T10036] ? __alloc_skb+0x2b2/0x380 [ 394.901636][T10036] __alloc_skb+0x2b2/0x380 [ 394.901646][T10036] ? __pfx___alloc_skb+0x10/0x10 [ 394.901658][T10036] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 394.901674][T10036] netlink_alloc_large_skb+0x69/0x130 [ 394.901688][T10036] netlink_sendmsg+0x6a1/0xdd0 [ 394.901703][T10036] ? __pfx_netlink_sendmsg+0x10/0x10 [ 394.901721][T10036] ____sys_sendmsg+0xa98/0xc70 [ 394.901737][T10036] ? copy_msghdr_from_user+0x10a/0x160 [ 394.901750][T10036] ? __pfx_____sys_sendmsg+0x10/0x10 [ 394.901771][T10036] ___sys_sendmsg+0x134/0x1d0 [ 394.901784][T10036] ? __pfx____sys_sendmsg+0x10/0x10 [ 394.901813][T10036] __sys_sendmsg+0x16d/0x220 [ 394.901825][T10036] ? __pfx___sys_sendmsg+0x10/0x10 [ 394.901846][T10036] do_syscall_64+0xcd/0x4c0 [ 394.901859][T10036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.901881][T10036] RIP: 0033:0x7efc3ef8ebe9 [ 394.901891][T10036] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 394.901902][T10036] RSP: 002b:00007efc3fdea038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 394.901913][T10036] RAX: ffffffffffffffda RBX: 00007efc3f1b6090 RCX: 00007efc3ef8ebe9 [ 394.901920][T10036] RDX: 0000000000000084 RSI: 0000200000000100 RDI: 0000000000000003 [ 394.901926][T10036] RBP: 00007efc3fdea090 R08: 0000000000000000 R09: 0000000000000000 [ 394.901933][T10036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 394.901939][T10036] R13: 00007efc3f1b6128 R14: 00007efc3f1b6090 R15: 00007ffe9c0694e8 [ 394.901953][T10036] [ 394.916901][T10042] netlink: 'syz.3.1035': attribute type 4 has an invalid length. [ 395.149130][T10046] syzkaller0: entered promiscuous mode [ 395.160510][T10046] syzkaller0: entered allmulticast mode [ 395.183908][T10046] syzkaller0: create flow: hash 414311948 index 1 [ 395.190761][ T5962] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 395.299086][ T195] syzkaller0: tun_net_xmit 48 [ 395.325979][ T9] lo speed is unknown, defaulting to 1000 [ 395.331880][ T9] –yz0: Port: 1 Link ACTIVE [ 395.392005][T10045] syzkaller0: delete flow: hash 414311948 index 1 [ 395.725333][ T30] audit: type=1400 audit(1756441125.846:469): avc: denied { create } for pid=10051 comm="syz.0.1040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 395.849451][ T30] audit: type=1400 audit(1756441125.936:470): avc: denied { setopt } for pid=10051 comm="syz.0.1040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 395.999570][T10056] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1039'. [ 396.659204][ T5913] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 397.097018][ T5962] usb 5-1: device descriptor read/all, error -71 [ 397.142067][T10076] fuse: Unknown parameter 'fd0x0000000000000004' [ 397.173321][ T5913] usb 1-1: Using ep0 maxpacket: 32 [ 397.500350][ T5913] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 397.533713][ T5913] usb 1-1: config 0 has no interface number 0 [ 397.567796][ T5913] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 397.577775][ T5913] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.586425][ T5913] usb 1-1: Product: syz [ 397.595243][ T841] Process accounting resumed [ 397.597241][ T5913] usb 1-1: Manufacturer: syz [ 397.604982][ T5913] usb 1-1: SerialNumber: syz [ 397.620229][ T5913] usb 1-1: config 0 descriptor?? [ 397.628399][ T5913] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 397.631200][T10077] Process accounting resumed [ 397.637360][ T5913] usb 1-1: selecting invalid altsetting 1 [ 397.655773][ T5913] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 397.667715][ T5913] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 397.690302][ T5913] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 397.700397][ T5913] usb 1-1: media controller created [ 397.715441][T10083] RDS: rds_bind could not find a transport for fe88::4, load rds_tcp or rds_rdma? [ 397.722319][ T5913] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 397.930307][T10062] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1041'. [ 398.217574][ T30] audit: type=1400 audit(1756441128.348:471): avc: denied { write } for pid=10081 comm="syz.4.1046" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 398.898267][ T5913] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 398.910330][ T5913] zl10353_read_register: readreg error (reg=127, ret==-110) [ 399.797249][ T24] usb 1-1: USB disconnect, device number 19 [ 402.086502][ T5962] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 402.213682][ T30] audit: type=1400 audit(1756441132.350:472): avc: denied { getopt } for pid=10126 comm="syz.2.1056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 402.273613][ T30] audit: type=1400 audit(1756441132.390:473): avc: denied { getopt } for pid=10126 comm="syz.2.1056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 402.302206][ T5962] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 402.313735][ T5962] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.322990][ T5962] usb 4-1: Product: syz [ 402.334220][ T5962] usb 4-1: Manufacturer: syz [ 402.577324][ T5962] usb 4-1: SerialNumber: syz [ 402.601629][ T5962] usb 4-1: config 0 descriptor?? [ 402.727347][T10137] RDS: rds_bind could not find a transport for fe88::2, load rds_tcp or rds_rdma? [ 404.156967][T10157] netlink: 'syz.2.1060': attribute type 4 has an invalid length. [ 404.272489][T10160] netlink: 'syz.2.1060': attribute type 4 has an invalid length. [ 405.782073][ T5962] dm9601 4-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 405.815373][ T5962] dm9601 4-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.3-1, Davicom DM96xx USB 10/100 Ethernet, 7e:a1:8a:d2:7b:3e [ 405.891455][ T5962] usb 4-1: USB disconnect, device number 20 [ 405.929887][ T5962] dm9601 4-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.3-1, Davicom DM96xx USB 10/100 Ethernet [ 407.554526][ T841] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 407.765685][ T841] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 407.817309][ T841] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 407.924833][ T841] usb 4-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 407.966200][ T841] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.034525][T10153] block nbd0: shutting down sockets [ 408.065699][ T841] usb 4-1: config 0 descriptor?? [ 408.363960][ T841] usbhid 4-1:0.0: can't add hid device: -71 [ 408.504721][ T841] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 409.133796][ T841] usb 4-1: USB disconnect, device number 21 [ 409.175568][T10217] RDS: rds_bind could not find a transport for fe88::2, load rds_tcp or rds_rdma? [ 410.911513][T10249] tc_dump_action: action bad kind [ 411.426076][ T30] audit: type=1400 audit(1756441141.551:474): avc: denied { create } for pid=10258 comm="syz.3.1081" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 411.434511][ T841] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 411.470078][T10260] block nbd0: NBD_DISCONNECT [ 411.482194][T10260] block nbd0: Send disconnect failed -22 [ 411.496578][T10259] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1081'. [ 411.626876][ T841] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 411.651423][ T841] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 411.678734][ T841] usb 2-1: config 0 interface 0 has no altsetting 0 [ 411.693096][ T841] usb 2-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 411.735028][T10266] netlink: 'syz.3.1082': attribute type 4 has an invalid length. [ 411.754771][ T24] lo speed is unknown, defaulting to 1000 [ 411.766249][T10266] netlink: 'syz.3.1082': attribute type 4 has an invalid length. [ 411.774883][ T24] –yz0: Port: 1 Link DOWN [ 411.794577][ T841] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.824818][ T24] lo speed is unknown, defaulting to 1000 [ 411.885235][ T841] usb 2-1: config 0 descriptor?? [ 411.895410][ T24] –yz0: Port: 1 Link ACTIVE [ 412.240928][T10250] block nbd0: Disconnected due to user request. [ 412.250750][T10250] block nbd0: shutting down sockets [ 412.360711][ T841] hid-steam 0003:28DE:1102.0007: unknown main item tag 0x0 [ 412.371876][ T841] hid-steam 0003:28DE:1102.0007: unknown main item tag 0x0 [ 412.388787][ T841] hid-steam 0003:28DE:1102.0007: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.1-1/input0 [ 412.514759][ T841] hid-steam 0003:28DE:1102.0007: Steam Controller 'XXXXXXXXXX' connected [ 412.532570][ T841] input: Steam Controller as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:28DE:1102.0007/input/input14 [ 412.653406][ T841] hid-steam 0003:28DE:1102.0008: unknown main item tag 0x0 [ 412.672767][ T841] hid-steam 0003:28DE:1102.0008: unknown main item tag 0x0 [ 412.738820][ T841] hid-steam 0003:28DE:1102.0008: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.1-1/input0 [ 412.885694][ T841] usb 2-1: USB disconnect, device number 21 [ 413.081251][T10271] fido_id[10271]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 413.100736][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 413.196909][ T841] hid-steam 0003:28DE:1102.0007: Steam Controller 'XXXXXXXXXX' disconnected [ 413.205998][ T9] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 413.982389][T10287] tc_dump_action: action bad kind [ 414.152266][T10268] Process accounting resumed [ 414.447213][T10274] FAULT_INJECTION: forcing a failure. [ 414.447213][T10274] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 414.484473][T10274] CPU: 0 UID: 0 PID: 10274 Comm: syz.4.1084 Not tainted syzkaller #0 PREEMPT(full) [ 414.484500][T10274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 414.484510][T10274] Call Trace: [ 414.484516][T10274] [ 414.484524][T10274] dump_stack_lvl+0x16c/0x1f0 [ 414.484549][T10274] should_fail_ex+0x512/0x640 [ 414.484571][T10274] _copy_from_user+0x2e/0xd0 [ 414.484593][T10274] memdup_user+0x6b/0xe0 [ 414.484613][T10274] hidraw_send_report+0x1d8/0x4d0 [ 414.484646][T10274] ? __pfx_hidraw_write+0x10/0x10 [ 414.484667][T10274] hidraw_write+0x98/0xe0 [ 414.484690][T10274] vfs_writev+0x5df/0xde0 [ 414.484706][T10274] ? get_pid_task+0x106/0x250 [ 414.484730][T10274] ? __pfx_vfs_writev+0x10/0x10 [ 414.484748][T10274] ? find_held_lock+0x2b/0x80 [ 414.484783][T10274] ? __fget_files+0x20e/0x3c0 [ 414.484806][T10274] ? do_pwritev+0x1a6/0x270 [ 414.484818][T10274] do_pwritev+0x1a6/0x270 [ 414.484833][T10274] ? __pfx_do_pwritev+0x10/0x10 [ 414.484855][T10274] do_syscall_64+0xcd/0x4c0 [ 414.484875][T10274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.484892][T10274] RIP: 0033:0x7ff0be18ebe9 [ 414.484905][T10274] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 414.484920][T10274] RSP: 002b:00007ff0bef8f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000128 [ 414.484937][T10274] RAX: ffffffffffffffda RBX: 00007ff0be3b5fa0 RCX: 00007ff0be18ebe9 [ 414.484948][T10274] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000004 [ 414.484958][T10274] RBP: 00007ff0bef8f090 R08: 0000000000100400 R09: 0000000000000000 [ 414.484968][T10274] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 414.484977][T10274] R13: 00007ff0be3b6038 R14: 00007ff0be3b5fa0 R15: 00007ffce1c81b08 [ 414.485001][T10274] [ 415.307428][T10309] block nbd3: NBD_DISCONNECT [ 415.312338][T10309] block nbd3: Send disconnect failed -22 [ 416.040419][T10321] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1095'. [ 416.232256][ T30] audit: type=1400 audit(1756441146.367:475): avc: denied { map } for pid=10320 comm="syz.0.1095" path="socket:[24922]" dev="sockfs" ino=24922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 416.256143][ C1] vkms_vblank_simulate: vblank timer overrun [ 416.281328][ T30] audit: type=1400 audit(1756441146.367:476): avc: denied { append } for pid=10320 comm="syz.0.1095" name="event3" dev="devtmpfs" ino=975 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 416.304642][ C1] vkms_vblank_simulate: vblank timer overrun [ 416.331787][T10325] netlink: 'syz.0.1095': attribute type 4 has an invalid length. [ 416.372364][T10321] netlink: 'syz.0.1095': attribute type 4 has an invalid length. [ 417.029679][ T7806] block nbd3: Disconnected due to user request. [ 417.077010][ T7806] block nbd3: shutting down sockets [ 417.646221][T10338] netlink: 'syz.4.1098': attribute type 10 has an invalid length. [ 417.824221][T10338] batman_adv: batadv0: Adding interface: team0 [ 417.861865][T10338] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 417.887065][ C1] vkms_vblank_simulate: vblank timer overrun [ 417.950266][T10338] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 418.059850][T10348] block nbd2: NBD_DISCONNECT [ 418.065290][T10348] block nbd2: Send disconnect failed -22 [ 418.414793][ T24] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 418.764477][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 418.801282][ T24] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 418.831088][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 418.903706][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 418.942611][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 418.994177][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 419.016170][ T24] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 419.027142][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.038601][ T24] usb 1-1: Product: syz [ 419.042920][ T24] usb 1-1: Manufacturer: syz [ 419.054620][ T24] usb 1-1: SerialNumber: syz [ 419.082749][ T24] usb 1-1: config 0 descriptor?? [ 419.520645][ T24] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 419.631853][ T24] input input15: Device does not respond to id packet M [ 419.652251][ T24] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 419.804342][ T24] input input15: Device does not respond to id packet P [ 419.831404][ T24] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 419.850961][ T24] input input15: Device does not respond to id packet B [ 419.867849][ T24] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 419.881084][ T24] input input15: Device does not respond to id packet N [ 419.896770][ T24] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 419.912374][ T24] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 419.926884][ T24] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 419.953272][ T24] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 419.967817][ T24] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input15 [ 420.003682][ T24] usb 1-1: USB disconnect, device number 20 [ 420.658255][T10340] block nbd2: Disconnected due to user request. [ 420.670497][T10340] block nbd2: shutting down sockets [ 422.557934][T10377] Process accounting resumed [ 422.584703][ T841] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 422.725838][ T841] usb 2-1: device descriptor read/64, error -71 [ 422.796187][T10408] tc_dump_action: action bad kind [ 423.047290][ T30] audit: type=1400 audit(1756441153.190:477): avc: denied { connect } for pid=10410 comm="syz.3.1115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 423.047904][T10411] FAULT_INJECTION: forcing a failure. [ 423.047904][T10411] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 423.124510][ T841] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 423.138489][T10411] CPU: 0 UID: 0 PID: 10411 Comm: syz.3.1115 Not tainted syzkaller #0 PREEMPT(full) [ 423.138514][T10411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 423.138525][T10411] Call Trace: [ 423.138531][T10411] [ 423.138538][T10411] dump_stack_lvl+0x16c/0x1f0 [ 423.138568][T10411] should_fail_ex+0x512/0x640 [ 423.138592][T10411] _copy_to_user+0x32/0xd0 [ 423.138617][T10411] simple_read_from_buffer+0xcb/0x170 [ 423.138638][T10411] proc_fail_nth_read+0x197/0x240 [ 423.138660][T10411] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 423.138682][T10411] ? rw_verify_area+0xcf/0x6c0 [ 423.138708][T10411] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 423.138729][T10411] vfs_read+0x1e4/0xcf0 [ 423.138750][T10411] ? __pfx___mutex_lock+0x10/0x10 [ 423.138770][T10411] ? __pfx_vfs_read+0x10/0x10 [ 423.138794][T10411] ? __fget_files+0x20e/0x3c0 [ 423.138819][T10411] ksys_read+0x12a/0x250 [ 423.138835][T10411] ? __pfx_ksys_read+0x10/0x10 [ 423.138858][T10411] do_syscall_64+0xcd/0x4c0 [ 423.138879][T10411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.138896][T10411] RIP: 0033:0x7f751db8d5fc [ 423.138910][T10411] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 423.138926][T10411] RSP: 002b:00007f751e95c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 423.138943][T10411] RAX: ffffffffffffffda RBX: 00007f751ddb5fa0 RCX: 00007f751db8d5fc [ 423.138955][T10411] RDX: 000000000000000f RSI: 00007f751e95c0a0 RDI: 0000000000000008 [ 423.138965][T10411] RBP: 00007f751e95c090 R08: 0000000000000000 R09: 0000000000000000 [ 423.138975][T10411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 423.138985][T10411] R13: 00007f751ddb6038 R14: 00007f751ddb5fa0 R15: 00007fff2f8d6ef8 [ 423.139010][T10411] [ 423.322649][ C0] vkms_vblank_simulate: vblank timer overrun [ 423.910498][ T841] usb 2-1: device descriptor read/64, error -71 [ 424.035821][ T841] usb usb2-port1: attempt power cycle [ 424.175464][ T9] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 424.309425][T10430] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1120'. [ 424.414648][ T841] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 424.558905][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 424.568013][ T9] usb 4-1: config 2 has an invalid interface number: 253 but max is 1 [ 424.654502][ T841] usb 2-1: device not accepting address 24, error -71 [ 424.659521][ T9] usb 4-1: config 2 has an invalid interface number: 94 but max is 1 [ 424.724497][ T9] usb 4-1: config 2 has no interface number 0 [ 424.739297][ T9] usb 4-1: config 2 has no interface number 1 [ 424.916268][ T9] usb 4-1: config 2 interface 253 has no altsetting 0 [ 424.923112][ T9] usb 4-1: config 2 interface 94 has no altsetting 0 [ 424.933022][ T9] usb 4-1: New USB device found, idVendor=0813, idProduct=0002, bcdDevice=ac.bf [ 424.942338][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.100726][ T9] usb 4-1: Product: syz [ 425.113886][ T9] usb 4-1: Manufacturer: syz [ 425.119570][ T9] usb 4-1: SerialNumber: syz [ 425.514698][ T24] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 425.708883][T10448] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=2205475325 (8821901300 ns) > initial count (6564024732 ns). Using initial count to start timer. [ 425.828717][ T9] usb 4-1: USB disconnect, device number 22 [ 425.864472][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 425.873086][ T24] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 425.910146][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 425.987859][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 426.018456][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 426.222215][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 426.307019][ T24] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 426.366685][T10458] block nbd4: NBD_DISCONNECT [ 426.374466][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.387871][ T24] usb 1-1: Product: syz [ 426.392040][ T24] usb 1-1: Manufacturer: syz [ 426.396937][ T24] usb 1-1: SerialNumber: syz [ 426.404322][ T24] usb 1-1: config 0 descriptor?? [ 426.411692][T10458] block nbd4: Send disconnect failed -22 [ 426.743399][ T9] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 426.906441][ T24] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 426.912599][ T24] input input17: Device does not respond to id packet M [ 426.923474][T10466] block nbd3: NBD_DISCONNECT [ 426.923611][ T24] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 426.937990][T10466] block nbd3: Send disconnect failed -22 [ 426.942759][ T24] input input17: Device does not respond to id packet P [ 426.958121][ T24] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 426.984468][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 426.998888][ T24] input input17: Device does not respond to id packet B [ 427.000258][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 427.030447][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 427.032791][ T24] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 427.070069][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 427.080145][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 427.094587][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 427.118213][T10454] block nbd4: Disconnected due to user request. [ 427.126795][ T9] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 427.127449][ T24] input input17: Device does not respond to id packet N [ 427.144664][T10454] block nbd4: shutting down sockets [ 427.171797][T10471] FAULT_INJECTION: forcing a failure. [ 427.171797][T10471] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 427.174028][ T24] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 427.185105][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.201396][ T9] usb 2-1: Product: syz [ 427.220464][ T9] usb 2-1: Manufacturer: syz [ 427.224853][ T24] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 427.237456][ T24] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 427.238738][ T9] usb 2-1: SerialNumber: syz [ 427.255276][T10471] CPU: 0 UID: 0 PID: 10471 Comm: syz.2.1129 Not tainted syzkaller #0 PREEMPT(full) [ 427.255295][T10471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 427.255302][T10471] Call Trace: [ 427.255306][T10471] [ 427.255311][T10471] dump_stack_lvl+0x16c/0x1f0 [ 427.255328][T10471] should_fail_ex+0x512/0x640 [ 427.255343][T10471] _copy_to_user+0x32/0xd0 [ 427.255360][T10471] simple_read_from_buffer+0xcb/0x170 [ 427.255373][T10471] proc_fail_nth_read+0x197/0x240 [ 427.255387][T10471] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 427.255401][T10471] ? rw_verify_area+0xcf/0x6c0 [ 427.255418][T10471] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 427.255431][T10471] vfs_read+0x1e4/0xcf0 [ 427.255444][T10471] ? __pfx___mutex_lock+0x10/0x10 [ 427.255457][T10471] ? __pfx_vfs_read+0x10/0x10 [ 427.255472][T10471] ? __fget_files+0x20e/0x3c0 [ 427.255488][T10471] ksys_read+0x12a/0x250 [ 427.255499][T10471] ? __pfx_ksys_read+0x10/0x10 [ 427.255514][T10471] do_syscall_64+0xcd/0x4c0 [ 427.255530][T10471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.255541][T10471] RIP: 0033:0x7f84ac78d5fc [ 427.255551][T10471] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 427.255562][T10471] RSP: 002b:00007f84ad588030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 427.255573][T10471] RAX: ffffffffffffffda RBX: 00007f84ac9b5fa0 RCX: 00007f84ac78d5fc [ 427.255580][T10471] RDX: 000000000000000f RSI: 00007f84ad5880a0 RDI: 0000000000000004 [ 427.255587][T10471] RBP: 00007f84ad588090 R08: 0000000000000000 R09: 0000000000000000 [ 427.255593][T10471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 427.255600][T10471] R13: 00007f84ac9b6038 R14: 00007f84ac9b5fa0 R15: 00007ffd6c4e3b48 [ 427.255614][T10471] [ 427.261884][ T24] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 427.285499][ T9] usb 2-1: config 0 descriptor?? [ 427.553647][ T24] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input17 [ 427.614053][ T24] usb 1-1: USB disconnect, device number 21 [ 428.059836][ T9] input input18: Device does not respond to id packet M [ 428.293424][ T9] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 428.299932][ T9] input input18: Device does not respond to id packet P [ 428.511254][ T9] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 428.536397][ T9] input input18: Device does not respond to id packet B [ 428.600541][ T9] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 428.630729][ T9] input input18: Device does not respond to id packet N [ 428.646243][T10459] block nbd3: Disconnected due to user request. [ 428.653978][T10459] block nbd3: shutting down sockets [ 428.666364][ T9] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 428.693233][ T9] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 428.700577][ T9] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 428.707696][ T9] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 428.786295][ T9] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input18 [ 430.703561][ T9] usb 2-1: USB disconnect, device number 26 [ 433.618348][ T5962] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 433.856500][ T5962] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 433.872157][ T5962] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 433.899559][ T5962] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.953254][ T5962] usb 4-1: config 0 descriptor?? [ 433.997817][T10542] block nbd1: NBD_DISCONNECT [ 434.008190][T10542] block nbd1: Send disconnect failed -22 [ 434.195713][ T5962] usbhid 4-1:0.0: can't add hid device: -71 [ 434.222388][ T5962] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 434.245837][T10532] Process accounting resumed [ 434.296941][ T5962] usb 4-1: USB disconnect, device number 23 [ 434.764503][ T5962] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 434.812095][T10537] Process accounting resumed [ 434.955833][ T30] audit: type=1400 audit(1756441165.096:478): avc: denied { ioctl } for pid=10551 comm="syz.0.1150" path="socket:[25514]" dev="sockfs" ino=25514 ioctlcmd=0x943c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 434.983098][ T5962] usb 4-1: Using ep0 maxpacket: 32 [ 434.984420][T10538] block nbd1: Disconnected due to user request. [ 435.106449][T10538] block nbd1: shutting down sockets [ 435.312412][ T5962] usb 4-1: config index 0 descriptor too short (expected 36, got 27) [ 435.327182][ T5962] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 435.359013][ T5962] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 435.377898][ T5962] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.397648][ T5962] usb 4-1: config 0 descriptor?? [ 435.434279][ T5962] ldusb 4-1:0.0: Interrupt in endpoint not found [ 435.451836][ T5962] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 435.565757][ T9] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 435.651840][ T5962] usb 4-1: USB disconnect, device number 24 [ 435.726433][ T9] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 435.736755][ T9] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 435.759451][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.774608][ T30] audit: type=1400 audit(1756441165.906:479): avc: denied { getopt } for pid=10556 comm="syz.1.1151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 435.798453][ T9] aiptek 1-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 436.000938][ T5968] usb 1-1: USB disconnect, device number 22 [ 437.203961][T10564] Process accounting resumed [ 437.254614][ T5962] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 437.416977][ T5962] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 437.451122][ T5962] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 437.538770][ T5962] usb 2-1: config 0 interface 0 has no altsetting 0 [ 437.557913][ T5962] usb 2-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 437.574005][ T5962] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.591759][ T5962] usb 2-1: config 0 descriptor?? [ 438.330546][ T5962] hid-steam 0003:28DE:1102.000A: unknown main item tag 0x0 [ 438.355661][ T5962] hid-steam 0003:28DE:1102.000A: unknown main item tag 0x0 [ 438.390259][ T5962] hid-steam 0003:28DE:1102.000A: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.1-1/input0 [ 438.422132][ T68] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.556656][ T5962] hid-steam 0003:28DE:1102.000A: Steam Controller 'XXXXXXXXXX' connected [ 438.612091][ T5962] input: Steam Controller as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:28DE:1102.000A/input/input20 [ 438.626457][T10575] 9pnet: Could not find request transport: Fd [ 438.807033][ T5962] hid-steam 0003:28DE:1102.000B: unknown main item tag 0x0 [ 438.831932][ T68] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.854715][ T5962] hid-steam 0003:28DE:1102.000B: unknown main item tag 0x0 [ 438.885265][ T5962] hid-steam 0003:28DE:1102.000B: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.1-1/input0 [ 438.937822][ T5962] usb 2-1: USB disconnect, device number 27 [ 439.696299][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.702662][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.989004][T10595] fido_id[10595]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 440.096460][ T5962] hid-steam 0003:28DE:1102.000A: Steam Controller 'XXXXXXXXXX' disconnected [ 440.250399][ T68] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.295877][T10604] netlink: 'syz.1.1163': attribute type 4 has an invalid length. [ 440.470215][T10610] netlink: 'syz.1.1163': attribute type 4 has an invalid length. [ 441.021443][T10606] netlink: 'syz.2.1161': attribute type 4 has an invalid length. [ 441.306258][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 441.316010][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 441.324627][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 441.332119][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 441.339564][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 441.535623][ T5855] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 441.583545][ T5855] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 441.591776][ T5855] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 441.601179][ T5855] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 441.609444][ T5855] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 441.647102][ T30] audit: type=1400 audit(1756441171.756:480): avc: denied { mounton } for pid=10617 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 442.321310][ T68] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.386681][T10617] lo speed is unknown, defaulting to 1000 [ 443.740530][ T51] Bluetooth: hci3: command tx timeout [ 444.567488][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 444.649379][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 444.851245][ T68] bond0 (unregistering): Released all slaves [ 445.774475][ T51] Bluetooth: hci3: command tx timeout [ 446.094187][ T68] team0: Port device bond1 removed [ 446.598031][ T68] bond1 (unregistering): Released all slaves [ 446.633019][T10644] tc_dump_action: action bad kind [ 447.415548][ T68] : left promiscuous mode [ 447.612164][ T68] tipc: Disabling bearer [ 447.626674][ T68] tipc: Left network mode [ 447.858563][ T51] Bluetooth: hci3: command tx timeout [ 448.560798][T10696] tc_dump_action: action bad kind [ 448.570467][T10617] chnl_net:caif_netlink_parms(): no params data found [ 449.953912][T10731] block nbd3: NBD_DISCONNECT [ 449.963347][ T51] Bluetooth: hci3: command tx timeout [ 449.968929][T10731] block nbd3: Send disconnect failed -22 [ 450.264948][ T68] hsr_slave_0: left promiscuous mode [ 450.296705][ T68] hsr_slave_1: left promiscuous mode [ 450.316617][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 451.357295][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 451.468196][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 451.495082][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 451.547460][ T68] batman_adv: batadv0: Interface deactivated: dummy0 [ 451.594485][ T68] batman_adv: batadv0: Removing interface: dummy0 [ 451.707544][ T68] batman_adv: batadv0: Removing interface: team0 [ 451.867680][ T68] veth1_macvtap: left promiscuous mode [ 451.873527][ T68] veth0_macvtap: left promiscuous mode [ 451.913903][T10757] block nbd0: NBD_DISCONNECT [ 451.921639][ T68] veth1_vlan: left promiscuous mode [ 451.943300][ T68] veth0_vlan: left promiscuous mode [ 451.999815][T10757] block nbd0: Send disconnect failed -22 [ 453.298066][T10720] block nbd3: Disconnected due to user request. [ 453.313768][T10720] block nbd3: shutting down sockets [ 453.333688][T10763] Process accounting resumed [ 453.780491][T10780] netlink: 'syz.3.1192': attribute type 4 has an invalid length. [ 453.821044][T10752] block nbd0: Disconnected due to user request. [ 453.828568][T10752] block nbd0: shutting down sockets [ 454.530114][ T68] team0 (unregistering): Port device team_slave_1 removed [ 454.588119][ T68] team0 (unregistering): Port device team_slave_0 removed [ 454.694740][ T5968] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 454.853321][ T5968] usb 1-1: unable to get BOS descriptor or descriptor too short [ 454.863204][ T5968] usb 1-1: config 2 has an invalid interface number: 253 but max is 1 [ 454.874719][ T5968] usb 1-1: config 2 has an invalid interface number: 94 but max is 1 [ 454.892166][ T5968] usb 1-1: config 2 has no interface number 0 [ 454.901591][ T5968] usb 1-1: config 2 has no interface number 1 [ 454.911046][ T5968] usb 1-1: config 2 interface 253 has no altsetting 0 [ 454.920208][ T5968] usb 1-1: config 2 interface 94 has no altsetting 0 [ 454.935768][ T5968] usb 1-1: New USB device found, idVendor=0813, idProduct=0002, bcdDevice=ac.bf [ 454.947250][ T5968] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.959287][ T5968] usb 1-1: Product: syz [ 454.968855][ T5968] usb 1-1: Manufacturer: syz [ 454.983389][ T5968] usb 1-1: SerialNumber: syz [ 455.145363][T10617] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.161731][T10617] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.184332][T10617] bridge_slave_0: entered allmulticast mode [ 455.191762][T10617] bridge_slave_0: entered promiscuous mode [ 455.229027][ T24] lo speed is unknown, defaulting to 1000 [ 455.251964][ T24] –yz0: Port: 1 Link DOWN [ 455.261184][ T5968] usb 1-1: USB disconnect, device number 23 [ 455.281626][T10617] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.325740][T10617] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.361474][T10617] bridge_slave_1: entered allmulticast mode [ 455.387866][T10617] bridge_slave_1: entered promiscuous mode [ 456.317936][T10617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 456.391415][T10617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 456.707198][T10617] team0: Port device team_slave_0 added [ 456.722009][T10617] team0: Port device team_slave_1 added [ 457.378391][T10617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 457.402426][T10617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 457.844177][T10617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 457.858962][T10617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 457.888281][T10617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 457.941215][T10617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 458.152838][T10617] hsr_slave_0: entered promiscuous mode [ 458.160451][T10617] hsr_slave_1: entered promiscuous mode [ 458.166896][T10617] debugfs: 'hsr0' already exists in 'hsr' [ 458.172816][T10617] Cannot create hsr debugfs directory [ 458.334619][ T24] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 458.485942][ T24] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 458.526066][ T24] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 458.681265][ T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 458.691402][ T24] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 458.703758][ T24] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 458.716781][ T24] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 458.748441][ T24] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 458.761221][ T24] usb 2-1: Product: syz [ 458.771008][ T24] usb 2-1: Manufacturer: syz [ 458.817108][ T24] cdc_wdm 2-1:1.0: skipping garbage [ 458.827587][ T24] cdc_wdm 2-1:1.0: skipping garbage [ 458.879733][ T24] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 458.928567][ T24] cdc_wdm 2-1:1.0: Unknown control protocol [ 459.159541][ T24] usb 2-1: USB disconnect, device number 28 [ 459.844519][ T24] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 460.142733][T10617] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 460.198516][T10617] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 460.219174][ T24] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 460.235639][ T24] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 460.247652][ T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 460.478891][ T24] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 460.534505][ T24] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 460.555969][ T24] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 460.572461][T10617] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 460.585073][ T24] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 460.603316][ T24] usb 2-1: Product: syz [ 460.610057][ T24] usb 2-1: Manufacturer: syz [ 460.648309][T10617] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 460.691344][ T24] cdc_wdm 2-1:1.0: skipping garbage [ 460.717271][ T24] cdc_wdm 2-1:1.0: skipping garbage [ 460.745878][ T24] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 460.751846][ T24] cdc_wdm 2-1:1.0: Unknown control protocol [ 460.884899][T10617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 460.956066][ T24] usb 2-1: USB disconnect, device number 29 [ 462.562666][T10617] 8021q: adding VLAN 0 to HW filter on device team0 [ 462.624078][ T195] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.631249][ T195] bridge0: port 1(bridge_slave_0) entered forwarding state [ 462.688608][ T195] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.695703][ T195] bridge0: port 2(bridge_slave_1) entered forwarding state [ 464.693082][T10617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 466.687995][T10617] veth0_vlan: entered promiscuous mode [ 466.726858][T10617] veth1_vlan: entered promiscuous mode [ 466.799187][T10617] veth0_macvtap: entered promiscuous mode [ 466.829355][T10617] veth1_macvtap: entered promiscuous mode [ 466.882376][T10617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 466.917517][T10617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 466.948959][ T195] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.967021][ T195] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.138053][ T195] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.150796][ T195] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.373599][T10945] block nbd3: NBD_DISCONNECT [ 467.404447][T10945] block nbd3: Send disconnect failed -22 [ 467.600914][T10936] block nbd3: Disconnected due to user request. [ 467.607256][T10936] block nbd3: shutting down sockets [ 468.286311][ T6293] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 468.298288][ T6293] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 468.327604][ T6293] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 468.341471][ T6293] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 468.369309][ T30] audit: type=1400 audit(1756441198.503:481): avc: denied { mounton } for pid=10617 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 469.538075][T11022] tc_dump_action: action bad kind [ 469.879037][T11016] tc_dump_action: action bad kind [ 470.826601][ T9] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 471.014464][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 471.022655][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 471.034723][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 471.075448][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 471.124746][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 471.144568][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 471.215777][ T9] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 471.237630][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.254483][ T9] usb 5-1: Product: syz [ 471.284530][ T9] usb 5-1: Manufacturer: syz [ 471.298235][ T9] usb 5-1: SerialNumber: syz [ 471.325386][ T9] usb 5-1: config 0 descriptor?? [ 471.763842][ T9] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 471.770310][ T9] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 471.791226][ T9] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 471.799096][ T9] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 471.806828][ T9] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 471.818933][ T9] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 471.827465][ T9] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 471.833744][ T9] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 471.840434][ T9] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 471.846740][ T9] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 471.853235][ T9] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 471.859576][ T9] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 471.866183][ T9] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 471.872406][ T9] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 471.879025][ T9] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 471.885393][ T9] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 471.891803][ T9] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 471.898056][ T9] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 471.904633][ T9] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 471.910814][ T9] input input21: Timeout waiting for response from device. [ 471.921127][ T9] usb 5-1: USB disconnect, device number 17 [ 472.700405][T11060] netlink: 'syz.4.1233': attribute type 4 has an invalid length. [ 476.111416][T11085] FAULT_INJECTION: forcing a failure. [ 476.111416][T11085] name failslab, interval 1, probability 0, space 0, times 0 [ 476.137005][T11085] CPU: 1 UID: 0 PID: 11085 Comm: syz.0.1239 Not tainted syzkaller #0 PREEMPT(full) [ 476.137033][T11085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 476.137043][T11085] Call Trace: [ 476.137050][T11085] [ 476.137057][T11085] dump_stack_lvl+0x16c/0x1f0 [ 476.137075][T11085] should_fail_ex+0x512/0x640 [ 476.137091][T11085] should_failslab+0xc2/0x120 [ 476.137105][T11085] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 476.137117][T11085] ? __lock_acquire+0x62e/0x1ce0 [ 476.137134][T11085] ? dst_alloc+0x99/0x1a0 [ 476.137149][T11085] dst_alloc+0x99/0x1a0 [ 476.137160][T11085] rt_dst_alloc+0x35/0x3a0 [ 476.137176][T11085] ip_route_output_key_hash_rcu+0x880/0x28c0 [ 476.137197][T11085] ip_route_output_key_hash+0x137/0x2e0 [ 476.137215][T11085] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 476.137236][T11085] ? find_held_lock+0x2b/0x80 [ 476.137251][T11085] ip_route_output_flow+0x27/0x150 [ 476.137270][T11085] udp_sendmsg+0x1af9/0x2870 [ 476.137285][T11085] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 476.137299][T11085] ? avc_has_perm_noaudit+0x120/0x3b0 [ 476.137312][T11085] ? __pfx_udp_sendmsg+0x10/0x10 [ 476.137326][T11085] ? avc_has_perm+0x144/0x1f0 [ 476.137339][T11085] ? do_user_addr_fault+0x829/0x1370 [ 476.137355][T11085] ? sock_has_perm+0x259/0x2f0 [ 476.137369][T11085] ? __pfx_sock_has_perm+0x10/0x10 [ 476.137387][T11085] ? __import_iovec+0x1dd/0x650 [ 476.137404][T11085] ? __pfx_udp_sendmsg+0x10/0x10 [ 476.137417][T11085] inet_sendmsg+0x105/0x140 [ 476.137434][T11085] ____sys_sendmsg+0x973/0xc70 [ 476.137450][T11085] ? copy_msghdr_from_user+0x10a/0x160 [ 476.137462][T11085] ? __pfx_____sys_sendmsg+0x10/0x10 [ 476.137480][T11085] ? __pfx__kstrtoull+0x10/0x10 [ 476.137493][T11085] ___sys_sendmsg+0x134/0x1d0 [ 476.137506][T11085] ? __pfx____sys_sendmsg+0x10/0x10 [ 476.137525][T11085] ? find_held_lock+0x2b/0x80 [ 476.137547][T11085] __sys_sendmmsg+0x200/0x420 [ 476.137561][T11085] ? __pfx___sys_sendmmsg+0x10/0x10 [ 476.137577][T11085] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 476.137597][T11085] ? fput+0x9b/0xd0 [ 476.137613][T11085] ? ksys_write+0x1ac/0x250 [ 476.137625][T11085] ? __pfx_ksys_write+0x10/0x10 [ 476.137638][T11085] __x64_sys_sendmmsg+0x9c/0x100 [ 476.137650][T11085] ? lockdep_hardirqs_on+0x7c/0x110 [ 476.137662][T11085] do_syscall_64+0xcd/0x4c0 [ 476.137675][T11085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.137687][T11085] RIP: 0033:0x7efc3ef8ebe9 [ 476.137697][T11085] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 476.137707][T11085] RSP: 002b:00007efc3fe0b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 476.137718][T11085] RAX: ffffffffffffffda RBX: 00007efc3f1b5fa0 RCX: 00007efc3ef8ebe9 [ 476.137725][T11085] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000003 [ 476.137732][T11085] RBP: 00007efc3fe0b090 R08: 0000000000000000 R09: 0000000000000000 [ 476.137738][T11085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 476.137744][T11085] R13: 00007efc3f1b6038 R14: 00007efc3f1b5fa0 R15: 00007ffe9c0694e8 [ 476.137758][T11085] [ 477.168612][T11094] tc_dump_action: action bad kind [ 477.625017][T11098] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 480.394138][T11131] block nbd4: NBD_DISCONNECT [ 480.414331][T11131] block nbd4: Send disconnect failed -22 [ 480.840236][T11141] fuse: Bad value for 'fd' [ 480.846271][ T30] audit: type=1326 audit(1756441210.982:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11140 comm="syz.2.1255" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f84ac78ebe9 code=0x0 [ 480.906681][T11138] tc_dump_action: action bad kind [ 480.952787][T11145] netlink: 'syz.0.1256': attribute type 4 has an invalid length. [ 480.972462][T11145] netlink: 'syz.0.1256': attribute type 4 has an invalid length. [ 483.142445][T11121] block nbd4: Disconnected due to user request. [ 483.149307][T11121] block nbd4: shutting down sockets [ 484.565169][T11182] block nbd3: NBD_DISCONNECT [ 484.569802][T11182] block nbd3: Send disconnect failed -22 [ 486.114161][T11181] block nbd3: Disconnected due to user request. [ 486.121646][T11181] block nbd3: shutting down sockets [ 486.893538][T11213] tc_dump_action: action bad kind [ 487.189652][T11214] block nbd2: NBD_DISCONNECT [ 487.196694][T11214] block nbd2: Send disconnect failed -22 [ 487.579663][T11226] tc_dump_action: action bad kind [ 488.954488][ T24] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 489.114418][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 489.121232][ T24] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 489.134964][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 489.164019][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 489.192770][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 489.215154][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 489.241731][ T24] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 489.251257][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.259745][ T24] usb 5-1: Product: syz [ 489.280545][ T24] usb 5-1: Manufacturer: syz [ 489.298431][ T24] usb 5-1: SerialNumber: syz [ 489.312746][ T24] usb 5-1: config 0 descriptor?? [ 489.618758][ T24] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 489.633167][ T24] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 489.667067][ T24] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 489.687839][ T24] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 489.705536][ T24] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 489.726224][ T24] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 489.805001][T11205] block nbd2: Disconnected due to user request. [ 489.840423][T11205] block nbd2: shutting down sockets [ 489.866950][ T24] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 489.894798][ T24] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 489.918047][ T24] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 489.933153][ T24] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 489.946775][ T24] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 489.955139][ T24] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 489.961468][ T24] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 489.971334][ T24] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 489.997174][ T24] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 490.053922][ T24] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 490.090898][ T24] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 490.174866][ T24] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 490.194476][ T24] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 490.246105][ T24] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 490.252577][ T24] input input22: Timeout waiting for response from device. [ 490.290291][ T24] usb 5-1: USB disconnect, device number 18 [ 491.877627][T11276] wireguard0: entered promiscuous mode [ 491.907732][T11276] wireguard0: entered allmulticast mode [ 492.038631][ T30] audit: type=1400 audit(1756441222.174:483): avc: denied { bind } for pid=11283 comm="syz.1.1286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 492.077024][T11285] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1286'. [ 492.154789][ T30] audit: type=1400 audit(1756441222.204:484): avc: denied { connect } for pid=11283 comm="syz.1.1286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 492.246684][ T30] audit: type=1400 audit(1756441222.344:485): avc: denied { setopt } for pid=11283 comm="syz.1.1286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 492.454585][ T841] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 492.616288][ T841] usb 3-1: device descriptor read/64, error -71 [ 492.884488][ T841] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 493.014834][ T841] usb 3-1: device descriptor read/64, error -71 [ 493.078724][T11310] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 493.139076][ T841] usb usb3-port1: attempt power cycle [ 493.144565][ T24] IPVS: starting estimator thread 0... [ 493.344428][T11312] IPVS: using max 45 ests per chain, 108000 per kthread [ 493.440907][T11318] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1296'. [ 493.601973][ T841] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 493.686937][ T841] usb 3-1: device descriptor read/8, error -71 [ 493.944539][ T841] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 493.988959][ T841] usb 3-1: device descriptor read/8, error -71 [ 494.220942][ T841] usb usb3-port1: unable to enumerate USB device [ 494.572251][T11318] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=11318 comm=syz.1.1296 [ 494.614008][T11318] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=11318 comm=syz.1.1296 [ 494.645150][T11318] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2562 sclass=netlink_route_socket pid=11318 comm=syz.1.1296 [ 494.719100][ T841] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 494.943507][ T841] usb 5-1: config 0 has no interfaces? [ 494.951675][ T841] usb 5-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 494.960843][ T5968] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 495.000293][ T841] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.025083][ T841] usb 5-1: config 0 descriptor?? [ 495.189436][ T5968] usb 1-1: config 0 has no interfaces? [ 495.310531][T11336] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1302'. [ 495.511993][T11336] team0: entered promiscuous mode [ 495.524554][T11336] team_slave_0: entered promiscuous mode [ 495.561274][T11336] team_slave_1: entered promiscuous mode [ 495.632897][T11336] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 495.655065][T11336] team0: left promiscuous mode [ 495.666445][T11336] team_slave_0: left promiscuous mode [ 495.677975][T11336] team_slave_1: left promiscuous mode [ 495.784681][ T5968] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 495.793774][ T5968] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.836947][ T9] usb 5-1: USB disconnect, device number 19 [ 495.922547][ T5968] usb 1-1: Product: syz [ 495.932780][ T5968] usb 1-1: Manufacturer: syz [ 495.941896][ T5968] usb 1-1: SerialNumber: syz [ 495.999287][ T5968] usb 1-1: config 0 descriptor?? [ 496.156435][T11361] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1309'. [ 496.334026][ T30] audit: type=1400 audit(1756441226.464:486): avc: denied { setopt } for pid=11353 comm="syz.2.1307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 496.575627][T11371] netlink: 'syz.3.1312': attribute type 10 has an invalid length. [ 496.664718][ T30] audit: type=1400 audit(1756441226.654:487): avc: denied { setopt } for pid=11372 comm="syz.1.1314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 496.691032][T11371] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 497.333121][ T30] audit: type=1400 audit(1756441227.464:488): avc: denied { execute } for pid=11400 comm="syz.3.1325" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=28606 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 497.744420][ T24] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 497.790313][T11415] netlink: 'syz.4.1329': attribute type 10 has an invalid length. [ 497.837488][T11415] team0: Port device dummy0 added [ 497.865126][T11419] netlink: 'syz.4.1329': attribute type 10 has an invalid length. [ 497.955252][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 497.967581][ T24] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 497.991108][ T30] audit: type=1400 audit(1756441228.124:489): avc: denied { connect } for pid=11411 comm="syz.4.1329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 498.032054][ T24] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 498.087159][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.111591][ T24] usb 2-1: Product: syz [ 498.121739][ T24] usb 2-1: Manufacturer: syz [ 498.138043][ T24] usb 2-1: SerialNumber: syz [ 498.165295][ T24] usb 2-1: config 0 descriptor?? [ 498.206031][T11403] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 498.219043][ T30] audit: type=1400 audit(1756441228.354:490): avc: denied { ioctl } for pid=11421 comm="syz.3.1332" path="socket:[29993]" dev="sockfs" ino=29993 ioctlcmd=0x8912 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 498.276583][ T24] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input23 [ 498.363671][T11419] team0: Port device dummy0 removed [ 498.421439][T11419] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 499.926479][T11441] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1335'. [ 500.385058][ T24] usb 2-1: USB disconnect, device number 30 [ 500.385107][ C1] usbtouchscreen 2-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 500.610125][ T30] audit: type=1400 audit(1756441230.704:491): avc: denied { create } for pid=11450 comm="syz.1.1338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 500.630267][ C1] vkms_vblank_simulate: vblank timer overrun [ 500.643423][T11446] libceph: resolve '4..' (ret=-3): failed [ 500.679542][ T24] usb 1-1: USB disconnect, device number 24 [ 501.023223][T11457] lo speed is unknown, defaulting to 1000 [ 501.139039][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.145379][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.295157][ T5968] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 501.405270][T11461] netlink: 'syz.2.1339': attribute type 13 has an invalid length. [ 501.444485][ T30] audit: type=1400 audit(1756441231.574:492): avc: denied { execmem } for pid=11466 comm="syz.3.1342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 501.495999][ T5968] usb 1-1: config 0 has no interfaces? [ 501.530108][ T5968] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 501.540344][ T5968] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.549640][ T5968] usb 1-1: Product: syz [ 501.553791][ T5968] usb 1-1: Manufacturer: syz [ 501.559138][ T5968] usb 1-1: SerialNumber: syz [ 501.566273][ T5968] usb 1-1: config 0 descriptor?? [ 501.694655][ T30] audit: type=1400 audit(1756441231.794:493): avc: denied { ioctl } for pid=11471 comm="syz.4.1343" path="socket:[30102]" dev="sockfs" ino=30102 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 501.891134][ T30] audit: type=1326 audit(1756441232.024:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11466 comm="syz.3.1342" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f751db8ebe9 code=0x0 [ 501.917771][T11461] 8021q: adding VLAN 0 to HW filter on device bond0 [ 501.931928][T11461] 8021q: adding VLAN 0 to HW filter on device team0 [ 502.028961][T11461] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 502.168815][T11457] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.411320][ T30] audit: type=1400 audit(1756441232.534:495): avc: denied { write } for pid=11479 comm="syz.4.1345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 503.371942][T11482] delete_channel: no stack [ 503.805965][ T30] audit: type=1400 audit(1756441233.934:496): avc: denied { mounton } for pid=11489 comm="syz.4.1347" path="/" dev="ramfs" ino=30765 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 503.914980][ T5962] usb 1-1: USB disconnect, device number 25 [ 505.206907][T11504] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1348'. [ 507.255367][ T5962] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 507.460483][T11545] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 507.487601][ T30] audit: type=1400 audit(1756441237.614:497): avc: denied { write } for pid=11530 comm="syz.4.1357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 507.525093][ T30] audit: type=1400 audit(1756441237.624:498): avc: denied { nlmsg_write } for pid=11530 comm="syz.4.1357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 507.547116][ T5962] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 507.556134][ T5962] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 507.614450][ T5962] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 507.623613][ T5962] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 507.634862][ T5962] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 507.651107][ T5962] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 507.660643][ T5962] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 507.680446][ T5962] usb 4-1: Product: syz [ 507.690795][ T5962] usb 4-1: Manufacturer: syz [ 507.737859][ T5962] cdc_wdm 4-1:1.0: skipping garbage [ 507.747124][ T5962] cdc_wdm 4-1:1.0: skipping garbage [ 507.753846][ T5962] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 507.759966][ T5962] cdc_wdm 4-1:1.0: Unknown control protocol [ 507.914127][ T30] audit: type=1400 audit(1756441238.044:499): avc: denied { read write } for pid=11526 comm="syz.3.1355" name="cdc-wdm0" dev="devtmpfs" ino=3141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 507.940560][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 507.957245][ T30] audit: type=1400 audit(1756441238.074:500): avc: denied { open } for pid=11526 comm="syz.3.1355" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 508.146925][ T5934] usb 4-1: USB disconnect, device number 25 [ 508.320666][ T30] audit: type=1400 audit(1756441238.454:501): avc: denied { write } for pid=11547 comm="syz.0.1362" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 509.928812][T11589] IPVS: Scheduler module ip_vs_ not found [ 510.054467][ T5962] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 510.169781][ T30] audit: type=1400 audit(1756441240.304:502): avc: denied { create } for pid=11600 comm="syz.4.1377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 510.208049][ T5962] usb 1-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 510.225088][ T5962] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.241873][ T5962] usb 1-1: Product: syz [ 510.253732][ T5962] usb 1-1: Manufacturer: syz [ 510.268629][ T5962] usb 1-1: SerialNumber: syz [ 510.288729][ T5962] usb 1-1: config 0 descriptor?? [ 510.315867][ T5962] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 510.765598][ T841] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 510.801929][ T5962] gspca_sq905c: sq905c_read: usb_control_msg failed (-32) [ 510.809231][ T5962] sq905c 1-1:0.0: Reading version command failed [ 510.894614][ T5962] sq905c 1-1:0.0: probe with driver sq905c failed with error -32 [ 510.904447][ T841] usb 4-1: device descriptor read/64, error -71 [ 510.956555][ T5962] usb 1-1: USB disconnect, device number 26 [ 511.154603][ T841] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 511.294440][ T841] usb 4-1: device descriptor read/64, error -71 [ 511.416639][ T841] usb usb4-port1: attempt power cycle [ 511.764558][ T841] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 511.795192][ T841] usb 4-1: device descriptor read/8, error -71 [ 511.976244][T11606] IPVS: set_ctl: invalid protocol: 44 10.1.129.2:20003 [ 512.054607][ T841] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 512.091004][ T841] usb 4-1: device descriptor read/8, error -71 [ 512.236839][ T841] usb usb4-port1: unable to enumerate USB device [ 513.846303][ T30] audit: type=1400 audit(1756441243.954:503): avc: denied { bind } for pid=11642 comm="syz.1.1386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 514.576316][ T30] audit: type=1400 audit(1756441244.714:504): avc: denied { create } for pid=11662 comm="syz.3.1393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 514.748293][ T841] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 514.944404][ T841] usb 5-1: Using ep0 maxpacket: 8 [ 514.950916][ T841] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 515.057244][T11648] delete_channel: no stack [ 515.083450][ T841] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 515.190608][ T841] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.227002][ T841] usb 5-1: config 0 descriptor?? [ 515.485293][ T841] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 515.855534][T11674] lo speed is unknown, defaulting to 1000 [ 516.059845][ T841] usb 5-1: USB disconnect, device number 20 [ 516.514166][T11674] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1396'. [ 516.650202][ T30] audit: type=1400 audit(1756441246.784:505): avc: denied { setopt } for pid=11669 comm="syz.1.1396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 517.255201][T11690] dvmrp0: entered allmulticast mode [ 517.422118][T11695] lo speed is unknown, defaulting to 1000 [ 517.684412][ T841] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 517.890836][ T841] usb 5-1: Using ep0 maxpacket: 8 [ 517.904186][ T841] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 517.924442][ T841] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 517.964045][ T841] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.979599][ T841] usb 5-1: config 0 descriptor?? [ 518.238016][ T841] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 518.658043][ T841] usb 5-1: USB disconnect, device number 21 [ 519.176264][T11734] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 519.248259][T11734] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 520.472646][ T30] audit: type=1400 audit(1756441250.574:506): avc: denied { append } for pid=11749 comm="syz.4.1419" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 520.594462][ T5962] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 520.694544][ T9] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 520.757899][ T5962] usb 2-1: Using ep0 maxpacket: 32 [ 520.775924][ T5962] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 520.826636][ T5962] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 520.849697][ T5962] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.868900][ T9] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 520.953707][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 521.019546][ T5962] usb 2-1: Product: syz [ 521.029536][ T5962] usb 2-1: Manufacturer: syz [ 521.046272][ T9] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 521.055737][ T5962] usb 2-1: SerialNumber: syz [ 521.138311][ T9] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 521.206895][ T5962] usb 2-1: config 0 descriptor?? [ 521.212110][ T9] usb 1-1: Manufacturer: syz [ 521.237208][ T9] usb 1-1: config 0 descriptor?? [ 521.247780][T11767] netlink: 'syz.4.1424': attribute type 10 has an invalid length. [ 521.381902][T11767] bond0: (slave dummy0): Releasing backup interface [ 521.398516][T11769] netlink: 'syz.4.1424': attribute type 10 has an invalid length. [ 521.401131][T11744] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 521.419241][ T5962] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input25 [ 521.429893][ T9] rc_core: IR keymap rc-hauppauge not found [ 521.439227][ T9] Registered IR keymap rc-empty [ 521.476731][ T9] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 521.490881][T11767] team0: Port device dummy0 added [ 521.544010][T11769] team0: Port device dummy0 removed [ 521.573767][ T9] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input24 [ 521.689002][T11769] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 523.355828][T11783] netlink: 'syz.2.1425': attribute type 13 has an invalid length. [ 523.355855][T11783] netlink: 'syz.2.1425': attribute type 27 has an invalid length. [ 524.434567][ T841] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 524.487426][ T5968] usb 2-1: USB disconnect, device number 31 [ 524.487525][ C0] usbtouchscreen 2-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 524.566010][ T30] audit: type=1400 audit(1756441254.704:507): avc: denied { append } for pid=11798 comm="syz.1.1433" name="video7" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 524.584736][ T841] usb 4-1: Using ep0 maxpacket: 8 [ 524.586367][ T841] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 524.586412][ T841] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 524.586433][ T841] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.588141][ T841] usb 4-1: config 0 descriptor?? [ 524.836183][ T841] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 524.911693][T11804] hsr0: entered promiscuous mode [ 524.915340][T11804] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1433'. [ 524.917328][T11804] hsr_slave_0: left promiscuous mode [ 524.918739][T11804] hsr_slave_1: left promiscuous mode [ 524.988677][T11804] hsr0 (unregistering): left promiscuous mode [ 525.318176][ T841] usb 4-1: USB disconnect, device number 30 [ 525.667710][T11819] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1438'. [ 526.713651][T11834] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1441'. [ 526.731834][T11834] netlink: 'syz.3.1441': attribute type 13 has an invalid length. [ 527.062121][ T30] audit: type=1400 audit(1756441257.194:508): avc: denied { override_creds } for pid=11835 comm="syz.2.1443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 527.400691][T11834] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 527.574423][ T9] lo speed is unknown, defaulting to 1000 [ 527.581507][ T9] –yz0: Port: 1 Link ACTIVE [ 527.588703][T11837] netlink: 'syz.4.1442': attribute type 1 has an invalid length. [ 528.113133][ T5968] usb 1-1: USB disconnect, device number 27 [ 528.246601][T11848] trusted_key: encrypted_key: key user:syz not found [ 528.647910][T11855] bridge0: entered allmulticast mode [ 528.654026][T11855] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1447'. [ 528.668258][T11855] bridge_slave_1: left allmulticast mode [ 528.681210][T11855] bridge_slave_1: left promiscuous mode [ 528.696572][T11855] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.476814][ T30] audit: type=1326 audit(1756441259.614:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11858 comm="syz.3.1448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f751db8ebe9 code=0x7ffc0000 [ 529.566891][ T30] audit: type=1326 audit(1756441259.644:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11858 comm="syz.3.1448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f751db8ebe9 code=0x7ffc0000 [ 529.590245][ C1] vkms_vblank_simulate: vblank timer overrun [ 529.598283][ T30] audit: type=1326 audit(1756441259.664:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11858 comm="syz.3.1448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f751db8ebe9 code=0x7ffc0000 [ 529.626764][ T30] audit: type=1326 audit(1756441259.664:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11858 comm="syz.3.1448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f751db8ebe9 code=0x7ffc0000 [ 529.652134][ T30] audit: type=1326 audit(1756441259.664:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11858 comm="syz.3.1448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f751db8ebe9 code=0x7ffc0000 [ 529.676501][ C1] vkms_vblank_simulate: vblank timer overrun [ 529.824132][ T30] audit: type=1326 audit(1756441259.704:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11858 comm="syz.3.1448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f751db8ebe9 code=0x7ffc0000 [ 529.884995][ T30] audit: type=1326 audit(1756441259.704:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11858 comm="syz.3.1448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f751db8ebe9 code=0x7ffc0000 [ 529.908416][ C1] vkms_vblank_simulate: vblank timer overrun [ 529.918905][ T30] audit: type=1326 audit(1756441259.704:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11858 comm="syz.3.1448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f751db8ebe9 code=0x7ffc0000 [ 529.942172][ C1] vkms_vblank_simulate: vblank timer overrun [ 529.954459][ T30] audit: type=1326 audit(1756441259.704:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11858 comm="syz.3.1448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f751db8ebe9 code=0x7ffc0000 [ 530.004678][T11855] bridge_slave_0: left allmulticast mode [ 530.010437][T11855] bridge_slave_0: left promiscuous mode [ 530.017431][T11855] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.036235][T11855] bridge0 (unregistering): left allmulticast mode [ 530.721793][T11871] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1451'. [ 530.818456][T11874] netlink: 'syz.3.1453': attribute type 1 has an invalid length. [ 530.909505][T11877] bond1: entered promiscuous mode [ 530.933414][T11877] bond1: entered allmulticast mode [ 530.940525][T11877] 8021q: adding VLAN 0 to HW filter on device bond1 [ 531.016375][T11874] bridge2: entered promiscuous mode [ 531.022930][T11874] bridge2: entered allmulticast mode [ 531.030966][ T195] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 531.083411][T11874] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 531.206610][ T195] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 531.349542][T11900] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 531.822517][T11910] syzkaller1: entered promiscuous mode [ 531.838709][T11910] syzkaller1: entered allmulticast mode [ 532.164609][ T9] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 532.344407][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 532.350910][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 532.362642][ T9] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 532.371884][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.382780][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 532.382792][ T30] audit: type=1400 audit(1756441262.514:521): avc: denied { bind } for pid=11915 comm="syz.3.1465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 532.411241][T11916] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN NOPTI [ 532.423306][T11916] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 532.431717][T11916] CPU: 0 UID: 0 PID: 11916 Comm: syz.3.1465 Not tainted syzkaller #0 PREEMPT(full) [ 532.441072][T11916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 532.451116][T11916] RIP: 0010:xfrm_state_find+0x6992/0x84c0 [ 532.456831][T11916] Code: 03 48 c1 e2 2a 80 3c 11 00 0f 85 76 14 00 00 48 8b 85 98 fe ff ff ba ff ff 37 00 48 c1 e2 2a 4c 8b 70 30 4c 89 f1 48 c1 e9 03 <80> 3c 11 00 0f 85 44 14 00 00 4c 89 ea b8 ff ff 37 00 4d 89 26 48 [ 532.476417][T11916] RSP: 0018:ffffc9000c116f78 EFLAGS: 00010246 [ 532.482472][T11916] RAX: ffff88805c2a4880 RBX: ffff888052c18440 RCX: 0000000000000000 [ 532.490855][T11916] RDX: dffffc0000000000 RSI: 1ffff1100b854916 RDI: 0000000000000001 [ 532.498805][T11916] RBP: ffffc9000c1171a8 R08: 0000000000000001 R09: 0000000000000008 [ 532.506754][T11916] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88805c2a48a8 [ 532.514707][T11916] R13: ffff888052c18470 R14: 0000000000000000 R15: ffff888052c18468 [ 532.522659][T11916] FS: 00007f751e95c6c0(0000) GS:ffff8881246b9000(0000) knlGS:0000000000000000 [ 532.531567][T11916] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 532.538131][T11916] CR2: 000000110c37cc0a CR3: 0000000034a06000 CR4: 00000000003526f0 [ 532.546083][T11916] Call Trace: [ 532.549341][T11916] [ 532.552256][T11916] ? __pfx_xfrm_state_find+0x10/0x10 [ 532.557534][T11916] ? __rt6_find_exception_rcu+0x2cb/0x3c0 [ 532.563247][T11916] ? rt6_find_cached_rt+0x1d6/0x280 [ 532.568427][T11916] xfrm_resolve_and_create_bundle+0x4cd/0x3740 [ 532.574572][T11916] ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10 [ 532.581150][T11916] ? find_held_lock+0x2b/0x80 [ 532.585808][T11916] ? ip6_dst_lookup_tail.constprop.0+0x852/0x2140 [ 532.592199][T11916] ? xfrm_expand_policies.constprop.0+0x252/0x6a0 [ 532.598597][T11916] xfrm_lookup_with_ifid+0x2a0/0x1e40 [ 532.603953][T11916] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 532.609741][T11916] ? __pfx_ip6_dst_lookup_tail.constprop.0+0x10/0x10 [ 532.616397][T11916] ? __lock_acquire+0x62e/0x1ce0 [ 532.621324][T11916] xfrm_lookup_route+0x3b/0x200 [ 532.626166][T11916] ip6_dst_lookup_flow+0x15c/0x1d0 [ 532.631260][T11916] ? __pfx_ip6_dst_lookup_flow+0x10/0x10 [ 532.636873][T11916] ? find_held_lock+0x2b/0x80 [ 532.641531][T11916] ? rawv6_sendmsg+0xb6e/0x4820 [ 532.646370][T11916] rawv6_sendmsg+0xe85/0x4820 [ 532.651031][T11916] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 532.656125][T11916] ? avc_has_perm_noaudit+0x149/0x3b0 [ 532.661491][T11916] ? avc_has_perm+0x144/0x1f0 [ 532.666146][T11916] ? __pfx_avc_has_perm+0x10/0x10 [ 532.671145][T11916] ? lock_acquire+0x179/0x350 [ 532.675811][T11916] ? __import_iovec+0x1dd/0x650 [ 532.680641][T11916] ? __might_fault+0xe3/0x190 [ 532.685293][T11916] ? __might_fault+0x13b/0x190 [ 532.690033][T11916] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 532.695127][T11916] ? inet_sendmsg+0x11c/0x140 [ 532.699787][T11916] inet_sendmsg+0x11c/0x140 [ 532.704272][T11916] ____sys_sendmsg+0x973/0xc70 [ 532.709018][T11916] ? copy_msghdr_from_user+0x10a/0x160 [ 532.714458][T11916] ? __pfx_____sys_sendmsg+0x10/0x10 [ 532.719724][T11916] ? find_held_lock+0x2b/0x80 [ 532.724381][T11916] ? futex_unqueue+0x133/0x2c0 [ 532.729128][T11916] ___sys_sendmsg+0x134/0x1d0 [ 532.733784][T11916] ? __pfx____sys_sendmsg+0x10/0x10 [ 532.738966][T11916] ? find_held_lock+0x2b/0x80 [ 532.743629][T11916] __sys_sendmmsg+0x200/0x420 [ 532.748287][T11916] ? __pfx___sys_sendmmsg+0x10/0x10 [ 532.753464][T11916] ? __pfx_do_futex+0x10/0x10 [ 532.758124][T11916] ? fput+0x9b/0xd0 [ 532.761916][T11916] ? xfd_validate_state+0x61/0x180 [ 532.767012][T11916] __x64_sys_sendmmsg+0x9c/0x100 [ 532.771925][T11916] ? lockdep_hardirqs_on+0x7c/0x110 [ 532.777100][T11916] do_syscall_64+0xcd/0x4c0 [ 532.781581][T11916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.787461][T11916] RIP: 0033:0x7f751db8ebe9 [ 532.791872][T11916] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 532.811474][T11916] RSP: 002b:00007f751e95c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 532.819868][T11916] RAX: ffffffffffffffda RBX: 00007f751ddb5fa0 RCX: 00007f751db8ebe9 [ 532.827817][T11916] RDX: 00000000000002e9 RSI: 0000200000000480 RDI: 0000000000000006 [ 532.835765][T11916] RBP: 00007f751dc11e19 R08: 0000000000000000 R09: 0000000000000000 [ 532.843711][T11916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 532.851667][T11916] R13: 00007f751ddb6038 R14: 00007f751ddb5fa0 R15: 00007fff2f8d6ef8 [ 532.859637][T11916] [ 532.862639][T11916] Modules linked in: [ 532.866621][T11916] ---[ end trace 0000000000000000 ]--- [ 532.872070][T11916] RIP: 0010:xfrm_state_find+0x6992/0x84c0 [ 532.877807][T11916] Code: 03 48 c1 e2 2a 80 3c 11 00 0f 85 76 14 00 00 48 8b 85 98 fe ff ff ba ff ff 37 00 48 c1 e2 2a 4c 8b 70 30 4c 89 f1 48 c1 e9 03 <80> 3c 11 00 0f 85 44 14 00 00 4c 89 ea b8 ff ff 37 00 4d 89 26 48 [ 532.897432][T11916] RSP: 0018:ffffc9000c116f78 EFLAGS: 00010246 [ 532.903478][T11916] RAX: ffff88805c2a4880 RBX: ffff888052c18440 RCX: 0000000000000000 [ 532.911444][T11916] RDX: dffffc0000000000 RSI: 1ffff1100b854916 RDI: 0000000000000001 [ 532.919400][T11916] RBP: ffffc9000c1171a8 R08: 0000000000000001 R09: 0000000000000008 [ 532.927353][T11916] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88805c2a48a8 [ 532.935305][T11916] R13: ffff888052c18470 R14: 0000000000000000 R15: ffff888052c18468 [ 532.943246][T11916] FS: 00007f751e95c6c0(0000) GS:ffff8881246b9000(0000) knlGS:0000000000000000 [ 532.952199][T11916] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 532.958859][T11916] CR2: 000000110c37cc0a CR3: 0000000034a06000 CR4: 00000000003526f0 [ 532.966878][T11916] Kernel panic - not syncing: Fatal exception in interrupt [ 532.974287][T11916] Kernel Offset: disabled [ 532.978605][T11916] Rebooting in 86400 seconds..