last executing test programs: 6.263749607s ago: executing program 0 (id=162): unshare(0x2a020400) r0 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$IP_SET_OP_GET_BYINDEX(r0, 0x1, 0x53, 0x0, &(0x7f0000000b80)) 6.189981628s ago: executing program 0 (id=163): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x80020100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000200)=0x1ff) quotactl$Q_QUOTAOFF(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r3, &(0x7f00000002c0)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f00000192c0)=0x7) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) symlinkat(&(0x7f0000019400)='./config/usb_gadget/g1/functions/uvc.0\x00', 0xffffffffffffff9c, &(0x7f0000019440)='./config/usb_gadget/g1/configs/c.1/uvc.0\x00') 5.802134088s ago: executing program 0 (id=165): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5.257452911s ago: executing program 0 (id=173): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x7, 0x104}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x803, 0x4, 0x7}) r3 = fsopen(&(0x7f0000000200)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) chown(&(0x7f0000000000)='.\x00', 0x0, 0xffffffffffffffff) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x7fffffff, 0xd, "00080000000000000000000cadf100004000"}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(0xffffffffffffffff, 0x40045402, &(0x7f0000000040)=0x1) 4.317404044s ago: executing program 0 (id=178): syz_usb_connect$uac1(0x0, 0xb1, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000000000106b1d0101890f000003010902"], 0x0) syz_usb_connect(0x5, 0x0, 0x0, &(0x7f0000000800)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x310, 0x8b, 0xe, 0x10, 0xff, 0x10}, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f000021b000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00003fd000/0x2000)=nil) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) openat(0xffffffffffffffff, &(0x7f0000000240)='./cgroup.cpu/test/memory.oom_control\x00', 0x2000, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000007feffff720af0fff8ffffff71a4f0ff0000000061105a00000000001d400500000000004704000001ed00000f030000000000001d440000000000006b0a00fe000000007303000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88"], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001240)={0x0, 0x8}, 0x8, 0x10, &(0x7f0000001280), 0x10}, 0x94) r4 = dup(r2) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f0000001c80)=0xffff) 4.317102034s ago: executing program 2 (id=179): clock_gettime(0x0, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) setitimer(0x1, &(0x7f0000000040)={{r0, r1/1000+60000}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x5, 0x0, @dev, @private=0xa010100}, {{0x0, 0x100, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000300), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000340), 0x80002c1, 0x2, 0x0) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x2, 0x1000, @empty}, 0x1c) 3.061254155s ago: executing program 3 (id=187): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x80020100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000200)=0x1ff) quotactl$Q_QUOTAOFF(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r3, &(0x7f00000002c0)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f00000192c0)=0x7) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) symlinkat(&(0x7f0000019400)='./config/usb_gadget/g1/functions/uvc.0\x00', 0xffffffffffffff9c, &(0x7f0000019440)='./config/usb_gadget/g1/configs/c.1/uvc.0\x00') 2.723108694s ago: executing program 3 (id=188): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x0, {}, 0x0, 0xffffffffffffffff}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e00000066ef64f30fc7b000100f850100f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f23f8b8f4008ee0", 0x57}], 0x1, 0x2e, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.500496909s ago: executing program 2 (id=189): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000140)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}], 0x1, 0xc040) 2.425344391s ago: executing program 2 (id=190): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file1\x00', 0x0, &(0x7f0000000000), 0x1, 0x250, &(0x7f0000000e00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x1d8) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000b80)=ANY=[@ANYRES16=r0, @ANYRES16=r3], 0x2c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000280), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000300)=0x2) recvmmsg(r4, &(0x7f0000000340), 0x10106, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000280)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000600)=@newtclass={0x60, 0x28, 0x5ff, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r7, {0x1, 0xfff1}, {0x1, 0xfff1}}, [@tclass_kind_options=@c_htb={{0x8}, {0x34, 0x2, [@TCA_HTB_PARMS={0x30, 0x1, {{0x9, 0x1, 0x0, 0x3f1, 0x2, 0x5}, {0x8, 0x2, 0x8, 0x7b, 0x7ff, 0x4}, 0x4, 0x7, 0xffff, 0x8, 0x644}}]}}]}, 0x60}}, 0x0) 2.359058713s ago: executing program 1 (id=191): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet(0x2, 0x3, 0x1) sendmsg$inet(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x4e1e, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10, 0x0}, 0x24008004) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000640)={r1, &(0x7f0000000000), &(0x7f0000000600)=@udp=r2, 0x2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r3, r5}, 0x14) syz_emit_ethernet(0x7a, &(0x7f0000002100)={@local, @remote, @void, {@ipv6={0x86dd, @gre_packet={0x9, 0x6, "46da8a", 0x44, 0x2f, 0xff, @private2, @empty, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x2}, {0x1}, {0x0, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x1, {{0x2, 0x1, 0x3, 0x0, 0x0, 0x1, 0x4}, 0x1, {0x3}}}, {0x8, 0x22eb, 0x0, {{0x4, 0x2, 0x8, 0x0, 0x1, 0x1, 0x7, 0x53}, 0x2, {0x1ff, 0x7, 0x0, 0x7, 0x1, 0x1, 0x0, 0x1}}}, {0x8, 0x6558, 0x1}}}}}}}, 0x0) 2.309776474s ago: executing program 1 (id=192): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000540)='./dev\x00', &(0x7f0000000580)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./dev/ram0\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000600)="fc4e2ba9", 0x4, 0x1000) pwrite64(r0, &(0x7f0000000640)="01", 0x1, 0x1004) pwrite64(r0, &(0x7f0000000680)="01", 0x1, 0x1008) pwrite64(r0, &(0x7f00000006c0)='\b', 0x1, 0x1060) pwrite64(r0, &(0x7f0000000700)="10", 0x1, 0x1080) pwrite64(r0, &(0x7f0000000780)='\b', 0x1, 0x1090) fsync(r0) 2.144127438s ago: executing program 1 (id=193): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.984464022s ago: executing program 1 (id=194): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000540)='./dev\x00', &(0x7f0000000580)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./dev/ram0\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000600)="fc4e2ba9", 0x4, 0x1000) 1.984204112s ago: executing program 1 (id=195): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000002c0)={0x1, 0x0, 0x0, &(0x7f0000000300)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000380)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000003c0)={0x0, 0x1, 0x0, &(0x7f0000000400)=""/185, &(0x7f00000004c0)=""/92, 0x4000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000540)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000580)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f00000006c0)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) 1.983726232s ago: executing program 2 (id=196): prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000480)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000580), 0x318, 0x0) recvmmsg(r1, &(0x7f00000005c0), 0x10106, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) 1.813442555s ago: executing program 3 (id=197): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000013c0), 0x4b301, 0x0) writev(r0, &(0x7f0000001740)=[{&(0x7f0000001780)='*', 0x1}], 0x1) 1.788281327s ago: executing program 3 (id=198): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2a, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}}, 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[], 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000003c0)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000440)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) mount(&(0x7f0000000540)=@filename='usb0\x00', &(0x7f0000000580)='./ffs\x00', &(0x7f0000000780)='ubifs\x00', 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000540), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f0000000580), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@migrate={0x50, 0x21, 0x1, 0x400000, 0x0, {{@in6=@private2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x1}}}, 0x50}}, 0x0) 1.097452093s ago: executing program 1 (id=200): clock_gettime(0x0, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) setitimer(0x1, &(0x7f0000000040)={{r0, r1/1000+60000}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x5, 0x0, @dev, @private=0xa010100}, {{0x0, 0x100, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000300), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000340), 0x80002c1, 0x2, 0x0) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x2, 0x1000, @empty}, 0x1c) 1.022260535s ago: executing program 2 (id=202): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet(0x2, 0x3, 0x1) sendmsg$inet(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x4e1e, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10, 0x0}, 0x24008004) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000640)={r1, &(0x7f0000000000), &(0x7f0000000600)=@udp=r2, 0x2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r3, r5}, 0x14) syz_emit_ethernet(0x7a, &(0x7f0000002100)={@local, @remote, @void, {@ipv6={0x86dd, @gre_packet={0x9, 0x6, "46da8a", 0x44, 0x2f, 0xff, @private2, @empty, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x2}, {0x1}, {0x0, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x1, {{0x2, 0x1, 0x3, 0x0, 0x0, 0x1, 0x4}, 0x1, {0x3}}}, {0x8, 0x22eb, 0x0, {{0x4, 0x2, 0x8, 0x0, 0x1, 0x1, 0x7, 0x53}, 0x2, {0x1ff, 0x7, 0x0, 0x7, 0x1, 0x1, 0x0, 0x1}}}, {0x8, 0x6558, 0x1}}}}}}}, 0x0) 1.010876886s ago: executing program 4 (id=203): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000540)='./dev\x00', &(0x7f0000000580)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./dev/ram0\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000600)="fc4e2ba9", 0x4, 0x1000) pwrite64(r0, &(0x7f0000000640)="01", 0x1, 0x1004) pwrite64(r0, &(0x7f0000000680)="01", 0x1, 0x1008) pwrite64(r0, &(0x7f00000006c0)='\b', 0x1, 0x1060) pwrite64(r0, &(0x7f0000000740)='\n', 0x1, 0x1088) pwrite64(r0, &(0x7f0000000780)='\b', 0x1, 0x1090) fsync(r0) 1.010148895s ago: executing program 2 (id=204): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000240), 0x0, 0x0) syz_usb_connect$rtl8150(0x0, 0x3f, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) ioctl$EVIOCRMFF(r0, 0xc0085508, 0x0) 1.004596886s ago: executing program 4 (id=205): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@newlink={0x3c, 0x10, 0x401, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2400, 0x4100}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x3c}}, 0x4000000) 945.505897ms ago: executing program 4 (id=206): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000540)='./dev\x00', &(0x7f0000000580)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./dev/ram0\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000600)="fc4e2ba9", 0x4, 0x1000) 934.480857ms ago: executing program 4 (id=207): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file1\x00', 0x0, &(0x7f0000000000), 0x1, 0x250, &(0x7f0000000e00)="$eJzs3T9oJFUcB/DvzO565m7RUxtB/AMiooFwdoLN2SgcyHGICCqciNgod8J5h11iZWOhtUoqmyB2RktJE2wUwSpqitgIGiwMFlqs7M4G8mc1ZnfdkcznA5OZybyZ3xt2vm+3ebsBGutskvNJWknmk3SSFHsb3FctZ4e7y3Prl5Ne7+lfi0G7ar+ye96ZJEtJHk2yVhZ5tZ3cWH1+6/eNJx9853rngY9Wn5ub6U0ObW9tPrXz4cW3P73wyI2vv/35YpHz6e67r+krRvyvXSS3/xfF/ieKdt094N+49OYn3/Vzf0eS+wf576RM9eK9e+2mtU4e/uDvzn3vl2/ummVfgenr9Tr998ClHtA4ZZJuinIhSbVdlgsL1Wf471uny9euXntj/pWr16+8XPdIBUxLN9l84vNTn505kP+fWlX+gZOrn/9nLq380N/eadXdG2Am7q5W/fzPv7j4UOQfGkf+obnkH5pL/qG55B+aS/6hueQfTrDOPx+Wf2gu+Yfmkn9orr35BwCapXdqnFnDt05/IjIwc3WPPwAAAAAAAAAAAAAAAAAAwGHLc+uXd5dxr1Ecs/2X7yfbjydpj6rfGvwecXLz4O/p34p+s3212uN2dOiFeye8wIQ+rnn29S0/1lv/q3vqrb94JVl6K8m5dvvw81cMn7/x3XbE8c5LExY4poP5fOzZ2dY/6M+Veutf2Ei+6I8/50aNP2XuHKxHjz/do79i+Uiv/zHhBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJiZvwIAAP//1rxsXQ==") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x1d8) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000b80)=ANY=[@ANYRES16=r0, @ANYRES16=r3], 0x2c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000280), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000300)=0x2) recvmmsg(r4, &(0x7f0000000340), 0x10106, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000280)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000600)=@newtclass={0x60, 0x28, 0x5ff, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r7, {0x1, 0xfff1}, {0x1, 0xfff1}}, [@tclass_kind_options=@c_htb={{0x8}, {0x34, 0x2, [@TCA_HTB_PARMS={0x30, 0x1, {{0x9, 0x1, 0x0, 0x3f1, 0x2, 0x5}, {0x8, 0x2, 0x8, 0x7b, 0x7ff, 0x4}, 0x4, 0x7, 0xffff, 0x8, 0x644}}]}}]}, 0x60}}, 0x0) 873.465318ms ago: executing program 3 (id=208): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bind$bt_sco(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e26, 0x8, @mcast1, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) sendmmsg$inet(r0, &(0x7f0000002500), 0x4000000000000e7, 0x2400c8c4) 470.604929ms ago: executing program 0 (id=209): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2718, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x21, 0x0, 0x0) r3 = socket(0x10, 0x80003, 0x0) write(r3, &(0x7f0000000000)="240000001a005f0214f9f4e6ff0804000a000000fe0000000000aa0008000f00fd000000", 0x24) close_range(r3, 0xffffffffffffffff, 0x0) 428.86174ms ago: executing program 3 (id=210): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) 427.98888ms ago: executing program 4 (id=211): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x80020100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000200)=0x1ff) quotactl$Q_QUOTAOFF(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r2, &(0x7f00000002c0)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x47, &(0x7f00000192c0)=0x7) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) symlinkat(&(0x7f0000019400)='./config/usb_gadget/g1/functions/uvc.0\x00', 0xffffffffffffff9c, &(0x7f0000019440)='./config/usb_gadget/g1/configs/c.1/uvc.0\x00') 0s ago: executing program 4 (id=212): socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x8001, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}, {0x0, 0x0, 0x0, 0x800, 0x7}, {0x0, 0x0, 0xe6}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@remote, 0x404d3, 0x2b}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}}, 0xe4) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300020000000000fedbdf25fc00000000000000e9ffffffffffffffe000000100000000000000000000000000000004000000000a006080"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfc, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8, 0x4}, {0x0, 0x8}}}, 0xb8}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.184' (ED25519) to the list of known hosts. [ 20.998071][ T30] audit: type=1400 audit(1792023695.401:64): avc: denied { mounton } for pid=277 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.001424][ T277] cgroup: Unknown subsys name 'net' [ 21.020854][ T30] audit: type=1400 audit(1792023695.401:65): avc: denied { mount } for pid=277 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.048578][ T30] audit: type=1400 audit(1792023695.451:66): avc: denied { unmount } for pid=277 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.049038][ T277] cgroup: Unknown subsys name 'devices' [ 21.199457][ T277] cgroup: Unknown subsys name 'hugetlb' [ 21.205075][ T277] cgroup: Unknown subsys name 'rlimit' [ 21.374207][ T30] audit: type=1400 audit(1792023695.771:67): avc: denied { setattr } for pid=277 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.397938][ T30] audit: type=1400 audit(1792023695.771:68): avc: denied { mounton } for pid=277 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 21.422781][ T30] audit: type=1400 audit(1792023695.771:69): avc: denied { mount } for pid=277 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 21.451063][ T279] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 21.459946][ T30] audit: type=1400 audit(1792023695.861:70): avc: denied { relabelto } for pid=279 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.485443][ T30] audit: type=1400 audit(1792023695.861:71): avc: denied { write } for pid=279 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.519675][ T30] audit: type=1400 audit(1792023695.921:72): avc: denied { read } for pid=277 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.520821][ T277] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 21.546369][ T30] audit: type=1400 audit(1792023695.921:73): avc: denied { open } for pid=277 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.424018][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.431165][ T285] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.438684][ T285] device bridge_slave_0 entered promiscuous mode [ 22.446414][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.453557][ T285] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.460938][ T285] device bridge_slave_1 entered promiscuous mode [ 22.537510][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.544604][ T286] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.552148][ T286] device bridge_slave_0 entered promiscuous mode [ 22.560595][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.567807][ T286] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.575214][ T286] device bridge_slave_1 entered promiscuous mode [ 22.637408][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.644475][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.651950][ T287] device bridge_slave_0 entered promiscuous mode [ 22.658889][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.665930][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.673419][ T287] device bridge_slave_1 entered promiscuous mode [ 22.711252][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.718372][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.725698][ T288] device bridge_slave_0 entered promiscuous mode [ 22.735751][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.742848][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.750282][ T288] device bridge_slave_1 entered promiscuous mode [ 22.785365][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.792513][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.799977][ T289] device bridge_slave_0 entered promiscuous mode [ 22.822556][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.829657][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.837053][ T289] device bridge_slave_1 entered promiscuous mode [ 22.884102][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.891188][ T285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.898526][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.905566][ T285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.953951][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.961037][ T286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.968341][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.975373][ T286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.983864][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.990907][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.998203][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.005256][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.042206][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.049310][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.056593][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.063666][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.085739][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.093122][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.100718][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.108288][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.115416][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.123045][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.130305][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.138318][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.145512][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.169543][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.178465][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.185852][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.193386][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.201808][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.208879][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.216700][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.224976][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.232029][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.239388][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.247628][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.254648][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.262032][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.270202][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.277255][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.294782][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.309321][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.317472][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.325610][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.332681][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.340890][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.349114][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.356134][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.364728][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 23.378831][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.387230][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.394272][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.401759][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.409867][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.419059][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 23.427417][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.435587][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.442676][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.451527][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.459744][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.483972][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.492304][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.500340][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.508946][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.516863][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.524577][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.532101][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 23.540395][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.548845][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.555868][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.565012][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.573503][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.590458][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 23.598900][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.607307][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.614365][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.621908][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.630526][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.645777][ T287] device veth0_vlan entered promiscuous mode [ 23.652211][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.660640][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.669163][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.677383][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.694176][ T285] device veth0_vlan entered promiscuous mode [ 23.700944][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.708677][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.716050][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.724589][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.732923][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.741072][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.749128][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.757531][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.765825][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.774119][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.782293][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.790153][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.798336][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.805809][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.822495][ T287] device veth1_macvtap entered promiscuous mode [ 23.831243][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.839661][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.847879][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.856389][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.864875][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.874929][ T286] device veth0_vlan entered promiscuous mode [ 23.888436][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.896408][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.904657][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.913216][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.921718][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.930164][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.938686][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.947147][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.955495][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.963054][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.982029][ T287] request_module fs-gadgetfs succeeded, but still no fs? [ 23.991104][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.999607][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.010096][ T288] device veth0_vlan entered promiscuous mode [ 24.021079][ T289] device veth0_vlan entered promiscuous mode [ 24.027821][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.036007][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.044143][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.054357][ T285] device veth1_macvtap entered promiscuous mode [ 24.063505][ T286] device veth1_macvtap entered promiscuous mode [ 24.072937][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.080841][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.088516][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.096018][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.104113][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.111820][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.120488][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.128902][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.152239][ T288] device veth1_macvtap entered promiscuous mode [ 24.166614][ T289] device veth1_macvtap entered promiscuous mode [ 24.173858][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.185965][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.198279][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.206533][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.215430][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.223974][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.234164][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.243129][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.251653][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.260254][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.352631][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.367367][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.384731][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.393689][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.443467][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.470379][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.479813][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.490441][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.910874][ T306] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 25.084062][ T295] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 25.091791][ T329] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 25.277077][ T306] usb 5-1: config 0 has no interfaces? [ 25.397088][ T6] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 25.437176][ T306] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 25.446311][ T306] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.454367][ T306] usb 5-1: Product: syz [ 25.458776][ T306] usb 5-1: Manufacturer: syz [ 25.463391][ T306] usb 5-1: SerialNumber: syz [ 25.469466][ T306] usb 5-1: config 0 descriptor?? [ 25.601976][ T306] wiimote 0005:057E:0306.0001: hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 25.611541][ T306] wiimote 0005:057E:0306.0001: New device registered [ 25.618391][ T295] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 25.627597][ T329] usb 3-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 25.636635][ T329] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.644980][ T295] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.653040][ T329] usb 3-1: Product: syz [ 25.657292][ T329] usb 3-1: Manufacturer: syz [ 25.661899][ T329] usb 3-1: SerialNumber: syz [ 25.666762][ T295] usb 4-1: Product: syz [ 25.671011][ T295] usb 4-1: Manufacturer: syz [ 25.675613][ T295] usb 4-1: SerialNumber: syz [ 25.713391][ T325] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 25.752830][ T325] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 25.772827][ T39] usb 5-1: USB disconnect, device number 2 [ 25.807081][ T6] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 25.818155][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 25.829151][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 25.838908][ T6] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 25.887115][ T20] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 25.927124][ T6] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 25.936353][ T6] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 25.944515][ T6] usb 1-1: Manufacturer: syz [ 25.949839][ T6] usb 1-1: config 0 descriptor?? [ 26.017229][ T329] usb 3-1: failed waiting for Axe-Fx III to boot: -71 [ 26.024134][ T329] snd-usb-audio: probe of 3-1:1.0 failed with error -71 [ 26.031848][ T329] usb 3-1: USB disconnect, device number 2 [ 26.187719][ T341] wiimote 0005:057E:0306.0001: Unhandled report 32 size 1 [ 26.194979][ T341] wiimote 0005:057E:0306.0001: Event data for report 0 was too short (2 vs 1) [ 26.205034][ T340] wiimote 0005:057E:0306.0001: Device removed [ 26.257057][ T20] usb 2-1: no configurations [ 26.261675][ T20] usb 2-1: can't read configurations, error -22 [ 26.427916][ T6] appleir 0003:05AC:8243.0002: unknown main item tag 0x0 [ 26.435430][ T6] appleir 0003:05AC:8243.0002: No inputs registered, leaving [ 26.444959][ T6] appleir 0003:05AC:8243.0002: hiddev96,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 26.470539][ T30] kauditd_printk_skb: 56 callbacks suppressed [ 26.470552][ T30] audit: type=1400 audit(1792023700.871:130): avc: denied { map_create } for pid=352 comm="syz.3.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 26.519405][ T30] audit: type=1400 audit(1792023700.891:131): avc: denied { map_read map_write } for pid=352 comm="syz.3.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 26.540569][ T30] audit: type=1400 audit(1792023700.901:132): avc: denied { prog_load } for pid=352 comm="syz.3.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 26.560801][ T30] audit: type=1400 audit(1792023700.901:133): avc: denied { bpf } for pid=352 comm="syz.3.14" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 26.618518][ T30] audit: type=1400 audit(1792023701.021:134): avc: denied { write } for pid=359 comm="syz.2.16" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 26.687352][ T30] audit: type=1400 audit(1792023701.091:135): avc: denied { unlink } for pid=362 comm="syz.2.17" name="#1" dev="tmpfs" ino=39 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 26.699728][ T306] wiimote 0005:057E:0306.0001: detected device: Nintendo Wii Remote (Gen 1) [ 26.727511][ T30] audit: type=1400 audit(1792023701.111:136): avc: denied { mount } for pid=362 comm="syz.2.17" name="/" dev="overlay" ino=33 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 26.736345][ T306] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0001/input/input5 [ 26.781319][ T329] usb 1-1: USB disconnect, device number 2 [ 26.789666][ T306] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0001/input/input6 [ 26.790864][ T30] audit: type=1400 audit(1792023701.181:137): avc: denied { mount } for pid=366 comm="syz.2.18" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 26.837252][ T306] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0001/input/input4 [ 26.859548][ T30] audit: type=1400 audit(1792023701.181:138): avc: denied { mount } for pid=366 comm="syz.2.18" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 26.881909][ T30] audit: type=1400 audit(1792023701.181:139): avc: denied { write } for pid=366 comm="syz.2.18" name="ram0" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 27.058983][ T373] FAULT_INJECTION: forcing a failure. [ 27.058983][ T373] name failslab, interval 1, probability 0, space 0, times 1 [ 27.072283][ T373] CPU: 1 PID: 373 Comm: syz.3.20 Not tainted syzkaller #0 [ 27.079436][ T373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 27.089529][ T373] Call Trace: [ 27.092828][ T373] [ 27.095780][ T373] __dump_stack+0x21/0x30 [ 27.100151][ T373] dump_stack_lvl+0x110/0x170 [ 27.104969][ T373] ? show_regs_print_info+0x20/0x20 [ 27.110188][ T373] ? stack_trace_save+0xa6/0xf0 [ 27.115068][ T373] dump_stack+0x15/0x20 [ 27.119253][ T373] should_fail+0x3ab/0x500 [ 27.123699][ T373] __should_failslab+0xa4/0xe0 [ 27.128488][ T373] should_failslab+0x9/0x20 [ 27.133011][ T373] slab_pre_alloc_hook+0x39/0xd0 [ 27.137968][ T373] ? audit_log_start+0x3e5/0x8a0 [ 27.142919][ T373] kmem_cache_alloc+0x44/0x260 [ 27.147709][ T373] audit_log_start+0x3e5/0x8a0 [ 27.152493][ T373] ? audit_serial+0x30/0x30 [ 27.157047][ T373] ? slow_avc_audit+0x240/0x240 [ 27.161913][ T373] common_lsm_audit+0xd2/0x1670 [ 27.166776][ T373] ? avc_audit_pre_callback+0x290/0x290 [ 27.172338][ T373] ? debug_smp_processor_id+0x17/0x20 [ 27.177740][ T373] ? call_rcu+0x5af/0xf60 [ 27.182098][ T373] ? ipv6_skb_to_auditdata+0xdd0/0xdd0 [ 27.187580][ T373] ? rcu_gp_kthread_wake+0x90/0x90 [ 27.192708][ T373] slow_avc_audit+0x1c4/0x240 [ 27.197423][ T373] ? avc_get_hash_stats+0x180/0x180 [ 27.202643][ T373] ? avc_denied+0x133/0x1b0 [ 27.207159][ T373] avc_has_extended_perms+0x943/0xed0 [ 27.212549][ T373] ? avc_flush+0x2b0/0x2b0 [ 27.217003][ T373] ? do_futex+0xdd3/0x2800 [ 27.221437][ T373] ? kmem_cache_free+0x100/0x320 [ 27.226386][ T373] ? do_sys_openat2+0x6df/0x7f0 [ 27.231253][ T373] ? futex_exit_release+0x1e0/0x1e0 [ 27.236465][ T373] ? ioctl_has_perm+0x1b8/0x4f0 [ 27.241331][ T373] ioctl_has_perm+0x3ab/0x4f0 [ 27.246036][ T373] ? has_cap_mac_admin+0x370/0x370 [ 27.251159][ T373] ? __kasan_slab_free+0x11/0x20 [ 27.256109][ T373] ? slab_free_freelist_hook+0xc2/0x190 [ 27.261663][ T373] ? putname+0x111/0x160 [ 27.265934][ T373] ? kmem_cache_free+0x100/0x320 [ 27.270896][ T373] selinux_file_ioctl+0x3ad/0x4c0 [ 27.275935][ T373] ? selinux_file_alloc_security+0x120/0x120 [ 27.281936][ T373] ? __fget_files+0x2e1/0x340 [ 27.286633][ T373] security_file_ioctl+0x74/0xa0 [ 27.291586][ T373] __se_sys_ioctl+0x53/0x1a0 [ 27.296194][ T373] ? switch_fpu_return+0x15d/0x2c0 [ 27.301321][ T373] __x64_sys_ioctl+0x7b/0x90 [ 27.305943][ T373] x64_sys_call+0x2f/0x9a0 [ 27.310390][ T373] do_syscall_64+0x4c/0xa0 [ 27.314818][ T373] ? clear_bhb_loop+0x50/0xa0 [ 27.319507][ T373] ? clear_bhb_loop+0x50/0xa0 [ 27.324194][ T373] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 27.330103][ T373] RIP: 0033:0x7f44f9d26559 [ 27.334534][ T373] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 27.354591][ T373] RSP: 002b:00007f44f877f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 27.363032][ T373] RAX: ffffffffffffffda RBX: 00007f44f9fadfa0 RCX: 00007f44f9d26559 [ 27.371028][ T373] RDX: ffffffffff600000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 27.379013][ T373] RBP: 00007f44f9dbd8b0 R08: 0000000000000000 R09: 0000000000000000 [ 27.386998][ T373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 27.394991][ T373] R13: 00007f44f9fae038 R14: 00007f44f9fadfa0 R15: 00007ffc773701a8 [ 27.402980][ T373] [ 27.460551][ T376] FAULT_INJECTION: forcing a failure. [ 27.460551][ T376] name failslab, interval 1, probability 0, space 0, times 0 [ 27.477107][ T376] CPU: 0 PID: 376 Comm: syz.3.21 Not tainted syzkaller #0 [ 27.484254][ T376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 27.494327][ T376] Call Trace: [ 27.497630][ T376] [ 27.500574][ T376] __dump_stack+0x21/0x30 [ 27.505010][ T376] dump_stack_lvl+0x110/0x170 [ 27.509716][ T376] ? show_regs_print_info+0x20/0x20 [ 27.514937][ T376] ? __stack_depot_save+0x441/0x480 [ 27.520162][ T376] dump_stack+0x15/0x20 [ 27.524358][ T376] should_fail+0x3ab/0x500 [ 27.528795][ T376] __should_failslab+0xa4/0xe0 [ 27.533860][ T376] should_failslab+0x9/0x20 [ 27.538395][ T376] slab_pre_alloc_hook+0x39/0xd0 [ 27.543405][ T376] kmem_cache_alloc_trace+0x48/0x270 [ 27.548721][ T376] ? mpi_alloc+0x52/0x130 [ 27.553084][ T376] mpi_alloc+0x52/0x130 [ 27.557269][ T376] mpi_read_raw_from_sgl+0x2d2/0x640 [ 27.562628][ T376] ? mpi_write_to_sgl+0x7c0/0x7c0 [ 27.567687][ T376] ? memset+0x35/0x40 [ 27.571700][ T376] ? mpi_alloc+0xf7/0x130 [ 27.576066][ T376] rsa_enc+0x14d/0x3c0 [ 27.580164][ T376] ? rsa_exit+0x30/0x30 [ 27.584392][ T376] ? memset+0x35/0x40 [ 27.588410][ T376] pkcs1pad_verify+0x4b2/0x680 [ 27.593202][ T376] public_key_verify_signature+0x992/0xec0 [ 27.599038][ T376] ? key_create_or_update+0x430/0x9c0 [ 27.604437][ T376] ? __se_sys_add_key+0x34b/0x410 [ 27.609501][ T376] ? public_key_free+0x80/0x80 [ 27.614304][ T376] x509_check_for_self_signed+0x35e/0x460 [ 27.620062][ T376] x509_cert_parse+0x684/0x8b0 [ 27.624854][ T376] x509_key_preparse+0x63/0x650 [ 27.629729][ T376] asymmetric_key_preparse+0x9e/0xe0 [ 27.635038][ T376] key_create_or_update+0x430/0x9c0 [ 27.640264][ T376] ? key_type_put+0x20/0x20 [ 27.644796][ T376] ? lookup_user_key_possessed+0x40/0x40 [ 27.650462][ T376] ? __kasan_check_write+0x14/0x20 [ 27.655603][ T376] __se_sys_add_key+0x34b/0x410 [ 27.660485][ T376] ? ksys_write+0x70/0x260 [ 27.664929][ T376] ? __x64_sys_add_key+0xd0/0xd0 [ 27.669893][ T376] ? ksys_write+0xf4/0x260 [ 27.674341][ T376] ? __kasan_check_write+0x14/0x20 [ 27.679651][ T376] __x64_sys_add_key+0xbf/0xd0 [ 27.684447][ T376] x64_sys_call+0x713/0x9a0 [ 27.688978][ T376] do_syscall_64+0x4c/0xa0 [ 27.693420][ T376] ? clear_bhb_loop+0x50/0xa0 [ 27.703988][ T376] ? clear_bhb_loop+0x50/0xa0 [ 27.708700][ T376] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 27.714634][ T376] RIP: 0033:0x7f44f9d26559 [ 27.719211][ T376] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 27.738844][ T376] RSP: 002b:00007f44f877f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 27.747280][ T376] RAX: ffffffffffffffda RBX: 00007f44f9fadfa0 RCX: 00007f44f9d26559 [ 27.755262][ T376] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 27.763248][ T376] RBP: 00007f44f9dbd8b0 R08: 0000000023eb1720 R09: 0000000000000000 [ 27.771232][ T376] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 27.779219][ T376] R13: 00007f44f9fae038 R14: 00007f44f9fadfa0 R15: 00007ffc773701a8 [ 27.787211][ T376] [ 28.187024][ T39] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 28.427013][ T39] usb 3-1: Using ep0 maxpacket: 32 [ 28.517011][ T20] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 28.587065][ T39] usb 3-1: unable to get BOS descriptor or descriptor too short [ 28.667067][ T39] usb 3-1: config 14 has an invalid interface number: 226 but max is 0 [ 28.675422][ T39] usb 3-1: config 14 has no interface number 0 [ 28.681888][ T39] usb 3-1: config 14 interface 226 has no altsetting 0 [ 28.757043][ T20] usb 5-1: Using ep0 maxpacket: 16 [ 28.887107][ T20] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 28.898095][ T20] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 28.907873][ T20] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 28.920696][ T20] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 28.927344][ T39] usb 3-1: language id specifier not provided by device, defaulting to English [ 28.929891][ T20] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.947998][ T20] usb 5-1: config 0 descriptor?? [ 28.957078][ T295] rtl8150 4-1:1.0: couldn't reset the device [ 28.963359][ T295] rtl8150: probe of 4-1:1.0 failed with error -5 [ 28.970988][ T295] usb 4-1: USB disconnect, device number 2 [ 29.057103][ T39] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice=16.9b [ 29.066248][ T39] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.074288][ T39] usb 3-1: Product: syz [ 29.078598][ T39] usb 3-1: Manufacturer: 檮㙣꣒⪅暓衋汦﭅￸㈙峄˴柝吢㗳鋇䴡垦Ⅲ傀ᤌ良㐮釥炓᪎䱜乄홏쳸㥎ؾ隃ָ器헔萺폋톤窶庸䮻 [ 29.094753][ T403] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 29.102624][ T39] usb 3-1: SerialNumber: syz [ 29.327060][ T295] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 29.428617][ T39] usb 3-1: USB disconnect, device number 3 [ 29.429060][ T20] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 29.441968][ T20] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 29.449356][ T20] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 29.456637][ T20] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 29.463929][ T20] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 29.467381][ T403] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 29.471564][ T20] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 29.480149][ T403] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 29.486886][ T20] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 29.496456][ T403] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 29.506653][ T20] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 29.514486][ T403] usb 1-1: config 220 has no interface number 2 [ 29.521811][ T20] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 29.528236][ T403] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 29.535598][ T20] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 29.549052][ T403] usb 1-1: config 220 interface 0 has no altsetting 0 [ 29.555966][ T20] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 29.562638][ T403] usb 1-1: config 220 interface 76 has no altsetting 0 [ 29.570505][ T20] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 29.578608][ T403] usb 1-1: config 220 interface 1 has no altsetting 0 [ 29.585380][ T20] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 29.598325][ T20] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 29.605541][ T20] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 29.616340][ T20] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0003/input/input7 [ 29.629858][ T20] microsoft 0003:045E:07DA.0003: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 29.697128][ T295] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 29.707388][ T295] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 29.717316][ T295] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 29.728327][ T295] usb 4-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 29.737964][ T295] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.747076][ T403] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 29.756234][ T403] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.764345][ T403] usb 1-1: Product: syz [ 29.768589][ T403] usb 1-1: Manufacturer: syz [ 29.773201][ T403] usb 1-1: SerialNumber: syz [ 29.777945][ T389] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 29.784932][ T389] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 29.797622][ T295] pl2303 4-1:1.0: pl2303 converter detected [ 29.804389][ T295] usb 4-1: pl2303 converter now attached to ttyUSB0 [ 30.317090][ T389] pl2303 4-1:1.0: pl2303_vendor_write - failed to write [0007]: -110 [ 30.337317][ T403] usb 1-1: selecting invalid altsetting 0 [ 30.343279][ T403] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 30.349816][ T389] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32 [ 30.357543][ T403] usb 1-1: No valid video chain found. [ 30.377332][ T389] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 30.407070][ T389] pl2303 4-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 30.427089][ T389] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 30.444852][ T403] usb 1-1: USB disconnect, device number 3 [ 30.707103][ T388] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 30.723811][ T420] loop0: detected capacity change from 0 to 128 [ 30.782196][ T420] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 30.792909][ T388] pl2303 ttyUSB0: error sending break = -32 [ 30.798365][ T420] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 30.799633][ T20] usb 4-1: USB disconnect, device number 3 [ 30.816394][ T20] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 30.824927][ T20] pl2303 4-1:1.0: device disconnected [ 30.948600][ T344] usb 5-1: USB disconnect, device number 3 [ 31.467028][ T403] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 31.693970][ T30] kauditd_printk_skb: 45 callbacks suppressed [ 31.694007][ T30] audit: type=1400 audit(1792023706.091:183): avc: denied { unmount } for pid=285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 32.236409][ T30] audit: type=1400 audit(1792023706.321:184): avc: denied { mount } for pid=441 comm="syz.0.46" name="/" dev="configfs" ino=13681 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 32.335946][ T30] audit: type=1400 audit(1792023706.521:185): avc: denied { unmount } for pid=285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 32.413867][ T463] netlink: 8 bytes leftover after parsing attributes in process `syz.0.55'. [ 32.422723][ T463] netlink: 4 bytes leftover after parsing attributes in process `syz.0.55'. [ 32.444022][ T465] loop0: detected capacity change from 0 to 128 [ 32.519695][ T465] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 32.530624][ T403] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 32.539753][ T39] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 32.547356][ T403] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.555357][ T403] usb 3-1: Product: syz [ 32.560062][ T465] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.570662][ T403] usb 3-1: Manufacturer: syz [ 32.575275][ T403] usb 3-1: SerialNumber: syz [ 32.650242][ T306] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 32.857030][ T39] usb 5-1: Using ep0 maxpacket: 16 [ 32.897149][ T306] usb 4-1: Using ep0 maxpacket: 32 [ 32.977112][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.988102][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 32.997902][ T39] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 33.010778][ T39] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 33.019897][ T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.028009][ T306] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 33.037412][ T306] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.045634][ T39] usb 5-1: config 0 descriptor?? [ 33.051367][ T306] usb 4-1: config 0 descriptor?? [ 34.009671][ T477] Zero length message leads to an empty skb [ 34.023597][ T30] audit: type=1400 audit(1792023707.881:186): avc: denied { create } for pid=472 comm="syz.2.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 34.048351][ T30] audit: type=1400 audit(1792023708.411:187): avc: denied { create } for pid=471 comm="syz.0.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 34.062071][ T39] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 34.076572][ T30] audit: type=1400 audit(1792023708.411:188): avc: denied { create } for pid=471 comm="syz.0.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 34.157579][ T39] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 34.164938][ T39] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 34.172232][ T39] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 34.179775][ T39] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 34.187215][ T39] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 34.194487][ T39] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 34.242484][ T39] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 34.249811][ T39] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 34.257468][ T39] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 34.264707][ T39] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 34.271968][ T39] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 34.279587][ T39] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 34.286826][ T39] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 34.295314][ T39] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 34.316386][ T39] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0004/input/input8 [ 34.338319][ T39] microsoft 0003:045E:07DA.0004: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 34.378933][ T39] usb 5-1: USB disconnect, device number 4 [ 34.397208][ T30] audit: type=1400 audit(1792023708.801:189): avc: denied { ioctl } for pid=86 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=610 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 34.401284][ T493] loop1: detected capacity change from 0 to 128 [ 34.467408][ T493] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 34.478360][ T495] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 34.484385][ T497] fido_id[497]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 34.486281][ T495] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 34.507375][ T493] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.085746][ T306] usb 4-1: USB disconnect, device number 4 [ 36.130190][ T30] audit: type=1400 audit(1792023710.531:190): avc: denied { write } for pid=523 comm="syz.4.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 36.156284][ T30] audit: type=1400 audit(1792023710.531:191): avc: denied { nlmsg_write } for pid=523 comm="syz.4.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 36.194490][ T532] netlink: 8 bytes leftover after parsing attributes in process `syz.2.80'. [ 36.197967][ T30] audit: type=1400 audit(1792023710.591:192): avc: denied { nlmsg_read } for pid=531 comm="syz.2.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 36.500226][ T546] netlink: 20 bytes leftover after parsing attributes in process `syz.1.81'. [ 36.509114][ T546] netlink: 16 bytes leftover after parsing attributes in process `syz.1.81'. [ 36.518046][ T546] netlink: 16 bytes leftover after parsing attributes in process `syz.1.81'. [ 36.633533][ T553] loop2: detected capacity change from 0 to 128 [ 36.719315][ T553] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 36.730693][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 36.730711][ T30] audit: type=1400 audit(1792023711.111:196): avc: denied { ioctl } for pid=554 comm="syz.0.89" path="socket:[17221]" dev="sockfs" ino=17221 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 36.777600][ T553] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.929621][ T30] audit: type=1400 audit(1792023711.321:197): avc: denied { setcurrent } for pid=562 comm="syz.0.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 36.997653][ T39] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 37.257058][ T39] usb 5-1: Using ep0 maxpacket: 8 [ 37.657156][ T39] usb 5-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 37.680111][ T39] usb 5-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 37.707029][ T39] usb 5-1: Product: syz [ 37.714851][ T39] usb 5-1: Manufacturer: syz [ 37.731526][ T39] usb 5-1: SerialNumber: syz [ 37.750414][ T39] usb 5-1: config 0 descriptor?? [ 37.907016][ T337] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 37.917114][ T403] rtl8150 3-1:1.0: couldn't reset the device [ 37.923185][ T403] rtl8150: probe of 3-1:1.0 failed with error -5 [ 37.940527][ T403] usb 3-1: USB disconnect, device number 4 [ 38.037042][ T329] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 38.267070][ T337] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 38.278087][ T337] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.287891][ T337] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 38.301178][ T337] usb 2-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 38.310333][ T337] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.321955][ T337] usb 2-1: config 0 descriptor?? [ 38.360511][ T30] audit: type=1400 audit(1792023712.751:198): avc: denied { write } for pid=599 comm="syz.3.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 38.417057][ T329] usb 1-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 38.427478][ T329] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 52, changing to 7 [ 38.438741][ T329] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 9272, setting to 1024 [ 38.450023][ T329] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 38.627078][ T329] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a2, bcdDevice= 0.40 [ 38.636204][ T329] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.644278][ T329] usb 1-1: Product: syz [ 38.648520][ T329] usb 1-1: Manufacturer: syz [ 38.653172][ T329] usb 1-1: SerialNumber: syz [ 38.697690][ T329] cdc_subset: probe of 1-1:1.0 failed with error -22 [ 38.704734][ T329] cdc_ncm 1-1:1.0: NCM or ECM functional descriptors missing [ 38.712218][ T329] cdc_ncm 1-1:1.0: bind() failure [ 38.718216][ T329] cdc_subset: probe of 1-1:1.1 failed with error -22 [ 38.725034][ T329] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 38.731877][ T329] cdc_ncm 1-1:1.1: bind() failure [ 38.808294][ T337] hid-generic 0003:0457:07DA.0005: unknown main item tag 0x0 [ 38.815772][ T337] hid-generic 0003:0457:07DA.0005: unknown main item tag 0x0 [ 38.823228][ T337] hid-generic 0003:0457:07DA.0005: unknown main item tag 0x0 [ 38.830680][ T337] hid-generic 0003:0457:07DA.0005: unknown main item tag 0x0 [ 38.838128][ T337] hid-generic 0003:0457:07DA.0005: unknown main item tag 0x0 [ 38.845554][ T337] hid-generic 0003:0457:07DA.0005: unknown main item tag 0x0 [ 38.853005][ T337] hid-generic 0003:0457:07DA.0005: unknown main item tag 0x0 [ 38.860465][ T337] hid-generic 0003:0457:07DA.0005: unknown main item tag 0x0 [ 38.867935][ T337] hid-generic 0003:0457:07DA.0005: unknown main item tag 0x0 [ 38.875606][ T337] hid-generic 0003:0457:07DA.0005: unknown main item tag 0x0 [ 38.883203][ T337] hid-generic 0003:0457:07DA.0005: unknown main item tag 0x0 [ 38.890796][ T337] hid-generic 0003:0457:07DA.0005: unknown main item tag 0x0 [ 38.902773][ T337] hid-generic 0003:0457:07DA.0005: unknown main item tag 0x0 [ 38.910281][ T337] hid-generic 0003:0457:07DA.0005: unknown main item tag 0x0 [ 38.917746][ T337] hid-generic 0003:0457:07DA.0005: unknown main item tag 0x0 [ 38.925190][ T337] hid-generic 0003:0457:07DA.0005: unknown main item tag 0x0 [ 38.932819][ T337] hid-generic 0003:0457:07DA.0005: unknown main item tag 0x0 [ 38.936067][ T607] loop2: detected capacity change from 0 to 128 [ 38.940857][ T337] hid-generic 0003:0457:07DA.0005: unknown main item tag 0x0 [ 38.954144][ T337] hid-generic 0003:0457:07DA.0005: unknown main item tag 0x0 [ 38.961595][ T337] hid-generic 0003:0457:07DA.0005: unknown main item tag 0x0 [ 38.969040][ T337] hid-generic 0003:0457:07DA.0005: unknown main item tag 0x0 [ 38.976455][ T337] hid-generic 0003:0457:07DA.0005: unknown main item tag 0x0 [ 38.983919][ T337] hid-generic 0003:0457:07DA.0005: unknown main item tag 0x0 [ 38.991414][ T337] hid-generic 0003:0457:07DA.0005: unknown main item tag 0x0 [ 38.998884][ T337] hid-generic 0003:0457:07DA.0005: unknown main item tag 0x0 [ 39.006362][ T337] hid-generic 0003:0457:07DA.0005: unknown main item tag 0x0 [ 39.013937][ T337] hid-generic 0003:0457:07DA.0005: unknown main item tag 0x0 [ 39.021914][ T337] hid-generic 0003:0457:07DA.0005: unknown main item tag 0x0 [ 39.030550][ T337] hid-generic 0003:0457:07DA.0005: unknown main item tag 0x0 [ 39.038338][ T337] hid-generic 0003:0457:07DA.0005: unknown main item tag 0x0 [ 39.045758][ T337] hid-generic 0003:0457:07DA.0005: unknown main item tag 0x0 [ 39.053623][ T337] hid-generic 0003:0457:07DA.0005: unknown main item tag 0x0 [ 39.061330][ T337] hid-generic 0003:0457:07DA.0005: unknown main item tag 0x0 [ 39.068900][ T337] hid-generic 0003:0457:07DA.0005: unknown main item tag 0x0 [ 39.077835][ T337] hid-generic 0003:0457:07DA.0005: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.1-1/input0 [ 39.100221][ T337] usb 2-1: USB disconnect, device number 4 [ 39.114940][ T607] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 39.126548][ T609] fido_id[609]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 39.141298][ T607] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.150055][ T329] usb 1-1: USB disconnect, device number 4 [ 39.161835][ T30] audit: type=1400 audit(1792023713.561:199): avc: denied { create } for pid=610 comm="syz.3.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 39.181807][ T30] audit: type=1400 audit(1792023713.561:200): avc: denied { ioctl } for pid=610 comm="syz.3.111" path="socket:[16181]" dev="sockfs" ino=16181 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 39.995494][ T20] usb 5-1: USB disconnect, device number 5 [ 40.175246][ T626] tipc: Started in network mode [ 40.180222][ T626] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 40.189218][ T626] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 40.197557][ T626] tipc: Enabled bearer , priority 10 [ 41.355790][ T566] tipc: Node number set to 1 [ 41.998149][ T656] loop0: detected capacity change from 0 to 128 [ 42.129886][ T656] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 42.147072][ T656] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.336112][ T30] audit: type=1400 audit(1792023716.731:201): avc: denied { ioctl } for pid=670 comm="syz.2.134" path="socket:[17441]" dev="sockfs" ino=17441 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 42.583280][ T677] tipc: Started in network mode [ 42.588757][ T677] tipc: Node identity 00000000000040000000000000000001, cluster identity 4711 [ 42.598007][ T677] tipc: Enabling of bearer rejected, failed to enable media [ 42.858619][ T30] audit: type=1400 audit(1792023717.251:202): avc: denied { create } for pid=672 comm="syz.2.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 43.031561][ T30] audit: type=1400 audit(1792023717.251:203): avc: denied { setopt } for pid=672 comm="syz.2.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 43.063265][ T30] audit: type=1400 audit(1792023717.251:204): avc: denied { write } for pid=672 comm="syz.2.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 43.128903][ T30] audit: type=1400 audit(1792023717.521:205): avc: denied { create } for pid=686 comm="syz.3.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 43.153053][ T30] audit: type=1400 audit(1792023717.531:206): avc: denied { ioctl } for pid=686 comm="syz.3.140" path="socket:[17502]" dev="sockfs" ino=17502 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 43.178176][ T30] audit: type=1400 audit(1792023717.531:207): avc: denied { connect } for pid=686 comm="syz.3.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 43.206769][ T30] audit: type=1400 audit(1792023717.531:208): avc: denied { write } for pid=686 comm="syz.3.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 43.732999][ T30] audit: type=1400 audit(1792023718.131:209): avc: denied { append } for pid=709 comm="syz.0.149" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 44.047656][ T721] loop0: detected capacity change from 0 to 128 [ 44.086690][ T30] audit: type=1400 audit(1792023718.481:210): avc: denied { mount } for pid=722 comm="syz.4.153" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 44.190579][ T721] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 44.211572][ T721] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.840954][ T772] input: syz0 as /devices/virtual/input/input9 [ 45.887018][ T329] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 45.900139][ T776] loop1: detected capacity change from 0 to 128 [ 45.994236][ T776] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 46.004933][ T776] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.317075][ T329] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 46.328298][ T329] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 46.337926][ T329] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.381009][ T329] usb 5-1: config 0 descriptor?? [ 47.027044][ T329] usbhid 5-1:0.0: can't add hid device: -71 [ 47.043829][ T329] usbhid: probe of 5-1:0.0 failed with error -71 [ 47.088096][ T329] usb 5-1: USB disconnect, device number 6 [ 47.546994][ T329] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 47.797022][ T329] usb 5-1: Using ep0 maxpacket: 16 [ 47.887012][ T344] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 47.917075][ T329] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 47.937016][ T329] usb 5-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 47.966471][ T329] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.989926][ T329] usb 5-1: config 0 descriptor?? [ 48.137067][ T344] usb 1-1: Using ep0 maxpacket: 16 [ 48.529261][ T329] hid-generic 0003:04D8:00DF.0006: hidraw0: USB HID v0.05 Device [HID 04d8:00df] on usb-dummy_hcd.4-1/input0 [ 48.735052][ T832] loop2: detected capacity change from 0 to 128 [ 48.846141][ T832] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 48.871069][ T832] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.027068][ T344] usb 1-1: config 0 has no interfaces? [ 49.050838][ T20] usb 5-1: USB disconnect, device number 7 [ 49.107090][ T344] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 49.119562][ T344] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 49.135510][ T344] usb 1-1: SerialNumber: syz [ 49.151296][ T344] usb 1-1: config 0 descriptor?? [ 49.209248][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 49.209263][ T30] audit: type=1400 audit(1792023723.611:217): avc: denied { read write } for pid=844 comm="syz.1.195" name="vhost-vsock" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 49.240901][ T30] audit: type=1400 audit(1792023723.641:218): avc: denied { open } for pid=844 comm="syz.1.195" path="/dev/vhost-vsock" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 49.265989][ T30] audit: type=1400 audit(1792023723.641:219): avc: denied { ioctl } for pid=844 comm="syz.1.195" path="/dev/vhost-vsock" dev="devtmpfs" ino=264 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 49.291324][ T30] audit: type=1400 audit(1792023723.661:220): avc: denied { connect } for pid=844 comm="syz.1.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 49.796650][ T403] usb 1-1: USB disconnect, device number 5 [ 50.311363][ T878] loop4: detected capacity change from 0 to 128 [ 50.323463][ T878] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 50.334537][ T878] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.673869][ T403] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 51.167947][ T875] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 51.198217][ T30] audit: type=1400 audit(1792023725.601:221): avc: denied { setopt } for pid=893 comm="syz.4.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 51.218841][ T894] ================================================================== [ 51.226938][ T894] BUG: KASAN: slab-out-of-bounds in xfrm_policy_inexact_list_reinsert+0x635/0x6e0 [ 51.236169][ T894] Read of size 1 at addr ffff88811a74b3f8 by task syz.4.212/894 [ 51.243823][ T894] [ 51.246167][ T894] CPU: 1 PID: 894 Comm: syz.4.212 Not tainted syzkaller #0 [ 51.253399][ T894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 51.263473][ T894] Call Trace: [ 51.266774][ T894] [ 51.269721][ T894] __dump_stack+0x21/0x30 [ 51.274084][ T894] dump_stack_lvl+0x110/0x170 [ 51.278786][ T894] ? show_regs_print_info+0x20/0x20 [ 51.284013][ T894] ? load_image+0x3f0/0x3f0 [ 51.288549][ T894] ? unwind_get_return_address+0x4d/0x90 [ 51.294210][ T894] ? stack_trace_save+0xf0/0xf0 [ 51.299083][ T894] print_address_description+0x7f/0x2c0 [ 51.304655][ T894] ? xfrm_policy_inexact_list_reinsert+0x635/0x6e0 [ 51.311191][ T894] kasan_report+0x10f/0x150 [ 51.315725][ T894] ? xfrm_policy_inexact_list_reinsert+0x635/0x6e0 [ 51.322251][ T894] __asan_report_load1_noabort+0x14/0x20 [ 51.327922][ T894] xfrm_policy_inexact_list_reinsert+0x635/0x6e0 [ 51.334280][ T894] xfrm_policy_inexact_insert_node+0x954/0xb60 [ 51.340468][ T894] ? xfrm_netlink_rcv+0x72/0x90 [ 51.345364][ T894] ? netlink_unicast+0x86c/0xa30 [ 51.350332][ T894] ? ____sys_sendmsg+0x5be/0x8f0 [ 51.355294][ T894] ? ___sys_sendmsg+0x236/0x2e0 [ 51.360175][ T894] xfrm_policy_inexact_alloc_chain+0x540/0xb40 [ 51.366362][ T894] xfrm_policy_inexact_insert+0x6a/0x1190 [ 51.372113][ T894] ? __kasan_check_write+0x14/0x20 [ 51.377257][ T894] ? _raw_spin_lock_bh+0x94/0xf0 [ 51.382225][ T894] xfrm_policy_insert+0x12c/0x9c0 [ 51.387276][ T894] xfrm_add_policy+0x4e1/0x840 [ 51.392062][ T894] ? xfrm_dump_sa_done+0xc0/0xc0 [ 51.397030][ T894] xfrm_user_rcv_msg+0x559/0x7f0 [ 51.402006][ T894] ? xfrm_netlink_rcv+0x90/0x90 [ 51.406889][ T894] ? avc_has_perm_noaudit+0x490/0x490 [ 51.412285][ T894] ? x64_sys_call+0x4b/0x9a0 [ 51.416908][ T894] ? selinux_nlmsg_lookup+0x233/0x440 [ 51.422312][ T894] netlink_rcv_skb+0x1e9/0x430 [ 51.427103][ T894] ? xfrm_netlink_rcv+0x90/0x90 [ 51.431986][ T894] ? netlink_ack+0xb10/0xb10 [ 51.436600][ T894] ? wait_for_completion_killable_timeout+0x10/0x10 [ 51.443233][ T894] ? __netlink_lookup+0x387/0x3b0 [ 51.448291][ T894] xfrm_netlink_rcv+0x72/0x90 [ 51.453000][ T894] netlink_unicast+0x86c/0xa30 [ 51.457791][ T894] netlink_sendmsg+0x879/0xb80 [ 51.462583][ T894] ? netlink_getsockopt+0x530/0x530 [ 51.467812][ T894] ? alloc_file+0x59/0x580 [ 51.472265][ T894] ? security_socket_sendmsg+0x82/0xa0 [ 51.477749][ T894] ? netlink_getsockopt+0x530/0x530 [ 51.482986][ T894] ____sys_sendmsg+0x5be/0x8f0 [ 51.487809][ T894] ? __sys_sendmsg_sock+0x40/0x40 [ 51.492868][ T894] ? import_iovec+0x7c/0xb0 [ 51.497399][ T894] ___sys_sendmsg+0x236/0x2e0 [ 51.502118][ T894] ? __sys_sendmsg+0x280/0x280 [ 51.506910][ T894] ? percpu_counter_add_batch+0x13c/0x160 [ 51.512665][ T894] ? __fdget+0x1a1/0x230 [ 51.516930][ T894] __x64_sys_sendmsg+0x201/0x2d0 [ 51.521892][ T894] ? ___sys_sendmsg+0x2e0/0x2e0 [ 51.526767][ T894] ? __kasan_check_write+0x14/0x20 [ 51.531905][ T894] ? switch_fpu_return+0x15d/0x2c0 [ 51.537041][ T894] x64_sys_call+0x4b/0x9a0 [ 51.541481][ T894] do_syscall_64+0x4c/0xa0 [ 51.545934][ T894] ? clear_bhb_loop+0x50/0xa0 [ 51.550639][ T894] ? clear_bhb_loop+0x50/0xa0 [ 51.555343][ T894] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 51.561264][ T894] RIP: 0033:0x7f38476d1559 [ 51.565704][ T894] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 51.585355][ T894] RSP: 002b:00007f384612a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 51.593815][ T894] RAX: ffffffffffffffda RBX: 00007f3847958fa0 RCX: 00007f38476d1559 [ 51.601812][ T894] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000007 [ 51.609811][ T894] RBP: 00007f38477688b0 R08: 0000000000000000 R09: 0000000000000000 [ 51.617808][ T894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 51.625796][ T894] R13: 00007f3847959038 R14: 00007f3847958fa0 R15: 00007ffeb7c15c98 [ 51.633799][ T894] [ 51.636837][ T894] [ 51.639180][ T894] Allocated by task 894: [ 51.643437][ T894] __kasan_kmalloc+0xd4/0x100 [ 51.648139][ T894] __kmalloc+0x13d/0x2c0 [ 51.652402][ T894] sk_prot_alloc+0xed/0x320 [ 51.656925][ T894] sk_alloc+0x38/0x430 [ 51.661020][ T894] pfkey_create+0x12a/0x650 [ 51.665532][ T894] __sock_create+0x38d/0x7a0 [ 51.670130][ T894] __sys_socket+0xec/0x190 [ 51.674547][ T894] __x64_sys_socket+0x7a/0x90 [ 51.679233][ T894] x64_sys_call+0x8c5/0x9a0 [ 51.683745][ T894] do_syscall_64+0x4c/0xa0 [ 51.688172][ T894] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 51.694078][ T894] [ 51.696408][ T894] The buggy address belongs to the object at ffff88811a74b000 [ 51.696408][ T894] which belongs to the cache kmalloc-1k of size 1024 [ 51.710462][ T894] The buggy address is located 1016 bytes inside of [ 51.710462][ T894] 1024-byte region [ffff88811a74b000, ffff88811a74b400) [ 51.723920][ T894] The buggy address belongs to the page: [ 51.729563][ T894] page:ffffea000469d200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11a748 [ 51.739816][ T894] head:ffffea000469d200 order:3 compound_mapcount:0 compound_pincount:0 [ 51.748144][ T894] flags: 0x4000000000010200(slab|head|zone=1) [ 51.754233][ T894] raw: 4000000000010200 ffffea0004697a00 0000000300000003 ffff888100043080 [ 51.762831][ T894] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 51.771423][ T894] page dumped because: kasan: bad access detected [ 51.777839][ T894] page_owner tracks the page as allocated [ 51.783569][ T894] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 90, ts 6687110361, free_ts 0 [ 51.801566][ T894] post_alloc_hook+0x192/0x1b0 [ 51.806353][ T894] prep_new_page+0x1c/0x110 [ 51.810867][ T894] get_page_from_freelist+0x2c3a/0x2cd0 [ 51.816437][ T894] __alloc_pages+0x1a2/0x460 [ 51.821035][ T894] new_slab+0xa0/0x4d0 [ 51.825109][ T894] ___slab_alloc+0x3ac/0x840 [ 51.829722][ T894] __slab_alloc+0x49/0x90 [ 51.834062][ T894] __kmalloc_track_caller+0x169/0x2c0 [ 51.839447][ T894] __alloc_skb+0x210/0x730 [ 51.843872][ T894] alloc_skb_with_frags+0xa8/0x620 [ 51.848990][ T894] sock_alloc_send_pskb+0x87f/0x9a0 [ 51.854195][ T894] unix_dgram_sendmsg+0x6f3/0x19b0 [ 51.859314][ T894] __sys_sendto+0x46d/0x620 [ 51.863830][ T894] __x64_sys_sendto+0xe5/0x100 [ 51.868611][ T894] x64_sys_call+0x178/0x9a0 [ 51.873130][ T894] do_syscall_64+0x4c/0xa0 [ 51.877561][ T894] page_owner free stack trace missing [ 51.882937][ T894] [ 51.885264][ T894] Memory state around the buggy address: [ 51.890892][ T894] ffff88811a74b280: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 51.898957][ T894] ffff88811a74b300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 51.907025][ T894] >ffff88811a74b380: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc [ 51.915092][ T894] ^ [ 51.923073][ T894] ffff88811a74b400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 51.931158][ T894] ffff88811a74b480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 51.939218][ T894] ================================================================== [ 51.947282][ T894] Disabling lock debugging due to kernel taint [ 51.998044][ T30] audit: type=1400 audit(1792023726.381:222): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 52.019864][ T30] audit: type=1400 audit(1792023726.381:223): avc: denied { search } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 52.041314][ T30] audit: type=1400 audit(1792023726.381:224): avc: denied { write } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 52.062627][ T30] audit: type=1400 audit(1792023726.381:225): avc: denied { add_name } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 52.090502][ T30] audit: type=1400 audit(1792023726.381:226): avc: denied { create } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 52.177052][ T403] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 52.186136][ T403] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.194411][ T403] usb 3-1: Product: syz [ 52.198728][ T403] usb 3-1: Manufacturer: syz [ 52.203342][ T403] usb 3-1: SerialNumber: syz [ 52.287081][ T875] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 52.296154][ T875] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.307496][ T875] usb 4-1: config 0 descriptor?? [ 52.548723][ T344] usb 4-1: USB disconnect, device number 5 [ 54.967041][ T403] rtl8150 3-1:1.0: couldn't reset the device [ 54.973128][ T403] rtl8150: probe of 3-1:1.0 failed with error -5 [ 54.981417][ T403] usb 3-1: USB disconnect, device number 5